Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File:                     4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier:          JBbVoeHWzzLyrExdQEegTygtIVpbsY+QhXf/Z8wOXpU=
Subject key identifier:   2E:63:1E:57:67:96:6D:05:1E:A6:3C:11:B8:1B:E3:5A:9E:70:02:AA
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer:       /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial:       01987FE63AFCBCA766556CDC37C02EF7F327
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number:          1619
Signing time:             Wed 06 Aug 2025 15:00:51 +0000
Manifest this update:     Wed 06 Aug 2025 15:00:51 +0000
Manifest next update:     Thu 07 Aug 2025 15:00:51 +0000
Files and hashes:         1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: kTYm4cJIrn+z2/69saNfKNGjUOLS3qQtUTyYKh0eWWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7f:e6:3a:fc:bc:a7:66:55:6c:dc:37:c0:2e:f7:f3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
        Validity
            Not Before: Aug  6 15:00:51 2025 GMT
            Not After : Aug  7 15:00:51 2025 GMT
        Subject: CN=2e631e5767966d051ea63c11b81be35a9e7002aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:5c:b0:1c:23:64:14:0e:cd:1f:49:34:46:
                    e3:38:78:77:c1:9d:7b:18:4f:44:b5:45:92:98:56:
                    b7:9f:fb:5d:5a:70:2b:da:26:cb:e0:dc:88:7f:d6:
                    9e:04:ab:a9:71:8b:dc:f7:e9:b0:1f:76:62:45:50:
                    ab:1d:6a:7f:77:c5:9f:eb:fb:2a:11:fd:b3:ca:91:
                    1f:09:b3:21:9c:c1:ba:5b:fe:72:3f:4a:c7:03:d5:
                    65:f3:48:57:c1:fa:cc:78:ea:3b:8b:61:02:b4:7f:
                    85:c8:d7:c2:37:8c:8d:0b:66:31:bb:d7:aa:fc:16:
                    30:5d:10:64:75:24:53:8b:df:94:ee:4d:5a:ad:65:
                    55:aa:83:68:56:54:7f:60:d5:26:bf:ad:9b:0a:aa:
                    ca:75:6a:2f:63:9e:37:84:20:13:e2:e5:ff:9e:58:
                    e7:74:5a:da:fd:82:23:db:40:12:4a:f2:ba:35:2a:
                    e1:2b:b3:e6:b9:1f:fa:28:61:62:b4:64:ee:37:2c:
                    d9:cb:0c:04:0f:b8:d2:ee:91:8b:9f:69:e9:e6:b7:
                    8f:ec:2c:a3:c5:82:8e:7f:ef:56:3e:b0:cd:97:4c:
                    4c:fb:11:11:30:ce:12:b5:73:7e:28:0a:49:c8:97:
                    d9:3e:7e:74:2a:dc:d1:82:1b:2a:be:5e:6b:ad:0a:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:63:1E:57:67:96:6D:05:1E:A6:3C:11:B8:1B:E3:5A:9E:70:02:AA
            X509v3 Authority Key Identifier:
                keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:ba:41:11:26:e8:28:3f:35:4b:21:47:8e:1d:31:2a:ed:
         b7:32:32:85:26:0a:ce:35:fd:d3:7f:d2:81:2b:2f:33:60:ac:
         00:d5:94:61:31:d2:53:ff:8b:3b:09:53:10:74:f6:a0:58:93:
         20:5d:58:f3:03:23:6d:c8:70:58:9b:5c:7b:92:51:c9:61:42:
         6c:1e:1c:28:9a:3c:7e:ed:e3:c3:0d:5d:0d:09:fe:c1:da:df:
         b3:95:f7:bf:c6:0f:38:82:81:be:02:f0:77:1f:79:73:a1:ad:
         6b:c6:8b:b4:94:a1:4b:62:c4:b6:1b:81:b5:98:b2:c5:00:c7:
         13:29:03:5e:cc:dd:49:ca:bd:a8:f3:43:bc:ad:f9:a6:35:fb:
         b4:ff:8f:22:1e:a4:db:32:1b:94:c5:89:63:6e:5d:28:b2:3f:
         67:b6:84:93:e1:db:67:bd:7f:21:a5:af:59:95:b3:a5:ad:a5:
         03:93:f9:87:ca:58:bb:80:81:65:c0:78:47:b9:e2:92:b0:75:
         22:ca:6c:75:6b:d4:89:b2:bd:3d:c2:18:fa:d4:29:8a:d7:9e:
         13:ff:fc:ea:c4:32:a7:03:12:8f:88:74:db:ac:6c:ee:f9:24:
         7a:ad:4e:f2:08:93:33:fe:e9:3f:4b:ed:a9:cc:94:af:d4:28:
         c3:f5:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:12:25 2025 by rpki-client