Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
File:                     Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json)
Hash identifier:          xMk69sfe04Ludug92DbiE+iko5nSUkPWOycMW3JD1ak=
Subject key identifier:   9D:45:6E:1A:A3:56:CC:86:72:6D:60:BE:B5:45:63:80:F0:11:F5:EE
Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF
Certificate issuer:       /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
Certificate serial:       019894B88FE9478EE3430CCF05EE708F3F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
Manifest number:          15E3
Signing time:             Sun 10 Aug 2025 16:03:00 +0000
Manifest this update:     Sun 10 Aug 2025 16:03:00 +0000
Manifest next update:     Mon 11 Aug 2025 16:03:00 +0000
Files and hashes:         1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: T4uQLxF0KftjvQA45v5XJ2CfF3lQioqBBXYOoBHb1zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b8:8f:e9:47:8e:e3:43:0c:cf:05:ee:70:8f:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef
        Validity
            Not Before: Aug 10 16:03:00 2025 GMT
            Not After : Aug 11 16:03:00 2025 GMT
        Subject: CN=9d456e1aa356cc86726d60beb5456380f011f5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:0a:07:ec:41:b1:e9:71:64:a8:6c:a0:5d:
                    da:92:e6:18:f1:32:44:c6:76:a9:58:92:22:f2:3e:
                    5f:2b:6b:d1:c4:12:d1:b4:ec:30:88:49:93:6e:75:
                    53:12:b0:e2:7c:73:09:19:dd:3d:6e:54:d6:41:84:
                    d5:53:b5:e9:02:34:a1:c4:44:dd:8a:30:0f:a4:59:
                    9b:cf:39:29:87:81:62:03:0d:37:1b:82:94:39:7e:
                    59:70:fc:d3:61:df:60:cb:dd:6d:7c:21:76:a0:9d:
                    02:0e:be:ec:0c:2c:92:d8:b3:79:47:81:00:12:3b:
                    30:6d:aa:da:69:9c:37:40:1a:01:5d:da:5d:da:83:
                    5c:52:28:c6:02:e0:c0:28:8c:41:c6:54:ce:15:c2:
                    e4:4a:5c:6b:af:bf:be:a3:47:a8:c3:64:ad:9e:95:
                    98:81:be:01:67:0b:b7:a6:bf:89:e6:95:2d:95:e2:
                    ea:90:88:e6:6b:12:65:83:c7:1f:35:6a:15:c7:b0:
                    c4:a2:3d:1b:95:9d:d6:01:92:d6:fa:23:8e:03:24:
                    38:7f:ca:08:7d:8b:c5:ba:33:aa:d6:a0:4d:53:89:
                    c5:bc:19:71:1e:f2:d9:97:e9:d1:17:1c:ad:35:e1:
                    c5:96:93:1f:cf:e6:27:6d:43:ca:59:bf:3f:51:01:
                    06:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:45:6E:1A:A3:56:CC:86:72:6D:60:BE:B5:45:63:80:F0:11:F5:EE
            X509v3 Authority Key Identifier:
                keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8b:6b:26:e1:82:a2:eb:31:d8:8b:4a:9a:e9:54:c4:21:70:
         f9:47:0a:08:d0:3f:05:9b:92:2f:b2:be:88:32:6f:2b:78:04:
         7b:02:0c:48:4f:23:9c:4d:64:ea:ce:bf:23:db:4c:a3:72:0b:
         5d:4e:25:12:f9:23:4c:3a:0e:1f:65:b5:44:6c:83:02:fc:38:
         d0:4b:3b:81:56:38:3c:4c:93:48:71:8d:69:0d:01:5a:59:c0:
         69:b8:03:2d:9c:6b:f5:dd:67:9f:57:e6:1e:25:af:90:25:c1:
         03:2c:75:1e:03:4d:1d:b7:72:02:6d:74:48:33:6b:97:fb:7c:
         05:20:9b:29:cc:aa:c9:af:fa:49:42:89:b2:13:8a:94:e6:c7:
         06:98:c8:0d:e7:61:6d:7b:bb:6f:ad:7c:5f:13:da:3b:2f:06:
         f8:05:42:11:d2:5c:ab:8f:ab:82:dd:77:fc:80:96:32:fb:fa:
         6d:1f:73:75:a8:33:2b:f2:a1:a5:f6:08:32:18:18:a2:c2:52:
         76:99:e0:aa:96:45:e1:a6:13:33:05:7f:55:04:45:07:cd:93:
         9a:e4:b3:5a:95:a5:16:fb:a2:aa:1e:47:de:29:b0:2f:aa:a0:
         f6:bd:74:4c:79:cc:f3:f8:67:c1:80:3c:12:83:15:37:0e:e9:
         74:f4:40:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:15:32 2025 by rpki-client