Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
File:                     rvl6leIXAnXoyC7oeLbQjeuCHlU.mft (raw, json)
Hash identifier:          HRDZlj+qZzFPn7q1rBnJfbSD0jeJcG3RyoKl4oizufA=
Subject key identifier:   CB:9E:EE:73:6C:51:34:D1:1F:9B:7E:B5:4C:C3:E4:75:6D:8A:95:9B
Authority key identifier: AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55
Certificate issuer:       /CN=aef97a95e2170275e8c82ee878b6d08deb821e55
Certificate serial:       01988B0EE80D8DB264FB16B0945EE32147E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
Manifest number:          0F49
Signing time:             Fri 08 Aug 2025 19:01:06 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:06 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:06 +0000
Files and hashes:         1: rvl6leIXAnXoyC7oeLbQjeuCHlU.crl (hash: aoXokAqdYI2B7EYi40gFezLiS1ZNK146OTbDIFcPAms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:e8:0d:8d:b2:64:fb:16:b0:94:5e:e3:21:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef97a95e2170275e8c82ee878b6d08deb821e55
        Validity
            Not Before: Aug  8 19:01:06 2025 GMT
            Not After : Aug  9 19:01:06 2025 GMT
        Subject: CN=cb9eee736c5134d11f9b7eb54cc3e4756d8a959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:b8:64:86:1a:64:c9:24:82:5d:2f:40:82:
                    83:b0:e8:36:a6:33:03:6f:b2:30:fe:f1:f1:64:73:
                    b0:6a:f2:13:50:ad:6e:75:70:8a:46:21:7d:19:2a:
                    4c:1e:65:8b:35:61:8d:84:61:97:c3:aa:c6:7f:66:
                    c3:61:79:71:3c:eb:db:1b:5e:a1:ee:03:49:5a:be:
                    2a:53:e7:1a:94:16:a3:9a:41:d7:ab:0d:dd:42:63:
                    be:63:f8:87:0f:46:eb:18:8b:b1:76:d9:67:41:52:
                    0d:b4:35:ee:dd:df:5d:b5:e5:04:ab:57:bb:3b:66:
                    6a:5b:14:81:71:d4:03:2f:bc:06:32:97:12:52:e0:
                    88:67:9b:cf:7a:5a:0c:e6:fa:3f:ba:a3:fb:3e:c5:
                    1c:14:3b:09:e7:0d:68:27:e8:19:28:c4:7b:35:f5:
                    d3:30:6d:2b:51:e3:ff:b0:e2:ae:e7:54:2b:44:81:
                    86:96:31:42:79:77:ea:89:97:7d:73:c8:4f:9c:90:
                    1b:df:28:28:8e:d4:7c:55:70:89:92:38:94:0f:7a:
                    24:75:5b:a2:02:03:f5:82:d0:1d:08:d0:bd:e1:fe:
                    5d:fe:4a:31:c6:3b:eb:6b:37:53:1a:58:0a:59:ac:
                    c3:66:e8:c3:bd:4b:2e:61:32:eb:7d:90:d5:3a:0c:
                    b3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9E:EE:73:6C:51:34:D1:1F:9B:7E:B5:4C:C3:E4:75:6D:8A:95:9B
            X509v3 Authority Key Identifier:
                keyid:AE:F9:7A:95:E2:17:02:75:E8:C8:2E:E8:78:B6:D0:8D:EB:82:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvl6leIXAnXoyC7oeLbQjeuCHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/162329-6221-4204-9d8c-214a9f979afc/1/rvl6leIXAnXoyC7oeLbQjeuCHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:32:62:ad:93:c9:f9:f3:5b:7a:8f:7f:3a:98:5b:c2:e4:49:
         5f:fa:8b:92:06:86:2b:b5:67:5b:e1:ab:79:80:e9:44:d4:16:
         fe:ab:d8:a8:25:3c:dc:9e:96:1a:bc:9a:fb:16:18:4e:6f:4f:
         64:51:f1:62:76:70:52:6f:ac:b6:0b:8f:8e:5a:11:b9:5d:3c:
         e4:ce:63:bc:d0:d4:12:b2:a7:85:ae:3a:60:ab:bd:5c:39:c4:
         1a:43:9f:b7:23:ec:1c:b2:6f:cf:4c:c2:09:b8:ee:51:35:9f:
         be:a2:5f:c9:82:cc:c8:1e:a6:51:5f:41:d5:a7:2c:b9:cc:32:
         41:b4:b5:02:78:cb:de:0c:74:f8:81:0b:6a:a9:28:22:52:74:
         86:57:10:b7:97:0f:e3:dd:fe:5a:74:11:79:8c:e1:b2:b7:2b:
         cb:10:03:7e:a0:be:56:bc:be:16:c5:a3:ca:85:54:c2:b0:c3:
         21:2b:ac:75:5b:f9:b3:1e:13:03:5f:7d:2f:f2:9e:f3:6d:b0:
         15:a8:a7:f5:a7:c7:cc:a2:91:bf:d6:74:c4:47:b8:72:5b:2b:
         92:c4:33:f7:5f:a4:3c:f8:51:16:73:df:e2:98:fc:8d:bd:64:
         07:60:b9:19:20:4a:a0:ec:45:2f:8a:09:ae:13:5b:87:9c:df:
         7c:92:ef:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:02:56 2025 by rpki-client