Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
File:                     pPwscnotINbRTRyACqzbLfEJPcQ.mft (raw, json)
Hash identifier:          8KeByBpoAKg3sZjkuq57nzC2+LXh22mdBD1nP4lzW2I=
Subject key identifier:   63:30:27:46:05:51:0E:F2:E6:89:02:91:CB:77:3E:DF:DB:39:EA:4C
Authority key identifier: A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4
Certificate issuer:       /CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
Certificate serial:       019895FFD9FDDEC186034925467432665EFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
Manifest number:          0194
Signing time:             Sun 10 Aug 2025 22:00:29 +0000
Manifest this update:     Sun 10 Aug 2025 22:00:29 +0000
Manifest next update:     Mon 11 Aug 2025 22:00:29 +0000
Files and hashes:         1: pPwscnotINbRTRyACqzbLfEJPcQ.crl (hash: 7Ia+ui1njLRgXCoe3HTO6dkpXS9rsJvSMJNcC80NAyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:ff:d9:fd:de:c1:86:03:49:25:46:74:32:66:5e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4fc2c727a2d20d6d14d1c800aacdb2df1093dc4
        Validity
            Not Before: Aug 10 22:00:29 2025 GMT
            Not After : Aug 11 22:00:29 2025 GMT
        Subject: CN=6330274605510ef2e6890291cb773edfdb39ea4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b4:d0:e7:75:85:82:7c:04:01:90:e0:5f:2c:
                    9f:bf:6a:8a:46:f1:b2:fb:8f:0e:a8:79:eb:fa:f5:
                    b9:de:09:5e:9e:0b:1b:f4:ad:1a:e7:d4:e5:8f:95:
                    3c:50:86:04:31:a6:e8:f3:41:56:03:8e:b0:d3:2b:
                    00:a7:1b:12:83:01:09:93:9c:2c:62:d7:be:bc:50:
                    88:a0:79:c5:8e:a2:ab:a0:51:81:79:14:95:2e:b7:
                    1d:69:5c:d5:b3:51:18:fc:f6:20:ca:90:eb:3a:b5:
                    d7:08:9f:cb:45:e8:c5:3d:fe:52:03:7d:c1:2d:44:
                    a9:ed:d6:e3:c7:42:98:f7:b8:f0:d1:76:cd:16:b5:
                    d6:a5:ac:18:2e:9e:48:c0:c4:34:67:41:85:f2:d1:
                    3c:46:ed:93:b1:44:6c:06:47:3d:c4:c9:04:d8:f0:
                    cf:9b:7e:35:e1:24:c5:6d:81:80:71:0f:5b:b5:f4:
                    f7:52:ef:5b:6e:99:88:ef:19:34:a0:00:69:01:ab:
                    4f:6b:0f:fb:38:4e:91:f0:88:4c:f4:39:b3:09:8f:
                    ff:aa:a9:a7:0b:27:71:9c:ac:0b:99:8c:13:1c:98:
                    e4:c1:9b:a2:6f:99:da:b9:fe:77:c6:04:33:07:36:
                    ff:03:8c:9b:6a:53:f6:8b:8e:86:b9:f3:1d:be:45:
                    a5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:30:27:46:05:51:0E:F2:E6:89:02:91:CB:77:3E:DF:DB:39:EA:4C
            X509v3 Authority Key Identifier:
                keyid:A4:FC:2C:72:7A:2D:20:D6:D1:4D:1C:80:0A:AC:DB:2D:F1:09:3D:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPwscnotINbRTRyACqzbLfEJPcQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f66e38-4b06-4808-a46e-2606643ab607/1/pPwscnotINbRTRyACqzbLfEJPcQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:4a:8d:71:fb:ce:8f:d6:4d:f9:b0:e4:58:e5:de:15:a6:56:
         88:e2:11:11:a7:94:34:46:51:b0:e4:4c:7e:ca:68:3b:ab:89:
         b8:42:8d:94:b1:ce:bf:ae:d4:a3:51:59:95:39:9c:af:52:cb:
         8f:a7:10:81:1d:bc:8d:b3:d8:8a:5b:d6:a9:7d:c0:84:15:3c:
         fd:0b:81:a6:06:fa:0c:d3:69:c4:4c:0d:d5:25:97:0f:9e:ef:
         e8:c1:77:62:a2:16:b8:8c:8e:a1:bf:2f:b0:9b:6b:2f:0d:00:
         6c:e5:64:21:6b:c7:07:1e:08:c1:4c:b1:ba:c8:0d:28:d2:54:
         ed:7d:7e:eb:4c:68:2d:00:88:7a:64:54:e3:d2:d5:f9:91:41:
         bb:ff:e5:8d:23:37:64:8c:eb:04:89:e2:c9:ad:01:b3:3d:e2:
         3b:d7:85:b0:7e:dc:f0:53:17:24:cb:c6:5f:68:e9:8e:81:81:
         e9:9d:3b:1a:dc:b8:03:93:f6:97:9e:9e:11:4f:1b:9f:7e:56:
         80:06:42:4f:0a:1c:98:f7:05:3f:91:63:bb:88:29:5a:52:74:
         ce:3d:80:1c:67:34:a1:04:e9:1c:68:15:2f:3f:41:78:28:de:
         b1:8d:12:2b:b6:d5:6f:88:72:05:85:98:d5:21:3d:14:ba:52:
         75:05:50:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:15:08 2025 by rpki-client