Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
File:                     IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft (raw, json)
Hash identifier:          6Fz2Ms/F81utawOI2easgRfJV3kUnlU502lu8ynN7Iw=
Subject key identifier:   B6:2D:74:41:6E:83:C8:37:90:1C:13:03:69:E6:AE:EA:1C:2E:9D:2E
Authority key identifier: 21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9
Certificate issuer:       /CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
Certificate serial:       01988B7C6F3338C8269DCB044E6E2CAFE994
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
Manifest number:          058F
Signing time:             Fri 08 Aug 2025 21:00:44 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:44 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:44 +0000
Files and hashes:         1: IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl (hash: pY7CdST4vZu8y+A0gwDT95FU/4MtjJ5+OGufD59a0ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:6f:33:38:c8:26:9d:cb:04:4e:6e:2c:af:e9:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215fbc7bee46716f636cb7d953b63ebe34b7eee9
        Validity
            Not Before: Aug  8 21:00:44 2025 GMT
            Not After : Aug  9 21:00:44 2025 GMT
        Subject: CN=b62d74416e83c837901c130369e6aeea1c2e9d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:91:cb:91:23:19:3b:e9:d5:29:f1:16:f0:
                    aa:3e:09:9f:a1:eb:0c:ab:7f:e7:8b:fd:1a:22:de:
                    cb:5a:9f:f9:61:68:71:38:9f:91:ae:ee:ce:6b:ab:
                    7c:9a:32:b2:04:5c:ba:e2:94:aa:78:25:f0:40:f4:
                    be:33:73:9c:09:ca:97:af:01:41:a7:cf:a4:1c:b1:
                    20:9e:6c:14:93:1c:61:da:e9:fc:25:e3:e5:d4:8e:
                    fa:af:35:29:c4:c6:bb:36:1d:41:61:92:6f:9f:d1:
                    96:c6:c6:76:8d:54:78:16:12:9e:f3:e6:1f:7d:b4:
                    dc:25:83:ec:04:b4:05:fe:ed:d3:d8:9a:f8:78:01:
                    2c:86:57:36:40:9b:05:82:4a:09:a4:11:47:8d:63:
                    00:53:1b:8c:4a:ae:fd:ed:ff:47:93:5c:68:22:12:
                    1c:78:49:a8:f1:4e:22:80:fe:c2:18:bd:9f:b9:05:
                    64:84:f3:d1:5e:37:ec:5e:9b:d5:ad:95:8f:8a:1b:
                    b8:de:a5:ba:3e:04:99:46:17:0e:c7:c3:3a:91:a5:
                    d8:2d:36:91:94:f2:9c:71:09:e0:22:36:c3:ed:83:
                    05:48:32:bb:e4:b2:4f:34:92:e7:87:a1:cb:8c:7b:
                    fb:b2:0f:bf:52:09:6d:bc:02:77:26:f4:32:64:38:
                    42:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2D:74:41:6E:83:C8:37:90:1C:13:03:69:E6:AE:EA:1C:2E:9D:2E
            X509v3 Authority Key Identifier:
                keyid:21:5F:BC:7B:EE:46:71:6F:63:6C:B7:D9:53:B6:3E:BE:34:B7:EE:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IV-8e-5GcW9jbLfZU7Y-vjS37uk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/eddbcc-22e3-4cda-910a-6f4421b9d525/1/IV-8e-5GcW9jbLfZU7Y-vjS37uk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c8:d8:0a:1d:34:da:68:aa:88:68:6a:73:23:8d:69:af:70:
         03:21:84:ec:8e:b5:75:9a:3e:57:8f:21:6b:50:c0:0a:2d:62:
         d0:ce:35:fc:45:7d:44:3e:e0:82:e9:3e:fc:04:a3:ca:2b:08:
         27:d2:3b:20:1e:b3:92:b9:a9:ea:e7:af:bc:53:d3:81:bc:a0:
         b0:80:20:b4:86:f3:fc:cc:01:8b:97:d9:5f:b4:49:df:3f:5c:
         0a:c7:51:4e:4a:25:01:ed:fb:ee:85:c5:76:7d:82:73:f2:d9:
         3b:13:37:1f:25:54:93:87:f7:a3:3f:c7:f0:32:e9:1a:05:a2:
         43:1d:6d:23:af:bf:13:9d:25:18:07:0f:2f:c6:22:40:a5:77:
         8a:ea:82:0e:3c:ad:33:60:e0:da:2d:b9:f6:51:01:bf:26:3d:
         a8:1a:4c:71:08:31:06:cd:13:36:97:9d:6e:b8:81:53:34:24:
         3a:88:05:6c:ef:d7:b5:69:83:dc:bb:89:d6:9c:61:6b:92:d6:
         32:03:d9:cd:61:43:d0:45:81:c1:c4:ce:26:27:bf:47:e1:df:
         e2:e2:47:43:25:78:51:ca:65:3c:59:f6:96:06:1b:7e:ad:9a:
         eb:b8:5b:85:c8:2a:48:b7:fe:79:ae:a4:3c:27:98:1b:3b:1a:
         ee:b1:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:28 2025 by rpki-client