Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File:                     4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier:          tsBmFElIKcTmkaJS028SeTvUc6jflAhhlsiu3qpNipE=
Subject key identifier:   B4:AD:2F:DF:47:5A:37:87:02:6C:FE:00:28:98:64:5E:1F:39:89:0B
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer:       /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial:       01988FFDF0D88D108E51C1BD2CD0256437F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number:          0C24
Signing time:             Sat 09 Aug 2025 18:00:40 +0000
Manifest this update:     Sat 09 Aug 2025 18:00:40 +0000
Manifest next update:     Sun 10 Aug 2025 18:00:40 +0000
Files and hashes:         1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: eUDUEGXSffHiCCZpFbIrcacb6BnxTU9GisKslpIorBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fd:f0:d8:8d:10:8e:51:c1:bd:2c:d0:25:64:37:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
        Validity
            Not Before: Aug  9 18:00:40 2025 GMT
            Not After : Aug 10 18:00:40 2025 GMT
        Subject: CN=b4ad2fdf475a3787026cfe002898645e1f39890b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:27:ce:43:c4:d6:f7:4b:39:10:ab:3c:c7:18:
                    36:0b:5c:38:cb:58:9f:38:5e:a5:eb:aa:99:33:18:
                    c3:ab:cf:0d:32:55:7a:26:8a:a3:3e:b7:c2:88:f7:
                    76:46:60:39:da:3f:a3:6e:90:1d:66:a0:72:59:cf:
                    58:45:43:d0:85:ad:d0:eb:99:ca:b9:31:06:d9:d4:
                    db:0a:7e:f1:ae:f1:28:92:ae:bd:8d:86:6a:13:c0:
                    36:e7:99:ff:52:33:06:76:32:06:e5:bf:ec:4b:7d:
                    db:9f:08:82:2b:3f:80:8f:c5:d5:86:fd:9b:92:f5:
                    ee:f1:8a:17:44:9a:92:4c:84:63:a0:4e:d0:6b:68:
                    44:4d:ed:84:73:63:08:78:e8:db:51:18:6c:1f:84:
                    d1:16:1f:da:29:15:e1:f4:92:6a:31:08:2c:7d:51:
                    52:d9:c2:cb:01:3a:66:da:b8:64:d2:94:60:95:9a:
                    d8:5a:40:45:09:11:b4:d5:ed:67:1e:c5:a7:f4:04:
                    f4:77:15:29:e9:df:fd:81:87:9d:ae:69:f0:bb:08:
                    4a:d2:09:4d:52:0b:9c:c4:c4:ca:02:4a:7c:bd:11:
                    50:ad:0f:9a:1c:32:39:bc:ec:04:ce:f2:44:2a:32:
                    ea:dd:8e:70:98:91:69:76:1d:f0:dc:89:ab:17:9f:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AD:2F:DF:47:5A:37:87:02:6C:FE:00:28:98:64:5E:1F:39:89:0B
            X509v3 Authority Key Identifier:
                keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:a0:91:29:8e:c2:e1:af:6d:92:da:78:24:a6:20:80:58:8f:
         16:df:5f:ae:74:d8:fc:f0:01:ec:61:b1:e2:1d:fd:c1:2c:d3:
         24:30:aa:67:8d:a6:3f:77:be:7a:5d:7d:0b:f7:12:47:47:17:
         5e:0e:e5:48:eb:10:89:f0:ea:a5:9a:3c:6b:03:2d:40:1c:91:
         5f:da:2c:4a:73:ef:ca:bd:07:78:7f:7b:c8:c8:c5:a2:13:ed:
         6e:1b:b6:d3:8f:b4:ad:79:99:87:c4:e4:61:24:d7:45:ec:20:
         bd:3e:f4:00:ad:9f:c6:f2:9d:70:87:6f:fc:bf:db:cb:e5:3b:
         4e:36:82:33:86:ea:d3:c9:2a:a4:02:4d:46:4c:ee:eb:a2:12:
         4b:66:95:15:7f:b5:02:46:49:25:12:1e:e0:36:0c:e5:33:8d:
         a5:be:f3:89:ca:f1:90:91:31:3b:a7:a0:a0:d9:ed:b7:5e:ec:
         26:08:a6:8a:e9:40:b6:d2:64:a3:50:c4:5f:13:f6:4f:96:76:
         bf:1d:ca:f2:df:b8:d7:c4:47:a5:95:0e:7a:b7:46:06:73:48:
         8e:da:8f:8c:11:e3:f6:cd:2e:85:12:07:73:d9:8d:45:a3:93:
         58:4b:f4:9e:86:98:08:33:cc:65:dc:8c:c6:71:f6:0e:1a:a5:
         7b:40:84:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:43 2025 by rpki-client