Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File:                     4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier:          N0u2VlpNdKPKYomPC87SqzN1j6R88VBjxVy3egCPLKY=
Subject key identifier:   94:C8:65:8D:5D:E1:6A:8D:BB:A3:D1:E9:0A:C3:D9:96:E8:D8:1D:C4
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer:       /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial:       0198A128759CCF00E49393001AACFE051238
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number:          15BD
Signing time:             Wed 13 Aug 2025 02:00:39 +0000
Manifest this update:     Wed 13 Aug 2025 02:00:39 +0000
Manifest next update:     Thu 14 Aug 2025 02:00:39 +0000
Files and hashes:         1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: 8w68Y4LTL12kXbaLmz2gDi+5J6foQb4JUPYMm9F79mE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:28:75:9c:cf:00:e4:93:93:00:1a:ac:fe:05:12:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
        Validity
            Not Before: Aug 13 02:00:39 2025 GMT
            Not After : Aug 14 02:00:39 2025 GMT
        Subject: CN=94c8658d5de16a8dbba3d1e90ac3d996e8d81dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e7:d9:f5:da:10:c0:da:9a:1d:3a:9a:d4:1d:
                    cf:48:36:73:6a:89:36:3b:eb:73:da:d5:c4:63:3d:
                    4a:c5:82:d1:6d:bb:db:f8:e9:15:c9:53:bb:8f:8b:
                    69:54:a9:9c:ae:bf:84:cc:6a:97:cb:37:f8:00:be:
                    fe:53:22:65:6f:ad:1c:06:6f:85:37:e1:df:1e:5b:
                    de:04:fe:17:2a:f2:38:e8:d9:90:2c:87:43:40:6c:
                    91:62:67:c7:11:cd:38:cb:00:8f:ab:d6:cb:f8:46:
                    0b:ae:94:41:80:b3:fb:90:61:11:21:e9:df:e0:46:
                    c7:9d:29:08:32:d4:31:f7:84:ab:ba:51:56:03:98:
                    9e:17:04:83:41:20:ce:01:8a:7e:95:ff:1e:c7:a9:
                    ab:47:c1:5c:02:8e:66:99:be:e1:e9:56:10:66:00:
                    3f:d8:6d:34:f2:7a:9b:da:80:28:42:1b:2b:9f:04:
                    da:28:af:49:be:87:b6:f0:4c:cd:cb:8f:8e:31:7f:
                    31:fa:10:29:6c:95:19:4f:24:25:b0:bb:38:a8:ca:
                    30:f1:33:24:62:d4:ae:e0:15:1c:d5:f1:82:e3:f3:
                    86:85:9c:1f:96:be:fa:d9:4c:2b:13:37:90:09:08:
                    3b:ce:d7:16:a0:c5:72:f6:95:12:b7:37:2d:47:30:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C8:65:8D:5D:E1:6A:8D:BB:A3:D1:E9:0A:C3:D9:96:E8:D8:1D:C4
            X509v3 Authority Key Identifier:
                keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:28:df:7f:64:f7:c8:3e:19:8e:78:6a:22:b5:8c:78:2f:ae:
         65:4a:b5:77:ea:ff:d4:c0:61:b5:b0:6a:4f:7a:33:d1:d8:c4:
         d4:33:2d:a8:b0:89:21:c7:a3:b3:0a:60:8f:2e:58:c8:9d:35:
         92:e4:9e:e9:16:9c:1a:ef:46:4f:f7:b3:63:f0:c7:c3:0e:40:
         2c:4d:68:e8:0b:3f:51:5d:85:21:95:f4:a2:71:38:4b:bc:76:
         72:d4:61:25:1f:a9:99:0f:9a:6e:d2:8e:66:76:a9:60:77:00:
         d5:95:78:f7:c0:1c:7f:e9:fa:2a:69:90:f0:11:dd:49:44:65:
         bf:ce:10:a7:94:10:71:63:b0:43:e1:a4:fa:ec:8d:b1:2e:fb:
         3c:8e:2a:62:a8:03:46:67:4c:56:ca:bc:54:a4:4c:38:3d:d9:
         42:18:41:39:68:38:f2:78:3b:e5:0a:f0:c5:24:7d:8c:56:e5:
         5a:d4:cd:e4:d4:49:62:c9:12:c1:26:6e:01:f8:dc:69:01:07:
         26:72:64:52:be:af:a1:c0:35:4e:8f:c1:96:1f:ff:06:e9:56:
         4a:b9:c4:31:5c:b9:2f:92:c4:8c:c6:6f:fc:6c:94:df:59:ab:
         34:c1:71:8a:90:ba:9c:0f:f9:fa:2c:07:14:a1:cd:1e:bc:1e:
         d5:0b:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:54:04 2025 by rpki-client