Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File:                     4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier:          9JMkpL29cpkaf066JqzyreM1DZpJ9WWJ8mpjW1tYozI=
Subject key identifier:   4A:D1:96:66:23:EE:25:3A:AE:42:F0:19:52:3E:EF:C1:F9:F1:77:BE
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer:       /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial:       01987C0A303B37F2C005C8E8F21C1CFEAA07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number:          1618
Signing time:             Tue 05 Aug 2025 21:01:39 +0000
Manifest this update:     Tue 05 Aug 2025 21:01:39 +0000
Manifest next update:     Wed 06 Aug 2025 21:01:39 +0000
Files and hashes:         1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: zK4qlXDq0vgTUrW1eyGIg41ckTlG/1gekhOUo3WamaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:0a:30:3b:37:f2:c0:05:c8:e8:f2:1c:1c:fe:aa:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
        Validity
            Not Before: Aug  5 21:01:39 2025 GMT
            Not After : Aug  6 21:01:39 2025 GMT
        Subject: CN=4ad1966623ee253aae42f019523eefc1f9f177be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:ef:7c:38:8a:14:a9:9d:40:b5:d4:f7:c1:
                    08:ec:bd:c6:63:57:1c:3c:cb:79:30:31:55:a4:26:
                    c2:95:29:6f:3e:27:85:18:d1:c2:25:d0:14:d1:e1:
                    8d:46:7d:13:df:50:43:2a:93:2f:d4:92:e7:ef:74:
                    e4:ba:50:b5:cf:3f:ce:0a:92:37:53:b4:b0:ba:23:
                    73:ca:dc:ef:1e:ed:ed:aa:e8:26:08:4d:f9:c3:e2:
                    9a:e4:bd:7c:2d:3c:10:17:27:f7:53:c5:9b:2e:40:
                    89:6b:ea:2d:ff:c5:38:23:c4:1d:4f:f2:b5:0e:e1:
                    c2:fb:7c:5f:ce:d7:28:a7:02:21:90:92:92:53:72:
                    56:3b:ea:d7:8c:b8:9a:40:18:a4:c4:c3:01:4c:3c:
                    79:4f:66:4e:be:d3:76:d3:5f:e3:39:4a:27:bb:ec:
                    dd:59:92:cf:7c:2f:36:01:92:fb:49:88:c9:b6:01:
                    53:38:79:59:de:17:3b:fa:e4:19:66:b9:50:02:a0:
                    94:de:d8:76:27:38:2e:53:70:fc:55:a7:76:e4:85:
                    42:cd:75:f6:56:22:47:b9:be:ab:52:99:b8:61:b1:
                    9d:fe:79:51:80:e8:1f:b1:31:b7:f9:38:68:e3:bf:
                    ab:32:39:f4:8b:43:bc:22:57:2c:c4:34:3b:be:7c:
                    df:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D1:96:66:23:EE:25:3A:AE:42:F0:19:52:3E:EF:C1:F9:F1:77:BE
            X509v3 Authority Key Identifier:
                keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:61:19:5a:aa:4f:d0:f1:5e:85:c3:e7:bb:89:aa:46:79:88:
         9f:c9:85:7b:08:14:f3:e0:97:33:9b:08:0a:ea:da:0e:e7:03:
         11:22:37:4b:06:43:4e:b6:77:fc:67:15:97:e9:c6:d3:8d:8f:
         f3:ce:7f:36:ec:db:a9:70:62:78:a6:f8:7b:77:a4:b0:c1:68:
         97:23:80:37:3f:be:14:22:1a:4a:e0:ac:21:d0:72:ee:44:36:
         48:de:62:4c:d7:68:a5:5e:d0:1f:7c:22:9a:c3:ef:c1:3a:ce:
         cc:41:fd:d2:a2:a7:34:69:58:b4:c6:93:27:7a:a2:47:bf:71:
         14:91:9a:09:2f:14:61:0a:54:be:df:6b:8d:89:e4:53:60:db:
         18:83:ee:db:d2:57:b2:06:2b:98:5f:cb:70:76:f4:21:77:ee:
         a6:c8:37:77:cd:39:f5:66:e4:cd:50:85:86:da:81:7c:41:f6:
         dd:23:06:19:8a:71:12:10:bf:44:45:87:46:d9:00:a7:40:de:
         0b:3c:36:6b:2a:2e:35:07:62:a5:2b:e3:e4:ee:c7:bc:e5:59:
         aa:56:9e:d2:e5:0e:de:ae:c6:84:b4:e8:52:90:66:64:7d:82:
         2e:a1:4a:6a:b5:af:56:00:02:b9:01:58:90:5c:55:78:25:43:
         cf:3d:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:47:10 2025 by rpki-client