Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File:                     4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier:          lShxmiFybRFuKyAmLfKX/6S4qBmeLOsJhGSHHBAGYwY=
Subject key identifier:   83:6E:1F:ED:70:A6:D8:38:EB:C0:C6:BC:44:E8:49:28:AD:C5:E3:BC
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer:       /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial:       019873742699889CA7A3D9155A9AE6729AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number:          030C
Signing time:             Mon 04 Aug 2025 05:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 05:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 05:00:48 +0000
Files and hashes:         1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: 5OBYuxOqp6khWjCQq3HmA7XGqBEcVgo93xZ27NbL8JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:74:26:99:88:9c:a7:a3:d9:15:5a:9a:e6:72:9a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
        Validity
            Not Before: Aug  4 05:00:48 2025 GMT
            Not After : Aug  5 05:00:48 2025 GMT
        Subject: CN=836e1fed70a6d838ebc0c6bc44e84928adc5e3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ce:d9:b1:4d:1a:e8:74:b3:5f:a4:1c:44:c0:
                    07:cf:64:44:d3:fc:e3:e5:51:df:3f:70:6e:23:21:
                    a5:fa:82:0a:45:65:e7:b5:84:0a:fb:0b:0e:98:49:
                    df:e7:81:24:cc:2e:3b:c0:aa:52:b6:06:f7:29:fc:
                    90:09:29:c5:7a:a9:93:32:a5:a0:ac:c0:06:2b:ad:
                    db:31:b4:53:a3:7f:aa:9b:ac:e5:3f:be:47:15:39:
                    f3:7d:e4:de:1d:b6:8e:9e:35:d6:e8:4d:86:cd:26:
                    77:d1:19:13:bb:07:d8:97:94:5e:bc:97:d0:87:ef:
                    df:14:0e:31:0b:05:43:5d:cc:4d:49:29:f1:bc:fc:
                    90:bd:c2:bc:61:91:c0:e6:86:14:49:3a:01:ce:23:
                    17:65:32:c1:a5:fe:82:b5:77:d3:41:95:15:0f:19:
                    63:3d:14:c9:41:01:62:18:ef:7f:b2:fa:cb:25:ef:
                    a9:08:2f:20:7f:50:48:83:35:67:6e:5b:be:6a:fc:
                    4e:60:0f:af:4e:95:9b:53:27:4e:9b:6c:d4:68:93:
                    cc:56:c0:bf:7c:2a:17:4a:be:1b:c1:a6:b9:e0:74:
                    97:d8:26:a8:32:1e:ba:31:c5:5e:0a:4a:67:e5:3b:
                    95:28:6f:6e:ab:ed:f9:98:87:4f:1f:58:e0:09:29:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:6E:1F:ED:70:A6:D8:38:EB:C0:C6:BC:44:E8:49:28:AD:C5:E3:BC
            X509v3 Authority Key Identifier:
                keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:be:bb:10:18:fd:eb:99:b1:f0:d3:55:0e:90:76:ce:5f:ab:
         5e:54:60:ee:60:f6:a4:92:e4:63:14:47:b0:e8:88:0c:1e:c0:
         6e:42:81:02:8a:7a:fe:07:a4:23:2a:d8:77:7c:c4:b3:76:77:
         31:a5:29:94:c4:e1:9c:ef:63:81:5b:d9:2f:61:48:26:4a:4b:
         04:d1:25:bb:c6:7e:3b:03:1d:73:c3:14:5d:8e:b8:98:cd:36:
         de:44:21:66:3a:91:1c:b0:1d:2a:b4:85:0d:5f:d1:7a:34:82:
         38:d5:98:6a:41:ef:b2:1c:d9:a1:a4:5f:20:b6:3f:2d:00:49:
         d1:4f:e3:37:50:48:1b:80:27:22:b1:d5:10:d5:86:b6:84:5f:
         1c:64:ad:55:d7:60:6e:8c:f9:31:ef:d2:eb:71:0f:8a:68:71:
         b1:95:6e:27:b4:38:a6:1c:9b:db:71:ca:39:76:bc:1b:b9:2b:
         4f:31:a1:00:1f:3a:ab:6b:ed:9e:e5:37:ae:0a:e4:25:f9:e5:
         e8:89:88:dc:b5:92:00:98:89:fe:5e:9f:3f:3c:57:32:1e:5e:
         a5:e7:2c:d4:82:28:bb:14:96:0a:f9:06:67:95:50:4e:9b:85:
         77:b8:06:22:e5:9f:b2:75:80:47:1c:11:f0:c8:b3:de:f1:3c:
         d6:74:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:03 2025 by rpki-client