Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
File:                     8KSyRplUYkr0JKVO8WdhwhWLJIM.mft (raw, json)
Hash identifier:          HUmyJCcdLjNWxwm/1t8Kp5DFSdyvor9As1ZnoudspBU=
Subject key identifier:   34:AA:DC:ED:D3:62:CF:BE:1A:B9:EE:6A:AD:32:F6:31:E7:F7:6F:2D
Authority key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Certificate issuer:       /CN=f0a4b2469954624af424a54ef16761c2158b2483
Certificate serial:       01988BEA7830687490C814FBA2A376233098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
Manifest number:          1580
Signing time:             Fri 08 Aug 2025 23:00:55 +0000
Manifest this update:     Fri 08 Aug 2025 23:00:55 +0000
Manifest next update:     Sat 09 Aug 2025 23:00:55 +0000
Files and hashes:         1: 8KSyRplUYkr0JKVO8WdhwhWLJIM.crl (hash: TI53KHV7APJqXN4CbpvEyBi+GpoBEI9kU7OqyCJBliQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:ea:78:30:68:74:90:c8:14:fb:a2:a3:76:23:30:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a4b2469954624af424a54ef16761c2158b2483
        Validity
            Not Before: Aug  8 23:00:55 2025 GMT
            Not After : Aug  9 23:00:55 2025 GMT
        Subject: CN=34aadcedd362cfbe1ab9ee6aad32f631e7f76f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1a:9d:fa:0e:c7:32:7a:a6:f1:d3:19:79:29:
                    07:f5:e1:33:2b:b6:be:e8:c7:05:b4:7b:d1:e2:cd:
                    1f:aa:47:a4:1e:ab:34:cb:ee:56:ec:7a:68:82:0a:
                    38:ac:09:26:7d:90:f6:b4:01:aa:f0:ae:2e:70:f0:
                    17:7e:fd:14:14:e8:92:7e:ac:cc:31:f0:d2:c6:de:
                    2f:87:1a:2c:5f:55:5d:47:23:3d:46:a1:ac:59:3f:
                    03:17:c8:69:36:56:43:15:24:b8:3d:53:e8:8a:3f:
                    ca:b3:f0:7d:44:f9:07:32:1c:31:52:a0:c0:4b:7f:
                    a8:9f:1f:d7:de:af:63:02:48:d9:cb:9a:27:6a:11:
                    69:99:09:83:db:68:58:66:9f:50:b0:1a:4f:b8:f8:
                    a4:02:62:89:f9:d6:3e:8c:8f:00:96:f0:fe:3a:a9:
                    1d:dd:07:87:c9:62:40:79:88:b6:95:f3:78:51:23:
                    30:d7:36:b4:5a:1d:92:46:95:ac:c8:2a:33:e6:0a:
                    0c:f8:d5:45:4b:c4:8a:9c:9c:8f:7d:11:45:1c:61:
                    d5:01:98:04:c4:9f:4d:b2:94:4d:1f:f8:9d:42:a6:
                    c9:5b:94:50:5f:c3:26:a0:d9:60:50:52:8d:1d:d5:
                    bb:e3:f8:23:10:eb:bc:e2:14:e0:58:89:75:91:c8:
                    78:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AA:DC:ED:D3:62:CF:BE:1A:B9:EE:6A:AD:32:F6:31:E7:F7:6F:2D
            X509v3 Authority Key Identifier:
                keyid:F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:18:e8:7b:55:f9:13:ea:9a:a9:b9:a8:2b:3b:db:9e:8c:
         d2:2d:98:b5:ae:f4:27:54:5f:3a:54:09:a8:6d:6f:da:78:91:
         20:39:a2:8b:80:86:3f:7a:44:8e:8c:a0:fc:2e:db:a7:46:70:
         b3:a0:43:82:b9:43:05:59:94:fd:59:6e:6b:2c:5a:cf:2e:a7:
         18:f7:af:bc:7c:db:ad:c8:80:cb:0c:85:e5:46:52:77:e2:0b:
         51:ec:5f:dc:30:00:b1:0f:52:9f:38:ae:93:4b:85:81:28:16:
         dd:ce:ec:5d:f7:7f:85:3d:92:08:66:84:4e:30:72:e4:1d:8c:
         ce:37:b4:e9:54:96:14:d6:b6:9d:fd:70:6b:5b:ec:05:23:f1:
         2f:c6:8a:aa:7a:92:62:b6:6a:b4:66:fa:a2:33:b3:01:63:dd:
         ea:c9:db:44:06:cb:dc:9f:e7:92:ed:4b:20:9a:98:dc:ea:ea:
         c7:b6:77:09:0c:bf:3a:3f:68:b5:bc:2b:a1:cd:85:ed:72:a3:
         f1:5f:5f:49:2e:9a:f2:60:7a:d0:45:7e:21:1b:bc:c0:f3:06:
         85:da:c8:9c:8c:cd:66:20:e1:27:a5:7a:c8:1d:c3:44:6e:cd:
         a2:9c:4c:0e:cb:c6:90:1c:bc:dd:77:63:35:d5:48:42:53:1c:
         e3:0c:c5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:49:31 2025 by rpki-client