Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          p2ys3RJ2MDjM1ejWi4IICiXOLAFCKNJ0kUDAMki+Ug4=
Subject key identifier:   C6:D6:38:41:CE:07:D4:A2:EE:C1:D4:11:25:52:EB:96:09:42:77:6A
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       01987BD264774A67103E13EA64436289D9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          04BD
Signing time:             Tue 05 Aug 2025 20:00:42 +0000
Manifest this update:     Tue 05 Aug 2025 20:00:42 +0000
Manifest next update:     Wed 06 Aug 2025 20:00:42 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: Xdyn52T76II83M1OtMGmX7LXYXbrrqpv2tgircOZtQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 20:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7b:d2:64:77:4a:67:10:3e:13:ea:64:43:62:89:d9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Aug  5 20:00:42 2025 GMT
            Not After : Aug  6 20:00:42 2025 GMT
        Subject: CN=c6d63841ce07d4a2eec1d4112552eb960942776a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:df:00:b9:b3:01:e8:7c:28:56:e2:7f:e2:
                    16:f1:c4:17:6e:8c:78:21:35:c7:3f:27:25:d5:94:
                    50:8c:6e:04:27:21:86:b9:f3:90:5a:7b:f5:1c:b6:
                    12:38:37:da:c2:02:25:e3:4c:54:f4:d3:b4:47:a1:
                    82:bc:df:22:3d:a9:7a:77:15:94:24:48:a3:11:08:
                    d2:86:49:bb:96:5c:52:71:93:1b:fc:11:2b:94:d3:
                    85:60:60:73:ca:dc:d3:8f:e1:35:ef:d8:bb:1c:9c:
                    83:ad:fc:98:29:9b:6b:5f:35:fd:7a:43:a6:69:b2:
                    76:ef:d2:5f:2a:93:be:56:d5:f5:4d:af:d5:9e:55:
                    7e:08:c0:43:b8:5a:33:39:8f:fc:cf:2e:fd:50:53:
                    e3:45:64:ad:d0:04:23:cd:cc:52:b5:a4:49:35:52:
                    f5:25:3c:c9:20:78:a3:26:ca:3e:a0:38:16:9f:8e:
                    3b:90:89:90:89:24:fb:83:c3:b1:ef:c3:c1:aa:3b:
                    b5:4c:e1:26:df:5c:4d:2c:6c:b5:b4:4a:b3:b5:08:
                    58:ca:9f:3f:56:07:bd:2d:37:b2:0d:8d:24:af:eb:
                    48:48:2f:6d:0c:b6:71:fe:bf:9c:00:ac:5e:b3:57:
                    66:dc:ab:76:cd:59:ed:ef:c1:8b:58:e9:38:da:a5:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D6:38:41:CE:07:D4:A2:EE:C1:D4:11:25:52:EB:96:09:42:77:6A
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:c7:6c:ae:b8:c4:bf:7f:fb:42:1e:7b:a3:9e:bd:63:0c:
         6c:ef:8d:73:f2:87:a5:6e:9e:67:6b:5a:ec:1d:c0:0d:a2:95:
         f1:31:f0:e4:a4:e1:2e:6c:17:16:6f:09:5e:0e:2f:2d:bb:bb:
         69:c8:7d:0a:6a:6f:67:3c:69:1b:27:39:ed:bb:05:f6:39:91:
         8a:6c:94:40:7e:9f:3a:a4:42:c4:c0:51:b2:02:fb:b7:ae:08:
         0c:a0:35:79:a1:be:eb:5d:c0:aa:9e:00:84:8b:1b:4a:20:02:
         09:eb:c3:f1:fd:f6:76:62:a9:03:4d:3f:4a:e7:22:41:4d:ae:
         d1:3a:80:8e:23:cf:f1:04:bf:5f:81:1b:cb:c1:be:54:c4:a3:
         79:7e:00:1c:58:89:a3:ab:06:d6:96:b4:31:e5:3e:f2:4d:98:
         c5:0b:42:9b:33:7c:b5:a8:79:c5:c9:e5:20:c9:e8:33:de:24:
         aa:3e:50:10:5e:03:9d:8a:da:9c:83:65:9c:6c:cc:43:83:89:
         1a:d7:35:0e:61:56:49:13:4c:18:8b:a1:5f:35:47:b9:9e:59:
         f6:03:08:5f:2b:26:2f:1c:aa:84:44:99:c7:de:18:8a:87:89:
         ab:58:b5:7c:6d:a5:f8:08:73:0d:8a:4d:9b:21:99:76:54:d9:
         96:77:53:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:27:15 2025 by rpki-client