Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File:                     cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier:          2/bGMgHLJRSkvhKlnjGW600BVlgvzGFuVN6MysXshCY=
Subject key identifier:   5C:53:6C:83:54:1F:C7:B6:05:1B:5D:6B:77:55:91:18:69:72:83:E4
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer:       /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial:       0198952416B0C60F23D8F2CC219CE6343C7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number:          044D
Signing time:             Sun 10 Aug 2025 18:00:26 +0000
Manifest this update:     Sun 10 Aug 2025 18:00:26 +0000
Manifest next update:     Mon 11 Aug 2025 18:00:26 +0000
Files and hashes:         1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: AGct/Gb/H6DP2ZDoF/96MJcZpr7G3n0CR/JZAnL7FLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:24:16:b0:c6:0f:23:d8:f2:cc:21:9c:e6:34:3c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
        Validity
            Not Before: Aug 10 18:00:26 2025 GMT
            Not After : Aug 11 18:00:26 2025 GMT
        Subject: CN=5c536c83541fc7b6051b5d6b77559118697283e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:20:c1:b4:a4:41:9d:66:b0:6f:53:9e:cf:
                    a7:30:a7:8e:ca:26:d6:a6:bf:75:9e:e8:e6:32:60:
                    31:16:d3:b5:32:39:4a:a3:72:ae:34:d4:08:38:9c:
                    a6:7f:cb:95:31:16:c1:20:1f:09:16:8e:74:3a:3d:
                    a7:4c:16:e2:fb:8e:90:78:e2:b6:b1:e8:65:69:27:
                    6d:2f:11:f9:06:88:91:ea:4a:aa:fc:a6:12:d1:04:
                    4f:5b:11:6e:8d:27:e7:69:16:ce:41:14:08:4c:d0:
                    bb:2a:a7:a5:a7:98:37:3e:3e:3f:cf:e4:61:37:54:
                    27:5d:4b:42:ea:57:04:e2:05:a8:ed:41:be:df:9a:
                    65:81:34:0d:10:c3:33:13:11:08:0c:24:0a:3a:54:
                    71:da:8f:47:18:b5:b6:8f:e0:64:04:5d:83:65:93:
                    1f:05:0a:93:1d:1b:88:61:24:e1:91:d9:4c:e2:77:
                    f1:95:e7:88:bf:29:4a:b1:08:3e:66:e2:6a:08:58:
                    ab:ef:ca:31:29:2a:ce:e1:c3:4b:c0:27:0b:72:e4:
                    31:a2:59:3d:f9:31:3f:ee:ac:81:30:0c:10:cd:ef:
                    6a:26:e9:85:43:11:f4:34:62:37:79:90:f5:59:eb:
                    13:0e:58:4e:d3:f4:46:7c:93:7c:ab:52:b4:21:c8:
                    ec:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:53:6C:83:54:1F:C7:B6:05:1B:5D:6B:77:55:91:18:69:72:83:E4
            X509v3 Authority Key Identifier:
                keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a7:30:bd:d0:b1:de:31:9f:32:ed:0d:7a:49:c9:64:25:1f:
         43:38:70:fa:1b:ec:02:fd:fa:40:45:5b:e4:6e:f1:3f:e9:23:
         5f:fb:6c:73:58:10:1a:fc:0d:b1:99:64:58:96:87:58:b7:63:
         e9:c6:8b:60:61:c0:8d:6a:e1:08:71:17:59:24:c8:0f:34:a1:
         8a:2a:55:fe:43:e3:a4:6d:a9:33:3b:1f:58:06:99:e9:09:33:
         68:2a:d2:18:60:47:b4:11:78:c3:be:07:3a:cc:d8:62:61:65:
         bf:d1:1d:cf:74:31:eb:4a:d8:f6:1f:d0:a6:d7:4d:d3:a6:d7:
         23:dc:f3:85:fe:bc:d4:7d:06:35:33:14:e0:a8:78:67:d3:53:
         40:12:e8:9d:87:a8:1b:be:7a:5d:f6:9b:bf:35:a9:53:a9:93:
         6c:7b:fe:95:55:a2:e3:a4:da:5a:0e:5c:c6:84:d5:64:22:35:
         23:2a:5f:2e:cc:b2:99:a5:d2:5b:48:c5:9a:58:f6:71:5c:0d:
         f1:43:a0:4e:ea:1e:bf:35:84:2d:32:59:cb:48:19:0f:8b:79:
         aa:b8:73:fd:de:f0:07:ee:82:0c:38:26:a1:a2:02:ab:32:b2:
         af:58:ca:37:d5:4d:e2:ca:05:24:b5:94:af:9e:6c:48:3b:5d:
         52:4e:e1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:08:40 2025 by rpki-client