Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
File:                     8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft (raw, json)
Hash identifier:          KdAysFCvefO3ehRIEoK7Q6T9uLLlHqNwlPwgGGbm+5s=
Subject key identifier:   56:5C:0B:4D:12:3F:4B:F6:89:BB:E0:DC:A9:CC:D4:C1:44:7D:76:66
Authority key identifier: F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0
Certificate issuer:       /CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
Certificate serial:       0198922388D72E9E625962E559E0762C2020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
Manifest number:          1624
Signing time:             Sun 10 Aug 2025 04:00:59 +0000
Manifest this update:     Sun 10 Aug 2025 04:00:59 +0000
Manifest next update:     Mon 11 Aug 2025 04:00:59 +0000
Files and hashes:         1: 8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl (hash: VelhCtnDMR4ODBpQBd8tQKvbuAIccBI9glO6IQw3ywI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:23:88:d7:2e:9e:62:59:62:e5:59:e0:76:2c:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1454ab3c3e09b655cb4725539ff6e69931c46b0
        Validity
            Not Before: Aug 10 04:00:59 2025 GMT
            Not After : Aug 11 04:00:59 2025 GMT
        Subject: CN=565c0b4d123f4bf689bbe0dca9ccd4c1447d7666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:65:29:f0:5d:3d:2e:26:f0:7c:a6:8a:50:68:
                    3d:7c:38:56:9a:d1:16:70:5e:40:78:35:8c:28:f3:
                    8d:81:3d:e7:49:25:04:54:a9:7c:67:58:cc:c2:61:
                    13:ea:1d:9b:67:32:0e:4b:da:db:4b:36:9d:cb:66:
                    23:77:fa:ea:b6:b9:c0:90:65:0c:45:fa:44:72:89:
                    1c:2a:53:0f:3c:28:1f:2b:47:d8:13:43:42:6a:ca:
                    42:83:07:20:d7:a3:fd:16:ec:3e:a2:56:b3:da:8b:
                    cd:ee:33:3a:4e:49:9b:f7:fd:a6:7e:1f:9a:3b:b1:
                    ed:12:0f:26:ca:17:e8:00:65:56:28:12:4a:63:a7:
                    5a:fa:01:a4:9c:65:0b:5e:42:92:4e:a7:9f:a5:b5:
                    04:b0:02:db:c3:91:48:42:4e:d0:fd:c9:09:1a:0a:
                    a9:d3:2c:ad:75:54:92:2d:4e:5c:86:87:c4:b4:f5:
                    99:40:9c:0f:0c:d3:60:35:a2:16:d8:fa:2d:47:1e:
                    53:90:70:b8:59:19:27:e4:50:fa:68:f5:c4:1b:bf:
                    79:68:38:19:05:74:e3:bf:4f:f3:10:e9:e2:30:92:
                    25:fa:62:00:4e:7d:a8:d7:98:c0:90:4d:73:73:4f:
                    5a:3a:15:ed:35:33:67:a9:20:0c:6a:1d:c2:04:e8:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5C:0B:4D:12:3F:4B:F6:89:BB:E0:DC:A9:CC:D4:C1:44:7D:76:66
            X509v3 Authority Key Identifier:
                keyid:F1:45:4A:B3:C3:E0:9B:65:5C:B4:72:55:39:FF:6E:69:93:1C:46:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UVKs8Pgm2VctHJVOf9uaZMcRrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d31eab-31e1-4964-962e-e15bc9650aab/1/8UVKs8Pgm2VctHJVOf9uaZMcRrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:b9:0b:26:35:1e:f3:00:ea:f6:05:d0:d0:fa:31:05:d8:f8:
         3e:79:29:1d:fa:7d:ab:f1:38:02:32:e6:d3:bd:e8:c6:3d:a2:
         c3:b6:4b:0f:92:ef:55:a9:88:b2:e2:94:c8:93:cf:9b:a4:2f:
         36:6f:af:b7:dc:63:23:fc:f8:c1:35:01:c0:47:56:9d:cb:8d:
         35:25:dd:50:50:dd:40:77:0f:b1:09:e8:17:1d:d7:1c:c7:06:
         34:27:5b:73:0b:94:b7:fb:f2:bf:bd:1a:23:ab:bb:aa:5f:ca:
         1e:e9:84:71:6b:f6:99:99:b3:82:83:43:c8:a7:ae:bc:c1:cb:
         b1:e0:38:7f:e0:a1:55:38:e7:0e:c4:b1:14:78:55:64:2f:cc:
         9e:49:12:83:a1:47:7c:07:41:56:1b:d6:72:81:95:b2:b5:fa:
         af:b4:e8:3d:42:74:af:b1:a1:e7:ed:64:9b:c0:59:8f:47:24:
         15:fc:6e:7e:70:74:5b:e0:4a:a1:52:1f:67:52:4f:22:69:fa:
         12:39:2b:29:fc:e6:ac:7b:b8:7b:43:75:c1:15:64:8b:29:56:
         68:0d:df:db:05:cf:35:e7:2f:24:76:b2:be:c7:bb:8e:25:bf:
         a7:b9:e9:be:cb:bb:5e:9d:dc:45:83:2c:8c:50:b9:dd:58:48:
         55:22:d9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:53 2025 by rpki-client