Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
File:                     ppv5fceDSX88N716huWZSs7ngbA.mft (raw, json)
Hash identifier:          5wV9P9CsgJVAiAoW/mlALu55hp4wYu7ajo4vMj5n8z0=
Subject key identifier:   AB:08:2B:3F:0E:DC:3C:3C:79:79:C1:CD:18:E2:B9:C0:18:46:81:88
Authority key identifier: A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0
Certificate issuer:       /CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
Certificate serial:       019883558D63382938E6958D617FE288AC37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
Manifest number:          1017
Signing time:             Thu 07 Aug 2025 07:01:18 +0000
Manifest this update:     Thu 07 Aug 2025 07:01:18 +0000
Manifest next update:     Fri 08 Aug 2025 07:01:18 +0000
Files and hashes:         1: ppv5fceDSX88N716huWZSs7ngbA.crl (hash: 96yDaVl3MZe531kcVg6dxrUOJ844hPmeVtXswmXacl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:55:8d:63:38:29:38:e6:95:8d:61:7f:e2:88:ac:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a69bf97dc783497f3c37bd7a86e5994acee781b0
        Validity
            Not Before: Aug  7 07:01:18 2025 GMT
            Not After : Aug  8 07:01:18 2025 GMT
        Subject: CN=ab082b3f0edc3c3c7979c1cd18e2b9c018468188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:0d:6f:cf:31:c7:bd:e1:b4:52:f4:51:ca:
                    56:33:1b:ed:21:e7:c6:be:09:7d:63:00:8b:9f:02:
                    ae:b2:2e:29:38:fa:24:6e:b7:32:5d:50:7c:fe:9c:
                    c0:0d:5a:bd:82:31:b2:4e:6a:7a:ce:e6:db:3d:f3:
                    b4:eb:d1:c7:fb:02:0a:e2:78:b6:b2:41:23:3a:4e:
                    d7:a2:c7:5b:4e:d2:0a:fc:02:43:c7:34:62:d6:65:
                    d4:18:ff:6a:f1:a3:14:83:20:9b:fe:f2:54:c4:0c:
                    27:cf:ef:04:5a:c0:84:bc:ed:a2:5a:cd:89:04:ef:
                    fd:a9:fe:24:18:67:b8:bb:e0:f8:20:49:c3:c6:0b:
                    37:a4:b9:13:0c:9b:a1:a3:da:7f:7e:87:e7:5b:26:
                    8f:a3:c1:78:ab:6f:43:25:42:ba:5f:78:45:bc:ec:
                    35:2a:b1:03:e9:cc:80:4e:a5:aa:46:ef:11:f9:8c:
                    77:f2:b5:d0:2a:30:f0:df:39:e9:61:0d:97:57:e5:
                    d4:1e:52:55:88:96:fc:79:11:bc:b0:da:04:c2:bd:
                    d8:74:33:6d:4c:5e:42:eb:de:ee:58:c5:c8:3a:b8:
                    34:d0:f9:cf:fb:95:6a:23:43:80:8f:5f:78:cb:f1:
                    ea:d4:e9:ab:a1:04:e0:65:c3:71:3a:fc:e8:02:2d:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:08:2B:3F:0E:DC:3C:3C:79:79:C1:CD:18:E2:B9:C0:18:46:81:88
            X509v3 Authority Key Identifier:
                keyid:A6:9B:F9:7D:C7:83:49:7F:3C:37:BD:7A:86:E5:99:4A:CE:E7:81:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppv5fceDSX88N716huWZSs7ngbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/9e22b8-4eb1-4d2f-a807-7b94fb43b60a/1/ppv5fceDSX88N716huWZSs7ngbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:1e:76:dd:1e:fe:3e:1d:3f:e3:02:6a:31:d5:0d:40:b4:
         48:c3:29:49:90:09:ce:29:4d:f8:a5:33:fc:0c:05:c4:9d:d0:
         23:c0:e5:5c:fa:00:40:82:f5:0e:87:59:08:6b:f4:25:dc:96:
         a9:79:be:b2:ad:2a:d2:0a:df:83:c5:3e:01:9f:fa:cb:75:68:
         78:a2:de:6d:de:c7:cf:51:7b:ea:77:68:43:f9:c8:e7:67:ba:
         89:22:11:88:d2:70:23:51:7b:6d:2c:c2:b4:2a:50:0e:29:70:
         b6:34:7d:49:06:43:df:aa:5f:b1:a1:93:47:74:ec:a2:0f:fd:
         72:44:8e:59:93:d3:a4:1f:3a:eb:d7:c2:d8:ad:9b:27:77:47:
         52:9e:40:9c:1f:ab:a8:76:56:e9:e7:53:df:44:ef:59:d8:a8:
         1c:66:5b:48:4e:7e:0b:ad:39:0d:86:ce:11:34:92:39:b4:2b:
         ad:81:34:83:1e:2a:8b:74:7e:7d:19:ec:66:07:29:48:bf:bf:
         c8:57:b6:24:7a:ae:d2:ef:34:8e:96:b3:90:d5:6d:92:f8:7a:
         9a:fc:69:62:3f:68:7b:35:fa:71:be:0d:37:f7:ba:a5:ee:cd:
         94:e0:a5:27:77:6c:ca:87:84:d3:72:fa:e0:d1:a5:2e:2a:92:
         65:48:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:08:13 2025 by rpki-client