Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
File:                     TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft (raw, json)
Hash identifier:          PhtMhb2ZMPjKKUPvmDB+gzRMuCzwQfmpr0Gd2K4pMQA=
Subject key identifier:   2A:BB:8D:EF:18:AD:71:54:38:EA:84:81:1D:30:18:7B:F6:A4:1C:5E
Authority key identifier: 4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44
Certificate issuer:       /CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
Certificate serial:       01988B7D46EA9B29D62FD56C273CD0C7DAFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
Manifest number:          1620
Signing time:             Fri 08 Aug 2025 21:01:39 +0000
Manifest this update:     Fri 08 Aug 2025 21:01:39 +0000
Manifest next update:     Sat 09 Aug 2025 21:01:39 +0000
Files and hashes:         1: TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl (hash: 4gUoe83Z6qAErng2IZ1XSd+bkLuIqQnKbUTAeSDoRY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7d:46:ea:9b:29:d6:2f:d5:6c:27:3c:d0:c7:da:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4cfce60c9b0f2d47b362864d8febb225bb5244
        Validity
            Not Before: Aug  8 21:01:39 2025 GMT
            Not After : Aug  9 21:01:39 2025 GMT
        Subject: CN=2abb8def18ad715438ea84811d30187bf6a41c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:82:83:55:23:85:ae:b7:09:84:55:d7:4d:
                    59:3b:67:34:24:aa:06:37:3c:a8:db:b1:5f:eb:89:
                    cb:b2:96:d8:17:39:58:1f:92:63:42:8f:70:3c:33:
                    94:ea:28:ad:49:1c:20:f3:6e:2d:19:ae:90:6e:f1:
                    a4:44:ee:95:3d:44:62:4c:91:dc:51:c9:38:59:8f:
                    d9:42:92:cc:5c:31:73:09:b4:b2:0d:ed:69:d6:52:
                    f6:f5:2f:3a:e8:17:12:45:85:a6:f0:5f:26:70:c5:
                    4a:3b:15:58:51:82:d6:95:01:7b:e9:5a:ea:76:16:
                    63:8c:ed:68:92:4f:df:22:9f:fe:74:9c:93:62:da:
                    69:34:7e:0d:00:2d:0e:7f:1d:3d:3b:17:f1:04:cc:
                    fa:a6:4b:6b:6f:4a:16:1b:32:2a:9f:8d:ca:93:42:
                    e7:f9:46:49:c9:5f:3d:53:b5:fa:c3:ec:95:59:05:
                    9d:e1:c6:71:8f:45:80:b6:cb:3e:6f:54:bb:6d:ad:
                    78:a2:88:51:ce:a2:5b:b1:7e:7a:41:13:db:53:17:
                    e1:be:7a:1f:ac:4f:64:d1:11:80:b7:05:0a:67:10:
                    dd:81:6a:c1:0b:02:8b:47:ee:c0:15:fc:28:16:89:
                    72:50:ce:1c:88:94:23:2a:a8:56:19:78:38:e2:34:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:8D:EF:18:AD:71:54:38:EA:84:81:1D:30:18:7B:F6:A4:1C:5E
            X509v3 Authority Key Identifier:
                keyid:4C:4C:FC:E6:0C:9B:0F:2D:47:B3:62:86:4D:8F:EB:B2:25:BB:52:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEz85gybDy1Hs2KGTY_rsiW7UkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/bf8b0e-beda-4a56-baf0-82ad11626eed/1/TEz85gybDy1Hs2KGTY_rsiW7UkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:81:4c:98:fc:f1:5e:e2:ed:22:b2:bc:5f:93:f1:88:7d:e4:
         b5:6a:74:c5:f6:cf:39:66:cb:90:3e:43:77:2d:4c:72:a2:62:
         cd:c2:8f:91:0b:0b:85:d2:2e:b5:51:09:26:2b:7b:c0:4c:95:
         ad:24:e8:6e:64:0b:4a:2b:87:51:ff:b5:f0:cb:c3:70:bc:1c:
         a0:71:4f:41:e2:d8:49:2c:f6:44:96:f1:cc:cc:6d:13:61:a9:
         96:63:14:45:e6:98:28:f1:67:d3:18:e9:68:70:fe:4f:45:f5:
         38:95:1e:72:8c:d5:68:a5:69:92:d3:ce:e0:37:cd:7f:0e:cb:
         18:77:c3:46:ac:7c:b0:02:5f:96:8b:1e:ee:86:dc:a5:b4:cb:
         9c:d3:24:1e:38:54:02:8a:e7:14:e9:1e:3d:12:b2:60:83:85:
         76:e7:1a:58:2d:fd:a6:a1:9c:39:54:78:8e:9e:07:58:bb:68:
         ed:04:d8:1f:aa:de:9e:1b:8c:74:33:59:d1:6d:3a:e7:f1:72:
         b9:71:df:2f:14:ae:60:c8:4f:c9:11:c1:75:e1:5d:5a:44:f2:
         f3:24:a4:59:4b:8d:b5:b9:bd:99:ce:86:72:30:49:b0:f0:cf:
         eb:26:6c:2d:89:ea:9a:e9:f2:8d:6a:10:eb:6c:c6:8b:f4:5c:
         89:aa:86:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 03:00:02 2025 by rpki-client