Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
File:                     sWUjiWNgP2LB2SiRbtwbOacuOm4.mft (raw, json)
Hash identifier:          aXXbErXFVlVzFeu3uuBgRYxoFUxdmbqrXKMVzVPDQ+0=
Subject key identifier:   81:26:3C:3F:F9:9F:9E:1E:EF:11:E6:52:37:3F:EB:4F:1C:65:CB:6E
Authority key identifier: B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E
Certificate issuer:       /CN=b165238963603f62c1d928916edc1b39a72e3a6e
Certificate serial:       0198752B5C7408090D2001CB56E1F550D1CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
Manifest number:          0271
Signing time:             Mon 04 Aug 2025 13:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 13:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 13:00:32 +0000
Files and hashes:         1: sWUjiWNgP2LB2SiRbtwbOacuOm4.crl (hash: Yd78B0Bll/xWRrDTYf0xRMJKxUc8Ays907YPup9mpD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:2b:5c:74:08:09:0d:20:01:cb:56:e1:f5:50:d1:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b165238963603f62c1d928916edc1b39a72e3a6e
        Validity
            Not Before: Aug  4 13:00:32 2025 GMT
            Not After : Aug  5 13:00:32 2025 GMT
        Subject: CN=81263c3ff99f9e1eef11e652373feb4f1c65cb6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:be:1e:96:51:58:46:25:9f:27:67:39:ab:
                    8c:92:a7:fc:92:31:e6:42:74:71:05:af:fa:86:a3:
                    a9:01:7b:f3:74:76:8c:17:20:71:66:f9:a3:55:8a:
                    dd:df:ed:aa:7f:b8:2b:60:52:5e:16:0e:e8:c4:94:
                    21:e2:2e:9d:74:ed:15:07:c0:5c:54:e5:ed:c2:80:
                    65:2f:2e:5f:70:4a:7f:83:df:f0:ad:31:b1:7e:72:
                    72:82:77:e8:17:47:d8:65:4d:21:61:8a:4c:3d:d0:
                    5d:3f:2f:82:d7:93:55:7a:f3:7f:65:86:4a:ed:d1:
                    7d:df:f9:ee:d2:57:c0:96:01:1f:f4:00:c0:75:d4:
                    3f:84:15:4c:05:6c:3c:ec:1c:17:45:54:de:e2:be:
                    57:8f:4a:3e:47:00:44:f3:bc:5b:eb:2b:3f:7a:c4:
                    eb:fb:c8:b0:25:d2:23:3e:1a:49:78:34:1e:87:66:
                    47:3b:94:b0:2f:fc:0c:f2:7d:8a:22:f8:e9:20:ee:
                    48:3e:35:df:25:d6:42:78:d5:ad:57:52:f0:43:aa:
                    06:81:b6:ef:b6:8b:28:01:2e:9e:23:5e:24:f7:9c:
                    fa:92:9c:9d:92:1d:b3:83:09:d5:6d:7e:52:ec:7b:
                    f0:1e:33:26:45:c3:6d:55:0a:76:a0:9d:82:bc:aa:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:26:3C:3F:F9:9F:9E:1E:EF:11:E6:52:37:3F:EB:4F:1C:65:CB:6E
            X509v3 Authority Key Identifier:
                keyid:B1:65:23:89:63:60:3F:62:C1:D9:28:91:6E:DC:1B:39:A7:2E:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWUjiWNgP2LB2SiRbtwbOacuOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4e64e5-ee41-476b-a02a-67795f7b6d10/1/sWUjiWNgP2LB2SiRbtwbOacuOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:35:e5:19:83:ca:8b:fe:4f:6e:4c:9a:6a:d9:47:55:2f:60:
         18:0d:cc:34:e8:56:39:27:91:58:bf:eb:be:a0:5d:19:66:1a:
         f8:89:18:30:4d:23:c8:c2:ac:0f:4c:de:50:dc:0f:b6:ee:ca:
         f8:40:58:a8:d8:eb:76:c5:c2:32:78:c3:d6:b5:18:11:4e:61:
         a5:a2:82:1c:e2:db:dc:cf:0e:c5:f3:11:b9:31:c4:d8:fa:d9:
         59:f8:3d:a1:d6:ab:60:48:a6:b5:43:21:0a:e2:a6:b8:92:4f:
         b2:a0:dd:83:0c:12:04:ba:3b:37:59:1b:b1:d9:c4:4b:f5:56:
         08:48:32:2d:6c:e7:70:9d:a4:23:33:d4:33:dc:da:06:f4:78:
         99:95:10:5b:32:89:af:f5:27:f0:52:07:34:65:00:46:aa:28:
         d1:6d:54:26:4c:a5:6d:c3:5d:0e:08:12:75:85:c4:3f:c8:4c:
         24:8d:d7:b3:c9:75:aa:a1:88:cb:ea:e3:b9:11:fc:de:73:2a:
         15:eb:fd:35:8f:b8:e8:fa:e2:3c:5f:96:49:cc:29:3a:57:23:
         3a:66:53:d1:7c:3a:3b:c8:49:c7:83:34:a3:82:37:11:78:43:
         2b:95:60:e5:4e:ac:fb:09:a6:77:5a:4e:36:98:c9:e3:77:a3:
         fa:06:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:34:48 2025 by rpki-client