Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
File:                     ru85tCEAXzAraRD5Y5P0tlR6j-w.mft (raw, json)
Hash identifier:          iVT5GiyDqetEbFLM+wGwEQosvcSf4yTqIIiegZDsRb4=
Subject key identifier:   10:DA:4C:33:04:8E:46:50:87:23:25:78:FE:2A:BD:49:7B:C6:A5:AF
Authority key identifier: AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC
Certificate issuer:       /CN=aeef39b421005f302b6910f96393f4b6547a8fec
Certificate serial:       01988B7D1F1A039E7A3D3FF1AB6976DFF2B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
Manifest number:          C4
Signing time:             Fri 08 Aug 2025 21:01:29 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:29 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:29 +0000
Files and hashes:         1: ru85tCEAXzAraRD5Y5P0tlR6j-w.crl (hash: M8laKyOG1BJ+2bwS4LfqaASujd83A4UR863BlETAEVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:1f:1a:03:9e:7a:3d:3f:f1:ab:69:76:df:f2:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeef39b421005f302b6910f96393f4b6547a8fec
        Validity
            Not Before: Aug  8 21:01:29 2025 GMT
            Not After : Aug  9 21:01:29 2025 GMT
        Subject: CN=10da4c33048e465087232578fe2abd497bc6a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f2:e8:80:e2:7d:79:46:34:2e:cf:0d:9d:94:
                    05:a1:13:cf:c9:c5:79:fc:30:85:02:0e:5e:8e:22:
                    ca:c5:f4:ef:9b:15:36:53:7c:a3:f0:0a:09:82:1e:
                    13:17:e4:3f:e6:d4:af:14:48:11:f5:5d:9e:60:27:
                    21:49:33:fd:f2:bc:9e:c9:fb:a2:77:49:d4:6e:71:
                    1d:c4:6a:77:07:e0:fc:83:14:96:9d:3f:d3:30:df:
                    02:70:a2:5f:b3:f7:8c:cc:8f:56:31:2e:43:84:5f:
                    da:a7:94:05:e7:49:95:84:aa:dc:62:44:cc:a0:b7:
                    12:21:25:1b:d2:a1:73:b3:97:e8:df:14:0b:db:64:
                    f5:b4:19:39:a7:28:4a:78:04:da:bf:e6:ff:d2:e7:
                    71:c8:81:f5:55:24:e7:83:21:d1:8a:16:66:c6:f1:
                    6e:d5:3b:00:af:0d:44:27:e8:52:2a:16:76:29:60:
                    0a:11:79:71:10:89:f2:ad:61:90:61:b2:ff:da:96:
                    08:10:88:90:ee:d0:df:70:64:da:03:ca:55:b7:e9:
                    d4:67:0a:15:91:37:a5:62:d8:62:f5:eb:0b:06:02:
                    23:e9:0c:32:75:55:01:1b:bb:9c:2c:33:99:a3:16:
                    2f:7a:a3:b0:84:12:d8:15:2c:09:c2:ea:48:e7:97:
                    69:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DA:4C:33:04:8E:46:50:87:23:25:78:FE:2A:BD:49:7B:C6:A5:AF
            X509v3 Authority Key Identifier:
                keyid:AE:EF:39:B4:21:00:5F:30:2B:69:10:F9:63:93:F4:B6:54:7A:8F:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ru85tCEAXzAraRD5Y5P0tlR6j-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/d2036a-27a7-4cdb-b4fe-9311275f38ea/1/ru85tCEAXzAraRD5Y5P0tlR6j-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9e:b1:71:cb:49:b4:4c:88:15:8a:bd:a2:9d:b0:e7:f0:2b:
         43:95:a3:26:6d:03:fd:c4:78:7f:91:b4:8a:d4:b1:04:29:5c:
         ac:8c:63:17:78:84:6d:52:b4:8f:91:d8:19:87:ef:55:54:1d:
         f5:c0:a5:80:8b:7d:58:a8:a1:c1:fa:13:01:fb:31:03:1e:13:
         b0:15:30:ed:48:a2:53:81:7d:da:64:3c:1b:8d:7c:2e:4d:e4:
         d9:5a:87:00:09:97:b1:87:98:52:02:8c:54:39:19:98:67:88:
         09:02:04:94:80:fa:72:d2:12:8c:6d:7e:ce:04:56:41:2c:fc:
         af:07:03:bf:25:ec:1f:b3:ad:8a:e1:cf:f9:ea:11:c1:6a:33:
         ba:f7:dd:3a:1a:c2:28:5d:38:3d:37:67:27:e8:6e:4f:11:e2:
         c6:46:e1:71:2d:bb:f7:56:7f:38:bd:5d:c8:11:fa:44:08:d2:
         d5:65:70:89:d4:bf:1a:4b:6a:57:78:10:66:ab:42:48:ff:70:
         3e:c2:d0:ad:f1:bf:7b:30:6d:c9:20:4c:28:08:21:92:09:fd:
         2a:61:b7:4e:55:f7:ab:fe:14:79:ff:e2:d5:55:b7:17:f4:ef:
         17:19:57:4a:21:de:e1:2e:34:e7:34:46:bc:a2:cd:58:0b:e8:
         c0:be:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:25 2025 by rpki-client