Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
File:                     v5ulghwIWljj4dM6TvQem3YQXuU.mft (raw, json)
Hash identifier:          1FmLwBdWg7cWlx9MER5WucMTwJsjnscod6VqXHT2WlA=
Subject key identifier:   39:83:28:1E:52:CF:1A:33:F0:79:EF:A7:37:32:81:5E:43:94:B0:9B
Authority key identifier: BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5
Certificate issuer:       /CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
Certificate serial:       01988EEC0B3FE74366559DDDEDD5E07BFA43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
Manifest number:          11E9
Signing time:             Sat 09 Aug 2025 13:01:30 +0000
Manifest this update:     Sat 09 Aug 2025 13:01:30 +0000
Manifest next update:     Sun 10 Aug 2025 13:01:30 +0000
Files and hashes:         1: v5ulghwIWljj4dM6TvQem3YQXuU.crl (hash: KWlI+N0EzOPEQo7kPYuvXuNAJA0BoUZfWLzc5UPDoJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ec:0b:3f:e7:43:66:55:9d:dd:ed:d5:e0:7b:fa:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ba5821c085a58e3e1d33a4ef41e9b76105ee5
        Validity
            Not Before: Aug  9 13:01:30 2025 GMT
            Not After : Aug 10 13:01:30 2025 GMT
        Subject: CN=3983281e52cf1a33f079efa73732815e4394b09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:f6:25:8d:43:da:31:b7:55:7a:dc:34:1b:
                    a7:72:cf:8b:f3:6e:db:73:ba:f0:20:5f:80:d9:8e:
                    82:c9:d9:3d:ca:12:85:2c:2d:5e:3a:d1:ea:55:f1:
                    e4:bf:de:7b:f1:b2:64:f9:f4:c7:b6:54:b8:76:e6:
                    59:d6:e7:a9:14:eb:40:3c:29:67:21:2e:39:9e:e3:
                    c5:d3:8e:9e:bd:3b:92:f8:65:61:d4:f5:81:75:e3:
                    f9:38:ea:bd:42:c8:a4:41:97:c7:76:ec:d2:ad:dc:
                    bb:ba:89:8d:9a:b0:d2:4d:0f:64:38:18:70:4d:1b:
                    df:7d:40:48:ad:d7:26:85:3e:78:fc:6c:82:5e:65:
                    57:89:85:82:30:7e:78:d5:cd:e5:a8:7f:cb:13:1f:
                    c8:94:8c:14:e0:83:a8:e4:d1:35:3f:ca:02:f5:8e:
                    86:8d:d7:a5:13:8a:23:da:56:b7:00:05:f8:ff:9f:
                    46:60:62:d3:71:df:cb:ba:19:68:19:5d:f9:2e:78:
                    3e:ce:ee:e0:bd:07:28:fa:9f:ca:9f:41:0f:87:c7:
                    21:a9:4e:6e:34:9a:67:33:cb:17:34:3f:67:07:87:
                    a6:c3:7b:05:0e:2c:05:68:a5:0f:a7:e2:15:f0:dc:
                    99:c0:95:9d:2b:b7:92:c2:12:21:72:bc:46:f7:83:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:28:1E:52:CF:1A:33:F0:79:EF:A7:37:32:81:5E:43:94:B0:9B
            X509v3 Authority Key Identifier:
                keyid:BF:9B:A5:82:1C:08:5A:58:E3:E1:D3:3A:4E:F4:1E:9B:76:10:5E:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5ulghwIWljj4dM6TvQem3YQXuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fbc8b5-c5f5-40b8-8a74-bfafb29371cf/1/v5ulghwIWljj4dM6TvQem3YQXuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:ab:3d:ff:77:41:01:49:e9:36:ad:59:26:5a:4a:06:07:
         b5:e6:d9:cd:97:52:c2:ad:75:4d:f9:94:f8:a6:db:bc:a0:8a:
         93:55:90:73:1b:4e:47:01:47:5a:fb:22:07:b3:71:e9:72:4a:
         21:86:7a:56:a6:f8:42:1e:60:15:5d:ca:5b:c0:82:d0:1b:b1:
         d7:63:bd:e5:1d:63:f4:74:6a:99:6e:91:74:c4:c6:57:af:57:
         c7:a1:0b:b7:03:8e:b8:dd:ec:9a:e6:48:b2:46:23:6c:13:79:
         1f:a1:7f:e0:d8:04:e4:c5:ce:e4:32:b6:8e:08:f7:06:50:6e:
         01:4c:ae:9b:24:91:f6:fd:bc:43:ff:ad:0d:c5:2e:02:a5:24:
         4c:7f:9b:b4:54:44:f5:53:7e:dd:24:52:f8:8f:28:e0:f1:37:
         a6:72:8d:32:12:79:ba:db:df:58:f6:52:1f:0b:72:ab:9b:e4:
         32:b1:88:85:43:cb:3f:72:61:a4:3e:02:60:da:4a:3f:a0:32:
         16:b5:83:6c:fa:83:ab:a5:e9:81:8d:c2:27:75:98:69:d5:73:
         60:f6:61:98:6e:4b:2c:40:23:c7:ac:3e:27:7a:ec:51:c7:5b:
         1f:45:fa:55:28:2c:cf:28:c4:95:c5:72:2c:ff:6a:30:58:71:
         d4:17:ce:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:34:33 2025 by rpki-client