Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File:                     _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier:          v+TEWVmemVqf14+u7DElKEdOxVd46gecHfzdmYTzzUg=
Subject key identifier:   10:18:FC:36:D7:10:3A:EB:A6:25:2C:99:55:71:3B:26:D2:24:32:EA
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer:       /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial:       0198906BCBDCDED3805DB899E8847FEB9F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number:          DA
Signing time:             Sat 09 Aug 2025 20:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 20:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 20:00:40 +0000
Files and hashes:         1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: Jr/H+CkDM4NmKrx40XFz5nQGbiAXR95IyQ+pQTcW2Xc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6b:cb:dc:de:d3:80:5d:b8:99:e8:84:7f:eb:9f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
        Validity
            Not Before: Aug  9 20:00:40 2025 GMT
            Not After : Aug 10 20:00:40 2025 GMT
        Subject: CN=1018fc36d7103aeba6252c9955713b26d22432ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:f4:94:fa:47:0f:35:67:55:05:6e:3e:54:
                    96:d1:ef:7a:ef:17:07:35:ce:a5:0e:d8:4b:2d:da:
                    2e:53:b7:00:48:19:19:1b:b6:6c:d5:f0:c1:6e:75:
                    21:60:7c:5a:7f:dc:b6:7a:05:a7:19:73:da:04:40:
                    83:2b:94:96:c7:b5:ee:fc:f1:c3:34:1c:9c:ef:bd:
                    b9:ce:28:4a:01:47:38:89:1c:94:01:13:6a:89:a0:
                    19:74:35:b7:60:73:60:75:25:d4:7b:4b:2f:a6:31:
                    23:22:bf:c0:63:15:af:52:3a:a2:a4:ec:62:22:47:
                    87:39:51:c6:13:18:3f:3c:ce:1f:57:b8:d8:6a:7d:
                    ee:c4:6a:39:55:8e:b3:01:9c:95:53:ef:d0:4e:b3:
                    1d:8f:17:cf:b6:5d:de:65:6c:ce:15:0d:52:37:41:
                    57:52:73:b2:d8:c2:7d:cc:8f:e8:15:e6:46:d9:5b:
                    a6:45:d5:75:a6:fd:66:87:22:bb:dd:ea:54:13:21:
                    b8:cd:41:52:de:a7:6e:84:cf:51:e2:74:b0:30:48:
                    2d:15:13:80:30:1b:dc:3f:a2:f5:9c:75:6a:82:d6:
                    f9:e8:ab:08:c2:6f:09:c1:0e:13:5a:3f:38:09:54:
                    46:22:b6:2b:98:39:7c:a6:d2:d6:22:73:37:f3:cf:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:FC:36:D7:10:3A:EB:A6:25:2C:99:55:71:3B:26:D2:24:32:EA
            X509v3 Authority Key Identifier:
                keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b1:85:77:fb:c4:02:e9:d5:f4:70:41:d4:5e:ba:e0:2d:28:
         d9:9d:83:c2:53:3e:f6:6f:06:26:d1:4e:9a:6d:0f:6a:3d:e7:
         5b:66:9e:48:f2:57:a9:2b:9c:e5:0d:73:cc:9f:ec:ec:12:e4:
         30:0b:50:7a:fa:c5:57:d6:12:73:ee:e1:8a:ea:cd:cf:a4:13:
         f7:53:ac:99:27:b3:f9:b5:de:ac:e4:a4:32:42:36:ce:cf:ea:
         e7:7c:10:c1:a4:67:e7:93:3a:02:b0:a3:1c:44:f3:90:d1:c1:
         5e:9c:84:04:1e:c0:c7:8e:53:c3:2b:c6:e9:d1:59:8e:63:92:
         28:08:44:1c:cd:50:8f:f8:6a:17:c0:7a:47:72:d5:0a:a5:be:
         5b:0f:24:72:da:5c:bb:59:6c:80:d2:24:0c:41:c2:09:4d:ff:
         bb:21:2f:ba:72:fe:7b:62:10:37:b6:86:89:e9:d8:2e:83:96:
         4f:49:47:1d:ab:a7:09:f3:53:a7:d6:5c:97:ff:b2:8d:9b:ad:
         63:c4:a4:3a:3e:fd:52:df:71:4d:01:c4:02:e6:90:ac:e8:ef:
         29:bb:c0:73:f5:1d:5a:57:60:e2:5a:11:f9:05:99:a1:5f:b8:
         ab:70:b7:23:92:61:9a:8c:0a:ba:1d:bf:ca:7c:93:2e:2d:8a:
         80:68:4c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:39:06 2025 by rpki-client