Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File:                     44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier:          8qYPPv/5BClPszURDJXvad7W7y/lgbVaTgFC43MVl40=
Subject key identifier:   E8:A3:94:3E:C3:1A:4D:C3:09:DD:B7:B6:99:34:8B:A7:31:B4:24:33
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer:       /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial:       0198A1292A715C01CE1765C09983E3359503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number:          0D00
Signing time:             Wed 13 Aug 2025 02:01:26 +0000
Manifest this update:     Wed 13 Aug 2025 02:01:26 +0000
Manifest next update:     Thu 14 Aug 2025 02:01:26 +0000
Files and hashes:         1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: MyGrrIusVnblHy4jeWFWERqaWRB++FnH//6xAKzUoF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:29:2a:71:5c:01:ce:17:65:c0:99:83:e3:35:95:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
        Validity
            Not Before: Aug 13 02:01:26 2025 GMT
            Not After : Aug 14 02:01:26 2025 GMT
        Subject: CN=e8a3943ec31a4dc309ddb7b699348ba731b42433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:e5:75:a0:b1:6f:51:de:06:9c:09:03:94:
                    49:cb:30:dd:d0:3c:1e:3e:cd:1d:34:1b:6b:00:e0:
                    87:0a:80:e6:d7:b6:e8:a4:3e:4b:67:6a:e9:7c:ee:
                    a9:b7:da:4b:6e:6e:de:09:f4:a8:d3:1a:1a:e8:e7:
                    33:80:46:0d:30:b8:56:07:03:60:7e:9d:f5:c1:8b:
                    13:95:67:a4:35:d2:9d:44:58:dc:c7:cc:f6:4f:7b:
                    cd:f1:de:a6:11:a3:02:d8:b1:af:10:e4:16:23:24:
                    90:bf:7f:02:ad:c7:57:8d:01:2c:91:98:07:37:65:
                    cc:e4:74:09:51:fd:a9:3c:9c:7d:e6:c6:e3:18:34:
                    92:d7:17:de:f4:f0:da:11:8c:16:4f:8f:c9:85:1f:
                    5a:62:9e:55:53:1f:65:55:d6:73:8b:d4:ff:21:2c:
                    0c:f3:20:e3:69:96:4d:b1:6a:f9:61:4d:4a:53:b1:
                    77:34:d5:6c:f8:b5:e3:16:5b:b0:56:8a:5c:26:93:
                    fb:f7:88:35:b6:03:6f:ac:0e:3c:ae:b1:0c:5d:c2:
                    64:1d:98:1a:dd:04:7e:c7:f0:0c:ef:a2:05:f1:80:
                    98:21:c8:e1:f2:92:81:7d:d3:17:a7:11:a5:11:76:
                    41:cf:f4:d0:eb:70:29:73:2f:5c:db:15:82:55:0b:
                    81:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:94:3E:C3:1A:4D:C3:09:DD:B7:B6:99:34:8B:A7:31:B4:24:33
            X509v3 Authority Key Identifier:
                keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:51:d8:71:a7:91:98:21:b1:64:cf:f9:a7:ba:c4:86:77:b5:
         dd:94:6b:7f:e1:e4:9b:8f:c0:14:6b:6e:71:f8:b4:29:ea:48:
         de:36:b4:8c:09:c7:35:0b:cb:ad:15:1d:70:bb:61:e1:bd:da:
         ae:74:2e:02:68:49:57:c3:75:f7:28:d8:4e:9b:80:ab:8d:e4:
         ab:d3:40:cb:e5:8c:2b:c2:db:55:6e:de:ee:26:c7:5f:3e:f8:
         ee:88:f0:e9:bc:41:be:8f:b0:16:51:e9:58:43:c4:7c:d7:7a:
         f4:bf:f4:b4:2c:8a:78:5d:79:7e:a5:c8:fa:c7:48:70:36:85:
         d1:d0:82:56:a3:d3:0c:5f:06:f4:12:a0:c7:6b:fa:5b:01:c5:
         fd:c6:32:6a:39:5e:22:2b:a9:06:a5:8a:31:36:b7:d6:18:e7:
         45:a3:cf:7b:79:65:b2:fe:36:6b:a7:1d:8a:ea:22:ae:e6:f4:
         26:45:b1:6d:d4:48:83:5d:77:06:4d:b5:4e:f7:8f:38:dd:fb:
         83:1e:60:55:f7:5b:8b:03:9d:23:95:f3:85:8d:1e:ec:e1:7b:
         57:ff:36:44:61:eb:22:f0:e6:62:45:d8:d4:aa:3f:7f:4e:91:
         3c:af:b0:36:83:2c:ea:fe:9d:1d:28:af:25:2f:29:e1:5a:c4:
         6e:29:ed:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihKSpxXAHOF2XAmYPjNZUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3
MTczMGUwHhcNMjUwODEzMDIwMTI2WhcNMjUwODE0MDIwMTI2WjAzMTEwLwYDVQQD
EyhlOGEzOTQzZWMzMWE0ZGMzMDlkZGI3YjY5OTM0OGJhNzMxYjQyNDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmTldaCxb1HeBpwJA5RJyzDd0Dwe
Ps0dNBtrAOCHCoDm17bopD5LZ2rpfO6pt9pLbm7eCfSo0xoa6OczgEYNMLhWBwNg
fp31wYsTlWekNdKdRFjcx8z2T3vN8d6mEaMC2LGvEOQWIySQv38CrcdXjQEskZgH
N2XM5HQJUf2pPJx95sbjGDSS1xfe9PDaEYwWT4/JhR9aYp5VUx9lVdZzi9T/ISwM
8yDjaZZNsWr5YU1KU7F3NNVs+LXjFluwVopcJpP794g1tgNvrA48rrEMXcJkHZga
3QR+x/AM76IF8YCYIcjh8pKBfdMXpxGlEXZBz/TQ63Apcy9c2xWCVQuB4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOijlD7DGk3DCd23tpk0i6cxtCQzMB8GA1UdIwQY
MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt
ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3
LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF1HYcaeR
mCGxZM/5p7rEhne13ZRrf+Hkm4/AFGtucfi0KepI3ja0jAnHNQvLrRUdcLth4b3a
rnQuAmhJV8N19yjYTpuAq43kq9NAy+WMK8LbVW7e7ibHXz747ojw6bxBvo+wFlHp
WEPEfNd69L/0tCyKeF15fqXI+sdIcDaF0dCCVqPTDF8G9BKgx2v6WwHF/cYyajle
IiupBqWKMTa31hjnRaPPe3llsv42a6cdiuoirub0JkWxbdRIg113Bk21TvePON37
gx5gVfdbiwOdI5XzhY0e7OF7V/82RGHrIvDmYkXY1Ko/f06RPK+wNoMs6v6dHSiv
JS8p4VrEbintHg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:03 2025 by rpki-client