Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File:                     XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier:          p4GWFUdnwJhGSbrDCam1SblKJxEu367LWmE7NFluzuc=
Subject key identifier:   46:57:15:B6:A3:59:FD:79:DD:50:4D:41:88:12:5C:93:85:4F:1F:4A
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer:       /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial:       0198A04E0A0BCA2EB1861069B30B6DE700EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number:          15BD
Signing time:             Tue 12 Aug 2025 22:02:05 +0000
Manifest this update:     Tue 12 Aug 2025 22:02:05 +0000
Manifest next update:     Wed 13 Aug 2025 22:02:05 +0000
Files and hashes:         1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: 9BeOJkRIOwG4AUUv4uJrK6ul16F++Uwx2cnmmz/yFOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:4e:0a:0b:ca:2e:b1:86:10:69:b3:0b:6d:e7:00:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
        Validity
            Not Before: Aug 12 22:02:05 2025 GMT
            Not After : Aug 13 22:02:05 2025 GMT
        Subject: CN=465715b6a359fd79dd504d4188125c93854f1f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:c5:bb:fa:81:f8:f4:7d:80:19:e7:d3:58:
                    86:84:dc:0e:77:05:8e:84:6f:2a:26:75:fa:0d:88:
                    8f:49:b4:98:0f:6d:ed:63:59:6b:21:9b:a2:2a:d4:
                    1f:68:64:92:a4:c9:85:73:35:db:e0:6c:aa:e1:37:
                    d2:33:92:f7:9c:c7:a8:bb:02:8e:07:2f:83:d9:5c:
                    af:97:da:e2:12:4e:2b:0c:ce:9b:fe:4a:60:bf:f6:
                    b6:65:9b:05:16:b6:26:92:43:36:57:44:7e:5b:c3:
                    eb:de:f1:43:da:90:b3:eb:49:74:3c:12:0a:68:ae:
                    ee:58:1e:21:b4:68:d5:3a:f9:72:55:f1:4d:6d:b4:
                    1a:fe:d2:a9:ab:74:2d:b8:ed:c0:3a:08:ef:87:92:
                    13:71:d0:67:e8:94:3c:88:15:93:b6:45:35:bf:2f:
                    a8:65:3c:20:a8:6c:f4:75:df:60:f8:06:5c:66:f1:
                    33:05:d6:a6:bf:cd:d0:bb:7e:d2:e7:20:6a:86:2e:
                    ac:76:8f:c1:06:5c:7b:c3:66:45:41:44:fb:a5:58:
                    30:37:4f:ff:55:3d:12:14:80:31:84:63:fe:4d:b9:
                    b6:13:a3:83:c1:19:e8:8d:c1:35:39:7b:40:1f:91:
                    45:1b:4b:8f:71:1e:de:18:67:44:db:48:8c:d1:53:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:15:B6:A3:59:FD:79:DD:50:4D:41:88:12:5C:93:85:4F:1F:4A
            X509v3 Authority Key Identifier:
                keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:43:07:e9:2f:89:96:79:a0:2d:29:3f:d6:98:02:c9:53:1e:
         92:cb:d4:79:fd:a8:9a:5d:fe:b3:6f:e6:86:0b:4c:d7:ff:8d:
         98:ee:14:bc:1a:66:b7:3f:96:91:d0:72:b7:36:9a:e5:90:36:
         9c:1d:2c:c9:8e:eb:5d:0c:65:70:af:85:81:bf:49:dd:68:4e:
         95:a7:3c:5c:b6:63:8a:cb:20:91:1f:98:17:3d:1c:6d:41:20:
         e0:6f:39:a4:7f:c6:7d:c4:11:c2:b4:7f:49:a3:ff:da:c5:e6:
         60:e8:da:ba:d2:47:43:f1:43:e1:31:0d:02:02:9e:ae:82:8b:
         d5:3c:ab:5a:dc:e8:cd:83:a2:74:31:8d:11:dd:60:ee:3e:18:
         6b:c1:90:70:a2:c9:ab:38:81:0f:f7:c1:e0:15:e7:14:31:3a:
         a2:38:42:2d:2c:d8:d3:e0:c9:d0:71:e9:c2:9c:05:fb:b6:af:
         55:33:bb:94:9a:75:99:15:e6:90:2c:eb:49:08:f4:d1:aa:c8:
         f4:6c:76:b4:5b:5c:12:24:24:46:83:ad:43:b4:b0:c6:49:bc:
         b8:31:96:4f:97:cd:06:9a:45:84:d7:f9:10:56:3e:68:ff:db:
         96:05:a8:cd:41:e7:f3:b3:66:ca:d7:4d:ba:e7:12:a5:80:98:
         74:48:2d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:05 2025 by rpki-client