Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
File:                     E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft (raw, json)
Hash identifier:          f4kLHsHMSVkQTXdVwaqrMq4dOrF4gfw4f+DF72he72s=
Subject key identifier:   41:F7:1F:A1:8E:9B:41:6E:1F:FA:9E:A5:4A:49:32:5F:C8:8F:3C:B0
Authority key identifier: 13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B
Certificate issuer:       /CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
Certificate serial:       01989749C0037DEFB8F7B4950A78B1BDF885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
Manifest number:          0A4A
Signing time:             Mon 11 Aug 2025 04:00:49 +0000
Manifest this update:     Mon 11 Aug 2025 04:00:49 +0000
Manifest next update:     Tue 12 Aug 2025 04:00:49 +0000
Files and hashes:         1: E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl (hash: vEKhVXEDxj8BhCM/YoaMFEuyw81kSMBvvyf2AxZGmKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:49:c0:03:7d:ef:b8:f7:b4:95:0a:78:b1:bd:f8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ff8a934aeb59aa45a1e55488e3b88be1e0135b
        Validity
            Not Before: Aug 11 04:00:49 2025 GMT
            Not After : Aug 12 04:00:49 2025 GMT
        Subject: CN=41f71fa18e9b416e1ffa9ea54a49325fc88f3cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:2d:31:6c:a8:ca:bb:c3:03:7a:d7:c0:f2:
                    5a:1a:47:57:f1:df:08:50:81:ad:0a:bb:28:c6:c5:
                    d2:b8:68:c1:d5:dd:fd:4a:6d:d3:6c:32:5a:74:2a:
                    25:c7:5c:f5:ba:a2:b3:9e:ce:12:46:9b:82:bc:6a:
                    06:e4:3b:51:06:b5:30:46:47:47:42:93:6d:5e:52:
                    00:78:62:4c:0c:4b:37:56:72:2c:01:87:3d:de:80:
                    3d:1f:43:d4:cc:c7:79:3f:5e:ec:98:73:4f:ce:04:
                    24:8e:11:51:84:a3:60:25:aa:f7:02:70:ae:bf:38:
                    2e:4e:46:73:1b:ca:a9:fc:1c:1a:ce:0c:f0:6c:fc:
                    90:16:ce:f5:43:d2:94:57:f6:cf:f1:17:be:50:86:
                    b1:69:02:f2:f1:0b:70:45:32:96:47:a9:89:03:9b:
                    3a:fb:89:40:e9:eb:18:26:6a:d1:43:1f:4a:59:1a:
                    d7:a2:8b:67:ba:28:2d:21:71:a8:8f:b5:4f:58:8e:
                    7d:7a:cb:12:a7:9d:fd:56:ce:01:55:d4:a2:5f:38:
                    ec:b5:3e:18:c5:4d:05:6b:7c:a8:61:a3:57:12:7d:
                    3d:47:2b:3b:b4:30:77:34:8a:3c:6d:e2:7d:84:9e:
                    bd:23:26:f9:53:fb:d9:58:06:a2:42:40:00:0d:4a:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F7:1F:A1:8E:9B:41:6E:1F:FA:9E:A5:4A:49:32:5F:C8:8F:3C:B0
            X509v3 Authority Key Identifier:
                keyid:13:FF:8A:93:4A:EB:59:AA:45:A1:E5:54:88:E3:B8:8B:E1:E0:13:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_-Kk0rrWapFoeVUiOO4i-HgE1s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/c92c58-c727-4de0-84a6-7cf4dc67aa70/1/E_-Kk0rrWapFoeVUiOO4i-HgE1s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bb:60:61:ab:e6:b8:e5:a0:a1:39:69:2d:9a:fe:6e:68:5c:
         77:ef:77:dc:cb:04:68:8a:52:cc:d0:00:2c:16:4a:3d:4c:78:
         e5:f4:ee:25:5f:e5:31:9e:40:00:19:76:e4:9e:2b:90:95:73:
         68:c1:bd:c3:4b:aa:0a:d1:83:c7:40:13:a2:0d:37:3a:df:9f:
         c8:c1:c2:ca:80:b1:b8:23:af:f2:dd:22:ea:be:94:cd:98:1f:
         0e:5a:82:b5:9e:b4:84:0d:67:34:e5:b5:e8:ec:39:49:ac:98:
         ef:a9:33:5c:3c:78:36:6b:4e:b7:09:0b:35:9e:ae:01:47:74:
         51:68:48:35:e0:f6:33:96:a1:14:93:08:78:01:23:f5:93:f0:
         10:a1:c8:42:11:bd:d3:2d:8c:55:22:29:8b:df:e6:c0:62:58:
         62:1e:25:13:93:9c:1c:fb:33:39:12:c7:85:4a:ed:d8:1d:60:
         0a:ba:ab:f2:6b:aa:d4:42:dc:15:c1:99:77:d1:3e:91:7a:24:
         e2:87:f9:53:cd:a9:8d:10:b0:d9:2f:79:59:27:46:5c:9e:5a:
         cb:6b:53:74:27:b8:7c:55:a0:2a:e7:8c:4f:16:0b:9d:c9:18:
         11:74:b7:68:21:f2:51:b2:06:3a:7e:2a:44:dd:e3:cf:31:0f:
         d9:29:ee:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:24 2025 by rpki-client