Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File:                     _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier:          VM9lvTEV82B7ByFrieyB9D7ikD255TLmY79EyaERRg0=
Subject key identifier:   4E:77:9A:94:1C:3C:CB:D2:08:BE:A5:E0:8A:06:CE:97:0E:43:ED:51
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer:       /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial:       0198820C5E7271460722BFEF82DC78AA38C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number:          1619
Signing time:             Thu 07 Aug 2025 01:01:45 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:45 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:45 +0000
Files and hashes:         1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: fmvyStVNadWuIh1X6RIrPuqJePS5pBNyG57WPavDqGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:5e:72:71:46:07:22:bf:ef:82:dc:78:aa:38:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
        Validity
            Not Before: Aug  7 01:01:45 2025 GMT
            Not After : Aug  8 01:01:45 2025 GMT
        Subject: CN=4e779a941c3ccbd208bea5e08a06ce970e43ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d0:be:9d:f3:90:de:c1:66:a8:ae:c2:94:17:
                    8b:55:e4:33:da:fd:14:2f:71:94:8e:5c:c0:da:dd:
                    89:fa:85:e5:63:16:f5:c6:50:e8:99:27:b1:fb:df:
                    81:fd:bb:e7:86:c9:1f:31:d4:b1:a6:ee:e7:7e:08:
                    30:d6:57:12:99:ab:01:13:36:c6:ea:a3:21:e8:a4:
                    7b:08:97:89:e6:53:1d:41:48:c1:ab:fe:64:b3:4a:
                    5f:a5:43:8d:bb:87:a0:4f:7c:19:d2:6b:2b:13:5b:
                    fc:da:43:4d:55:17:93:75:1f:7f:01:1d:25:08:c4:
                    f5:3f:70:64:ab:c2:13:ea:a7:68:66:a0:21:7d:80:
                    13:75:2a:26:72:f9:9f:bf:e9:84:86:df:c2:ab:b0:
                    b6:7a:14:ae:5a:07:1d:5a:78:1d:d4:aa:87:5d:7c:
                    42:98:4d:6d:a5:73:0c:82:62:64:fa:13:ad:8d:86:
                    eb:87:b9:e9:40:c8:9a:dd:19:30:34:a8:ff:c4:03:
                    8e:80:c5:87:61:71:99:cc:c2:06:af:1c:ba:4d:c5:
                    33:29:8c:c4:79:c9:68:c1:3a:6b:6d:c9:28:ca:f1:
                    02:c3:85:9d:51:d1:38:f5:a7:88:85:80:7e:e9:9c:
                    11:ee:cf:45:14:e2:f8:c6:dd:51:b0:66:f4:42:d9:
                    43:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:9A:94:1C:3C:CB:D2:08:BE:A5:E0:8A:06:CE:97:0E:43:ED:51
            X509v3 Authority Key Identifier:
                keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:42:48:31:03:f3:74:b7:cb:d5:41:1a:2f:24:6d:4a:4b:14:
         fb:83:d9:44:25:b0:64:01:42:6a:0c:e5:7d:58:c0:ec:84:a3:
         13:81:d7:0a:28:80:23:d8:b3:fd:6c:07:db:82:59:47:be:4d:
         15:c5:c3:1c:49:41:a2:f4:3d:46:5a:d4:22:ce:25:ad:f7:96:
         a7:5e:4e:67:98:ab:b2:b8:82:b1:a8:96:31:7b:f2:18:9d:0e:
         66:b4:05:a8:f0:75:dd:72:3e:fa:a4:14:b0:08:0a:27:a0:97:
         aa:a2:24:bc:dc:5e:33:1e:b2:6d:b9:b5:e1:f4:a9:3b:6f:91:
         eb:51:3a:03:3c:46:82:41:3e:f5:5a:a5:28:4f:73:df:d2:f6:
         54:b3:d6:8b:9f:b9:c5:47:dd:7e:92:9e:ae:f7:ac:47:63:b0:
         b4:aa:ca:aa:9a:9d:b2:b9:2f:e9:ac:60:b3:3e:3d:6f:de:03:
         c7:20:e1:8b:c8:30:d3:d8:c3:c5:7c:09:1b:69:43:b3:c4:7a:
         b8:1a:21:cc:23:0f:ba:02:70:8f:31:ad:7d:ea:e4:0d:eb:02:
         48:01:6e:54:c2:e2:c5:ce:6a:be:ed:d5:4f:23:38:fc:90:d8:
         e5:d9:d0:63:5a:f3:69:0c:db:6f:7b:0f:86:33:cb:5f:da:c7:
         8c:3a:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:22 2025 by rpki-client