Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          mzOfcA++oem0sRMN9eP74m0CHSFCbuevFK+oQDvRht0=
Subject key identifier:   6F:19:4C:96:80:68:CC:BD:C4:2B:5F:07:93:9B:17:C8:F9:9E:4E:15
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       019897B7EB9388E3DB0C072496E0A539B955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          1021
Signing time:             Mon 11 Aug 2025 06:01:09 +0000
Manifest this update:     Mon 11 Aug 2025 06:01:09 +0000
Manifest next update:     Tue 12 Aug 2025 06:01:09 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: UC1QIV7Ni8PCq9SNU5bv+j1LgG+BXVCPCI8qmUjHF3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:b7:eb:93:88:e3:db:0c:07:24:96:e0:a5:39:b9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Aug 11 06:01:09 2025 GMT
            Not After : Aug 12 06:01:09 2025 GMT
        Subject: CN=6f194c968068ccbdc42b5f07939b17c8f99e4e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:f7:8b:bb:42:f7:3a:e3:34:34:1e:79:b4:
                    f5:70:7b:c9:d6:77:77:fb:ae:fe:82:0b:82:03:c8:
                    62:72:cc:13:e6:a5:bd:ee:ae:5f:4b:42:d1:d8:51:
                    7a:aa:24:f0:29:c8:60:09:80:24:16:96:4a:8b:90:
                    30:f9:2c:5c:0d:ca:11:8b:00:ca:77:3a:28:e9:33:
                    f4:34:0b:71:99:79:84:89:47:b6:20:c1:0c:79:de:
                    44:be:0c:c2:6b:28:6a:49:bc:52:51:87:9f:3a:b4:
                    4d:f8:94:d6:0c:d4:30:1a:9d:33:b8:5a:12:c7:84:
                    4d:90:ce:63:c5:9c:09:d9:c4:e0:03:c4:40:b5:f2:
                    f1:fb:fc:b5:12:62:1a:f7:24:6c:97:63:b9:1a:43:
                    19:74:49:b4:d9:33:ba:11:9d:d2:8e:77:48:03:72:
                    1d:be:f3:9b:b8:d4:09:2c:fe:52:a3:fd:d9:a0:b9:
                    b3:38:01:59:73:00:6a:b4:0c:85:bc:86:86:89:1b:
                    0a:ec:9e:9d:5d:4e:33:25:5a:2d:48:09:8a:3d:1d:
                    e2:f6:8b:fc:f5:62:1e:02:6a:35:e7:56:7c:54:5f:
                    de:0d:85:17:2f:ff:3b:8f:40:2e:9d:43:62:b5:52:
                    03:f4:ab:7f:26:86:63:99:19:32:aa:12:34:ab:f5:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:19:4C:96:80:68:CC:BD:C4:2B:5F:07:93:9B:17:C8:F9:9E:4E:15
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:1e:0a:1c:aa:80:c6:a6:a8:df:ab:20:f3:0b:49:f8:4d:
         8c:27:f0:75:5b:0f:06:df:c3:67:5d:cc:f8:29:e6:b4:07:3f:
         bc:ae:59:99:61:55:a3:4c:00:16:26:ff:8d:03:47:c8:aa:e2:
         77:5f:73:5f:e1:e0:c4:45:cf:b4:69:f0:32:cf:42:60:48:10:
         92:90:f6:c0:13:c8:55:51:f5:68:e7:ff:3c:ac:e6:37:d0:8a:
         ce:c4:07:bd:32:e9:4c:37:39:b4:24:18:d6:9f:83:cf:df:25:
         a8:25:f2:43:98:0f:49:81:ef:7b:b6:b8:bb:7b:03:b4:b0:08:
         92:88:a7:f9:92:64:86:6c:bf:13:84:7c:73:fb:d8:02:0e:46:
         ab:c2:31:10:99:b3:ae:e0:da:15:9c:1c:41:c0:a4:e2:38:16:
         5b:02:4a:b1:73:75:9c:6a:b7:e2:ef:5e:ad:09:90:47:7c:f7:
         14:d8:43:30:2f:ad:81:ba:5c:fa:20:7a:74:4f:6c:72:07:7e:
         90:8e:89:c1:7b:48:fd:c0:e1:0e:f1:36:41:3a:a6:04:2c:72:
         a9:a5:27:b8:be:8e:c1:8f:58:ad:dc:1b:ec:2a:38:87:5c:05:
         5a:dc:8c:5a:28:6a:67:fd:5c:de:f9:cb:95:ec:6a:fa:7c:50:
         d4:52:91:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:25:13 2025 by rpki-client