Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
File:                     NvHVZ2vdcEM0sts0ypBNd83Suso.mft (raw, json)
Hash identifier:          RMHfgSSsitMdaJDnKOHj8aAoDXkZOlzfnK2E2VQR+t8=
Subject key identifier:   E7:5F:99:1F:71:6A:53:87:3B:08:14:24:26:DF:ED:2F:69:DD:CE:02
Authority key identifier: 36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA
Certificate issuer:       /CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
Certificate serial:       0198820BBAB7E3787CCBC9CED6A48098B360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
Manifest number:          017D
Signing time:             Thu 07 Aug 2025 01:01:03 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:03 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:03 +0000
Files and hashes:         1: NvHVZ2vdcEM0sts0ypBNd83Suso.crl (hash: MH6UQlyp8zQw9eE5qm5JQfCVg/EcInoulzeT2z1Kn7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0b:ba:b7:e3:78:7c:cb:c9:ce:d6:a4:80:98:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36f1d5676bdd704334b2db34ca904d77cdd2baca
        Validity
            Not Before: Aug  7 01:01:03 2025 GMT
            Not After : Aug  8 01:01:03 2025 GMT
        Subject: CN=e75f991f716a53873b08142426dfed2f69ddce02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:57:b4:6d:e2:86:3f:cd:48:9b:5d:02:89:b5:
                    e4:4b:a5:db:24:73:71:29:20:f9:e9:2d:ee:3d:f7:
                    57:b5:b9:56:eb:30:3d:da:43:3a:bb:8f:0e:f0:77:
                    9c:e0:31:b0:07:e2:49:65:1a:31:a6:e2:7d:ac:26:
                    c7:fe:52:cb:a4:7d:72:63:ce:00:aa:62:16:1c:2e:
                    18:ab:c4:43:a6:a5:5d:33:16:8c:21:10:0d:19:88:
                    b0:5b:93:ff:34:45:2a:d6:78:79:e8:58:7c:3e:bc:
                    d8:27:7d:c3:cf:35:7f:65:48:28:6c:56:48:f8:cf:
                    bb:ef:68:87:bc:cc:61:4c:f3:73:30:11:b7:eb:45:
                    08:30:58:1f:18:03:a6:bd:7f:c6:37:0b:1f:8f:b2:
                    c3:9c:23:79:6a:ac:c3:a6:ac:88:d7:4d:23:b0:a0:
                    f5:f0:ae:0e:84:6c:18:9d:35:8a:8f:57:bf:30:2d:
                    72:60:fb:10:cf:81:3b:d6:73:10:9d:02:06:26:01:
                    ae:28:68:05:47:7c:c6:3a:92:c9:53:c1:c8:91:e4:
                    eb:15:f5:5a:fb:7f:7e:b8:07:61:82:93:2d:68:d3:
                    5f:7f:c7:9e:14:c8:3e:8f:c1:b1:e5:06:a6:d0:52:
                    6d:6a:8b:0c:71:c1:98:5d:03:c1:ea:5f:eb:66:d2:
                    e1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:99:1F:71:6A:53:87:3B:08:14:24:26:DF:ED:2F:69:DD:CE:02
            X509v3 Authority Key Identifier:
                keyid:36:F1:D5:67:6B:DD:70:43:34:B2:DB:34:CA:90:4D:77:CD:D2:BA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NvHVZ2vdcEM0sts0ypBNd83Suso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4d865c-70f5-44b9-88a6-ea8afe678970/1/NvHVZ2vdcEM0sts0ypBNd83Suso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:8f:d9:ab:5c:54:14:c9:4e:8f:4b:41:21:a9:aa:28:34:
         7e:39:9f:ce:4f:cd:e7:62:6d:83:a6:de:7b:4d:72:d0:a8:6f:
         d2:45:7e:b6:3d:45:cd:53:da:87:1e:41:da:b1:b0:92:e0:a2:
         cc:1d:d7:73:de:ff:89:d2:80:bb:94:a8:9a:d5:11:e2:5f:32:
         f8:57:1a:bd:65:73:df:7c:45:d1:12:03:50:de:4b:e1:57:3f:
         c4:e6:d1:da:8b:a1:7c:f3:3d:9b:48:13:60:bb:07:39:f8:f0:
         47:30:8a:62:73:49:f5:fd:b5:52:d9:e4:3a:a3:ba:9f:0c:a9:
         05:41:b2:c6:b6:a7:43:86:fb:94:48:f8:07:98:53:8c:49:5b:
         4b:e5:32:40:9f:38:45:03:97:1e:27:87:7c:d3:32:0c:1e:a3:
         35:f5:e0:21:2f:a1:75:bc:d4:7d:25:b4:03:d0:d8:d5:ad:f6:
         1c:10:ee:5f:28:74:54:1c:eb:59:0a:be:ea:b0:78:f6:a1:ef:
         5e:2a:e4:60:2e:32:05:98:b2:86:21:7d:a4:52:f1:72:f6:c5:
         78:56:b4:87:52:74:af:77:11:0a:32:25:4b:bc:be:8e:e1:e9:
         05:f4:24:34:48:2c:b1:c4:a1:08:89:47:3d:70:d0:0a:74:0e:
         6d:46:e3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 07:22:31 2025 by rpki-client