Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          IW93uRQ//VI0P2jP/ExRb1ZZ0CGYC27+I9K04nTyj9E=
Subject key identifier:   63:CD:A5:5D:51:54:53:CB:5F:87:C8:83:A4:31:76:0A:E6:EB:94:84
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       0198A15F41B4ED29B5DDA982A233BA285548
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          0403
Signing time:             Wed 13 Aug 2025 03:00:31 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:31 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:31 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: 4WqOBgLXYCjgx0xYjhJo7m/2OkGCrzbCIGDVsV5ps1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:41:b4:ed:29:b5:dd:a9:82:a2:33:ba:28:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Aug 13 03:00:31 2025 GMT
            Not After : Aug 14 03:00:31 2025 GMT
        Subject: CN=63cda55d515453cb5f87c883a431760ae6eb9484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d0:73:1b:c8:78:a0:c1:71:73:e4:5c:6c:2e:
                    65:a6:53:42:3a:f0:34:66:48:c0:8a:97:3c:3c:4c:
                    b3:af:b7:55:cf:6a:83:46:6f:de:43:62:93:64:be:
                    c2:0e:cc:3b:6a:56:10:97:9a:2f:3d:da:58:9e:a4:
                    c1:1e:b9:54:09:26:5e:e6:c8:3d:af:c8:bf:af:fa:
                    60:c1:48:80:05:ba:75:f8:d1:2d:88:a9:0d:d4:43:
                    a0:0f:5a:da:98:95:eb:56:05:c4:b0:f4:f8:5c:79:
                    a5:36:f8:c6:59:59:d5:dc:b2:aa:89:ed:32:fa:22:
                    3b:cb:7e:2d:79:98:6b:9d:47:52:a1:68:fb:be:3b:
                    da:a1:2a:83:fd:9d:47:ab:bd:07:54:61:cf:3b:b0:
                    74:ad:f8:68:aa:9e:57:b0:58:2c:d2:7b:08:e2:84:
                    2c:20:54:be:c6:f6:07:12:e6:8e:24:f8:c2:ae:03:
                    27:7c:6f:d3:b4:a9:fb:cc:2d:02:4e:11:41:a6:a4:
                    89:df:2a:29:2f:5b:ef:bd:f4:cd:1a:4c:c2:78:32:
                    d5:56:1b:0d:8d:3f:b6:60:18:bd:79:5b:1e:a5:d3:
                    ee:bb:8f:ee:01:2e:e7:f8:a9:8a:64:f9:77:91:03:
                    0d:05:21:3f:83:32:96:b4:15:34:ac:41:6f:3e:74:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CD:A5:5D:51:54:53:CB:5F:87:C8:83:A4:31:76:0A:E6:EB:94:84
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:7e:25:da:52:1a:7d:2e:38:41:c3:aa:c3:40:27:ae:6e:06:
         49:4d:4c:d7:b0:5b:63:5c:fe:92:cb:e4:79:2a:c5:ba:e7:73:
         26:eb:c1:89:5a:77:b0:3a:0d:ab:2e:b0:bb:85:fe:e8:97:20:
         d3:fc:cc:06:15:01:6e:a2:b1:67:97:7a:89:cc:a6:8c:c1:3c:
         d2:84:c2:f4:7b:55:45:ba:7a:ac:7a:04:51:86:df:79:19:a5:
         74:40:3e:80:b7:0d:1f:9e:0e:e3:c3:d3:3f:66:c7:68:e8:1f:
         b5:67:c5:38:c1:5f:e3:f0:8f:d2:8b:41:c3:af:90:c1:12:ab:
         8b:80:f2:4d:31:b7:62:8e:db:9e:f7:78:b6:6d:b7:d5:66:e9:
         72:14:b1:28:2e:31:5c:5a:64:24:18:a7:97:4b:4e:cf:f3:f4:
         22:7c:bb:97:4a:78:3e:ed:4b:9f:64:25:6a:72:f6:47:ae:9f:
         a1:08:19:73:7d:2a:3c:d1:64:65:c8:76:33:99:79:05:ef:7d:
         b8:a3:b6:52:ba:81:3a:97:b6:87:a4:9f:48:91:cd:7f:3f:4a:
         2c:b0:37:e4:8c:6a:34:0f:13:c4:f5:6e:5f:2d:a9:9f:86:2b:
         40:4a:41:10:e5:f5:15:cb:e6:03:74:b9:0c:da:05:77:99:60:
         d4:3a:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:45 2025 by rpki-client