Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File:                     4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier:          y2ErgM2KrCsJGhqDqf5Ufmc+zNoWpc9/7zD9WOXbwOg=
Subject key identifier:   22:1A:E0:25:95:36:4F:79:F2:2A:60:8F:D1:A5:BC:A4:E2:DD:00:02
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer:       /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial:       01989749CAFD85E5CD1A723C489D6D9DF435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number:          C8
Signing time:             Mon 11 Aug 2025 04:00:52 +0000
Manifest this update:     Mon 11 Aug 2025 04:00:52 +0000
Manifest next update:     Tue 12 Aug 2025 04:00:52 +0000
Files and hashes:         1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: Rwx3RALR8AqEvM3PanzF+CVtKk9e3daSBy1ptcUFH3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:49:ca:fd:85:e5:cd:1a:72:3c:48:9d:6d:9d:f4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
        Validity
            Not Before: Aug 11 04:00:52 2025 GMT
            Not After : Aug 12 04:00:52 2025 GMT
        Subject: CN=221ae02595364f79f22a608fd1a5bca4e2dd0002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fc:3d:d2:39:da:ab:cd:2a:1d:66:61:18:19:
                    9b:90:cb:f0:05:2e:f7:a7:66:76:c0:a8:7d:52:e6:
                    73:0f:c9:37:58:84:8d:be:4c:f6:af:5e:5f:db:a1:
                    fc:6e:94:5a:65:6c:5d:ef:2d:46:44:14:d5:b8:b4:
                    ac:5f:67:cf:94:86:bb:86:62:58:3c:71:d2:a5:19:
                    cb:ba:d9:30:0e:70:60:e7:68:8b:12:47:d2:e1:c0:
                    14:92:17:81:63:0d:bc:86:48:d7:93:68:e6:f4:db:
                    22:cd:37:62:07:f3:0b:b5:ad:0c:a8:99:c4:c3:d5:
                    67:4d:98:53:78:74:5d:ce:fb:0d:1c:10:45:81:af:
                    26:db:1b:b9:be:28:99:ec:77:5d:74:6d:09:c8:7d:
                    b7:24:3a:cd:5f:39:e2:5e:60:3f:8d:ba:a9:35:9d:
                    cb:a4:1f:6a:51:60:17:e4:43:de:11:b5:45:7c:60:
                    7d:8e:be:a6:52:3e:d4:a0:a4:30:9a:9a:80:78:3a:
                    9b:f4:76:99:cd:84:39:d3:26:e9:26:4f:43:18:1a:
                    d2:6a:79:d9:22:7a:ea:62:d7:35:89:83:79:22:c8:
                    ff:7b:75:11:62:9b:c6:e7:3e:c2:4f:49:88:62:de:
                    2a:93:8b:02:25:23:57:56:a0:f1:9b:1e:6a:af:40:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:E0:25:95:36:4F:79:F2:2A:60:8F:D1:A5:BC:A4:E2:DD:00:02
            X509v3 Authority Key Identifier:
                keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:98:c1:1a:22:86:04:a9:ef:ff:e3:3c:24:5e:0f:0c:e7:69:
         85:0f:8a:07:1d:ca:ad:13:4b:44:dd:1f:50:c6:a9:cf:98:77:
         5d:e9:ce:94:cf:47:bc:ac:3b:fd:2f:a2:50:31:d3:a4:37:52:
         a8:29:b3:3f:1d:82:c4:ce:4b:8f:06:ee:a1:df:9b:e9:08:18:
         38:3a:46:33:57:08:cd:ea:90:6a:1f:4a:3b:b9:9e:be:91:c1:
         87:e7:61:56:ba:5f:a1:7f:60:af:fc:f8:f5:3d:91:d9:43:ec:
         ef:f8:bc:6d:7e:5d:4b:28:5b:23:31:a9:21:7f:73:b9:fd:4d:
         d3:dc:81:99:f6:b6:b3:ac:7f:37:35:bd:81:f7:78:bc:22:39:
         04:f1:d1:dc:c1:35:b5:30:51:7e:ef:8e:ff:bc:05:70:6f:e6:
         bc:62:f0:85:6e:9d:cc:ac:f8:b5:62:d8:c0:12:48:5d:0a:a4:
         cf:2a:d2:55:b4:6c:51:6b:96:1d:ba:f0:bc:0d:55:f4:f6:04:
         10:0c:1a:c1:23:65:41:53:fb:81:89:c1:ee:dd:f8:75:7e:45:
         2f:94:a0:d1:a0:f5:90:ac:29:30:6b:5d:24:19:f4:e0:af:17:
         70:9b:69:f8:94:81:ed:0a:9f:41:85:0a:b3:05:48:52:72:34:
         a2:76:12:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:49:12 2025 by rpki-client