Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File:                     S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier:          KyiYh8pT513zMDFpCCetSlS5wXc3js8X5jBrfCOJv8E=
Subject key identifier:   1E:A7:8C:A3:4A:73:A7:45:6B:61:3A:99:38:22:66:60:BB:D8:A8:A9
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer:       /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial:       019873E2ED7B35828526896A658B8F7FC685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number:          0741
Signing time:             Mon 04 Aug 2025 07:01:48 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:48 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:48 +0000
Files and hashes:         1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: g8rUYa1S49N3ougVSSEIi7WsPiom4Wn5dfkKpPMIoQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:ed:7b:35:82:85:26:89:6a:65:8b:8f:7f:c6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
        Validity
            Not Before: Aug  4 07:01:48 2025 GMT
            Not After : Aug  5 07:01:48 2025 GMT
        Subject: CN=1ea78ca34a73a7456b613a9938226660bbd8a8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:88:63:a7:d5:9e:6d:47:f4:56:85:d4:4e:
                    50:cf:68:03:d6:54:46:79:a9:48:d9:7a:26:3b:9c:
                    8a:72:0e:1a:d5:39:9f:69:6a:2f:d0:08:e4:56:81:
                    15:03:f9:d3:be:f5:eb:d7:12:4f:5b:30:31:3b:3d:
                    05:1b:b5:20:86:72:f9:d3:50:42:b0:c2:ee:01:b4:
                    e8:94:17:ba:9c:08:41:d3:d1:94:66:a1:71:e3:0c:
                    db:57:42:ea:84:a0:6e:75:51:5c:12:75:b4:82:93:
                    67:47:d5:fd:d0:6d:e1:50:b2:98:8e:28:c1:22:e8:
                    6d:a2:93:eb:b9:b6:fd:55:aa:68:92:ab:26:b2:2a:
                    9f:ee:f6:47:fa:c7:fb:dd:4c:ab:59:a1:b6:39:4c:
                    1a:b8:14:e8:91:fa:4c:eb:b2:36:0d:65:e2:4c:31:
                    80:ac:d0:f8:7a:cb:1f:24:41:9f:43:e6:dc:1e:d3:
                    51:a5:83:93:7e:cf:50:0a:04:8a:e8:42:02:79:62:
                    c8:2a:62:91:34:21:f1:b4:8a:31:de:d5:21:de:7a:
                    cc:4d:e1:1e:57:fc:93:2d:d1:41:29:5e:cb:42:1c:
                    99:70:63:2e:69:6f:6a:ed:35:e4:56:b6:fd:c3:66:
                    1b:a4:dc:41:97:7c:81:b3:b7:33:91:2c:08:37:06:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A7:8C:A3:4A:73:A7:45:6B:61:3A:99:38:22:66:60:BB:D8:A8:A9
            X509v3 Authority Key Identifier:
                keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:03:a9:af:63:03:6d:47:cf:dd:39:7c:aa:ee:72:7a:e5:
         6f:d1:6c:84:1f:a3:02:d4:c7:64:0f:f4:ac:3b:d5:5b:36:a1:
         85:e5:ba:bf:55:08:9c:64:23:22:6e:8e:6a:d2:f8:3f:2f:44:
         7e:27:09:1e:25:57:d8:e0:94:46:2d:f6:bb:2d:8c:e7:1e:8b:
         41:7d:ec:0d:76:3b:0e:fb:79:73:22:32:b2:3a:1f:ca:4c:7e:
         30:32:26:17:3b:89:96:df:3f:17:f2:ef:f0:aa:30:c3:ee:2d:
         07:cb:34:ce:63:71:1a:06:14:7a:10:04:6c:28:3b:13:61:92:
         e6:f9:37:99:3d:77:ef:d4:1a:fd:b8:3f:f6:a4:b3:ef:8a:b7:
         03:0d:02:a8:42:73:18:c2:73:3d:e9:d7:b3:23:bd:7e:98:5a:
         ab:63:fd:2e:c2:80:78:1c:5e:11:50:6f:96:cf:7f:c3:4f:c8:
         3b:39:84:85:04:b2:af:d3:6d:70:95:ec:7a:8f:df:cc:89:f2:
         18:eb:c1:ee:2e:eb:cc:7e:5e:02:72:77:56:a1:b2:01:25:e1:
         2f:b2:95:d7:ff:b4:b8:9b:bf:39:54:9a:8c:29:a1:80:1d:9d:
         e7:7f:b5:75:b5:60:6c:1a:94:65:16:51:a0:df:9b:05:bf:ac:
         17:12:72:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:34 2025 by rpki-client