Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File:                     Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier:          EPow2jmOk01rkwdOOhII45gaBLCzx3btia9sweqTf+Q=
Subject key identifier:   E8:DE:2E:75:38:69:2F:FD:78:62:FD:62:F6:A1:39:43:5D:3B:0F:48
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer:       /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial:       01988B7D03D75CDD9E6CF3ECD37F5225A3F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number:          0BFD
Signing time:             Fri 08 Aug 2025 21:01:22 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:22 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:22 +0000
Files and hashes:         1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: UHgD5aJsPLmV5l+kXhyV4yj1dlzcgfn3cmP8F1Q79gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:03:d7:5c:dd:9e:6c:f3:ec:d3:7f:52:25:a3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
        Validity
            Not Before: Aug  8 21:01:22 2025 GMT
            Not After : Aug  9 21:01:22 2025 GMT
        Subject: CN=e8de2e7538692ffd7862fd62f6a139435d3b0f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:83:80:c4:fc:a1:06:37:3a:16:41:23:d4:
                    3d:eb:5d:ed:db:9b:ac:9b:55:bc:73:bc:23:49:97:
                    f1:2b:f7:b0:dd:c2:65:44:bb:cf:75:af:07:c7:3a:
                    a6:72:2e:24:99:a0:c1:6d:5a:fb:b8:a2:89:bf:3f:
                    c2:21:2b:60:cb:13:a2:c4:aa:9d:31:27:76:90:d6:
                    1c:8c:83:9f:4f:6d:a4:ce:a9:7d:3a:de:1a:7b:e4:
                    59:24:95:37:ac:ce:82:fe:b4:40:d3:9e:93:78:96:
                    af:dd:1c:22:02:8f:75:0f:3c:ff:b4:98:9c:1f:d3:
                    06:92:92:1e:04:e7:68:5d:44:c9:23:b4:6c:7c:2a:
                    47:68:e0:e0:8f:98:07:6f:d5:32:43:1f:2c:17:27:
                    47:38:20:da:1b:26:c4:cd:33:dc:ba:81:6c:cf:1e:
                    64:01:59:a4:92:5c:2c:93:d6:16:69:6b:d2:e6:5d:
                    d8:80:c7:33:10:73:2f:64:fa:21:b7:9b:bf:9d:24:
                    cc:67:f7:46:86:70:dc:bb:6b:a1:42:58:a4:25:52:
                    ff:2b:06:e2:b7:f6:b1:3a:4d:b7:f5:a2:c5:64:c9:
                    5c:11:59:a1:99:63:0d:11:9e:f3:58:52:c9:82:fc:
                    8d:25:a4:9f:9f:09:30:bc:5d:81:39:fb:26:20:10:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DE:2E:75:38:69:2F:FD:78:62:FD:62:F6:A1:39:43:5D:3B:0F:48
            X509v3 Authority Key Identifier:
                keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:35:b6:b2:f0:bd:4a:7d:04:03:c5:00:1c:84:aa:10:8c:
         27:c0:ad:2b:ae:c7:e1:b8:3a:a5:ea:d7:9c:02:dc:b7:26:ae:
         44:42:e7:d9:0c:68:8f:80:d8:0f:21:91:56:6e:c0:fe:2b:82:
         14:10:3a:5d:17:96:17:53:06:c7:de:ef:77:28:df:84:93:be:
         ff:de:e7:ad:b4:d7:25:a9:0d:85:93:77:9e:d4:df:3b:b0:94:
         e7:0f:15:6c:24:d2:03:d7:3a:f8:d9:aa:24:b2:ac:5b:8f:87:
         09:46:cb:84:d4:30:8e:ca:01:97:e5:d2:57:e8:2c:c7:94:22:
         7b:4a:26:37:b1:15:ac:ee:04:42:fc:00:15:ab:ae:ac:44:f7:
         a6:fa:56:db:e6:50:f5:a6:04:f2:97:3e:18:66:eb:e9:54:11:
         8e:c1:69:c2:5e:24:19:a1:91:dd:32:1b:65:a7:a7:ec:9c:14:
         01:63:3e:bc:88:b9:d2:c7:ba:c6:0b:9d:33:67:df:cc:19:b9:
         22:15:f7:14:64:62:5e:96:8e:95:e2:a0:e9:ec:54:d2:0c:b5:
         00:e0:b2:3d:d8:76:d4:20:8f:64:aa:32:57:73:4c:c1:4e:ca:
         ec:27:c6:b7:b0:4e:35:f4:80:5d:7e:e7:c2:95:86:e4:c3:96:
         bc:68:7a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:45 2025 by rpki-client