Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File:                     4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier:          ancgqMio1lyKO1C6mvMWJeAD8PYrsKiJV6TNSi7Hc6U=
Subject key identifier:   80:2E:57:CE:3E:4A:AD:37:D3:87:63:CB:38:B1:92:76:56:62:83:29
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer:       /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial:       0198816806B218340D064499E9EFF4A6D356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number:          D9
Signing time:             Wed 06 Aug 2025 22:02:14 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:14 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:14 +0000
Files and hashes:         1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: bc9cZk+0d+BTNX6kYKZ6gR1o9k3KZoPhUYw+A4DkfFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:06:b2:18:34:0d:06:44:99:e9:ef:f4:a6:d3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
        Validity
            Not Before: Aug  6 22:02:14 2025 GMT
            Not After : Aug  7 22:02:14 2025 GMT
        Subject: CN=802e57ce3e4aad37d38763cb38b1927656628329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:68:af:25:d0:bf:5f:73:89:81:4f:6d:d3:
                    db:92:3f:a2:e3:76:38:6f:6b:71:d8:e0:30:37:ef:
                    8a:a2:8c:0d:bb:32:a8:a5:bc:dd:40:01:43:8d:f2:
                    6a:fc:19:26:d3:86:d7:a2:d5:7b:d5:50:ec:9f:fe:
                    6a:bc:a0:d9:5e:58:52:10:09:27:bb:ec:03:1d:c6:
                    58:43:5a:89:3f:a1:68:a2:84:91:cd:9e:dd:64:d4:
                    88:22:75:0c:1b:f7:cf:3f:5c:3c:ad:8e:7e:f3:4a:
                    a0:3b:38:ff:5b:17:51:f7:e1:8e:6c:1c:fa:8d:09:
                    f7:69:68:3a:99:6a:f7:b9:f6:97:73:2d:99:0e:2b:
                    38:ac:3b:2b:0a:1e:02:c4:b6:42:e7:20:9a:7c:b2:
                    e2:15:bb:80:d0:15:c5:72:34:ad:60:33:35:29:a2:
                    f0:88:43:62:8c:be:44:18:2c:67:ab:62:ab:8f:9c:
                    49:cd:97:ae:03:2f:fb:77:5d:8f:b0:e8:e4:e5:be:
                    55:eb:d0:24:5f:3a:9e:44:71:83:7a:07:ed:29:27:
                    ba:5a:99:3b:fa:e6:14:55:43:d0:20:75:14:25:c6:
                    c1:75:93:10:6f:03:af:75:3c:93:ae:29:31:03:9b:
                    a3:97:56:91:4a:9d:79:a2:1a:b5:9c:9c:d8:ee:c4:
                    fb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2E:57:CE:3E:4A:AD:37:D3:87:63:CB:38:B1:92:76:56:62:83:29
            X509v3 Authority Key Identifier:
                keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:75:14:98:3d:27:04:9f:6f:6b:23:25:f4:e2:05:5c:3d:70:
         2c:21:1a:57:3d:7d:ed:7f:4e:f5:1b:af:74:0f:60:e2:44:a7:
         45:de:17:2d:46:0b:e1:60:56:8a:b7:48:c2:8a:fa:a2:ab:39:
         96:2f:12:34:43:e4:82:39:84:68:8f:51:cd:29:1a:93:b7:69:
         a3:5f:f8:a2:8d:33:43:6b:52:2f:55:c9:7e:1c:dc:36:29:fb:
         87:d5:5c:70:84:78:8c:2d:06:de:b6:69:db:8e:06:a2:d7:0c:
         d3:74:f2:76:5c:08:a8:cc:72:fd:36:03:10:fb:5d:73:3a:34:
         15:da:f3:19:ca:71:f8:46:0f:c8:2f:7e:cb:05:8d:80:ea:e3:
         4e:f5:36:7c:d5:1a:40:ce:bb:24:bd:fd:09:c2:a0:d5:c2:e8:
         30:17:0b:7b:a5:48:94:fe:d5:67:b8:6f:40:f2:34:33:ef:cf:
         43:bd:63:ca:aa:25:15:15:c3:5b:49:69:92:64:3d:88:bb:e2:
         2c:82:6e:a6:a8:36:01:56:1f:89:5d:b4:16:cc:62:a1:00:80:
         89:f1:3d:bc:29:10:14:a4:93:44:d5:d3:a6:96:06:03:41:a3:
         77:1a:6f:4a:ff:87:1b:6e:7b:a1:f8:18:d7:89:72:3f:40:d4:
         11:1c:28:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:21:09 2025 by rpki-client