Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File:                     lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier:          w05/oNd06uXPgJHnqE7iqkkFXs7MY7iySkTsV9M/f4s=
Subject key identifier:   28:30:EF:F4:59:7F:F6:C4:AE:CE:A8:2C:25:CC:25:91:B1:65:28:B5
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer:       /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial:       01988B7C4F0B837BEF721E1A81FEDFA7A625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number:          1621
Signing time:             Fri 08 Aug 2025 21:00:36 +0000
Manifest this update:     Fri 08 Aug 2025 21:00:36 +0000
Manifest next update:     Sat 09 Aug 2025 21:00:36 +0000
Files and hashes:         1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: 13JsoUIBya4b9BieRO7fZZXctBoSjQCGOpIv/uy5LT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 20:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:7c:4f:0b:83:7b:ef:72:1e:1a:81:fe:df:a7:a6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
        Validity
            Not Before: Aug  8 21:00:36 2025 GMT
            Not After : Aug  9 21:00:36 2025 GMT
        Subject: CN=2830eff4597ff6c4aecea82c25cc2591b16528b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bb:e5:12:1a:f7:6e:9d:37:dd:2d:a0:60:34:
                    7d:5e:0b:91:64:a6:1b:b4:a8:b2:0e:93:dc:72:4c:
                    17:d7:ab:fb:d6:87:4b:7c:8b:fa:6b:80:17:6d:7c:
                    3b:e0:55:e1:8c:44:26:d4:98:d8:1f:2d:09:2b:42:
                    d3:13:e0:af:13:5f:32:53:8f:00:77:69:da:c0:b9:
                    83:92:f3:ee:1b:42:15:bd:63:eb:bc:64:6c:a5:86:
                    a4:31:77:3f:3d:18:29:5f:31:8b:6f:03:b8:fe:f2:
                    24:82:5b:55:a6:90:00:8e:4a:5a:95:3b:4a:6b:69:
                    52:64:2e:f0:33:9c:a0:54:57:c5:ce:85:a9:12:2f:
                    fd:54:c4:08:93:ff:20:cd:a2:2f:7c:10:30:23:11:
                    8b:12:66:06:03:d8:7e:81:80:28:0c:4f:e5:13:77:
                    d7:27:1f:c1:bf:a5:f1:84:a5:fa:13:0a:08:f4:74:
                    e4:ee:ba:c7:a3:48:bb:28:8a:fb:94:69:14:10:d7:
                    ca:64:8a:bd:12:ba:e1:28:f7:40:66:17:a2:1b:a4:
                    25:10:b6:c8:dd:2d:e1:e5:bd:4d:27:9b:bf:50:03:
                    62:73:58:c1:f5:bb:f6:ac:71:04:5c:63:6b:17:f5:
                    77:2f:b2:ce:fa:35:64:a9:82:78:fb:bd:25:1f:80:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:30:EF:F4:59:7F:F6:C4:AE:CE:A8:2C:25:CC:25:91:B1:65:28:B5
            X509v3 Authority Key Identifier:
                keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4b:5a:53:22:6b:4d:54:b9:80:7e:c1:ac:74:43:b5:45:c9:
         98:f2:3c:ab:01:08:01:09:08:f0:94:dc:6a:86:c0:55:8b:1b:
         e8:fc:8b:c4:c5:2e:6d:21:4a:71:e4:89:4a:0f:be:c5:6a:d8:
         55:00:76:86:61:e8:79:d3:86:e7:e1:a5:33:4f:59:55:a7:a6:
         f1:8e:4b:f3:0f:5d:37:33:ce:11:26:eb:49:d7:47:14:77:c6:
         3b:fa:cb:e5:f6:c1:d5:ce:cd:9c:63:fb:2a:9b:6e:3b:c6:d2:
         11:d2:9b:2a:ca:af:87:bd:21:0d:9c:8b:4a:80:36:13:a3:2c:
         14:bd:70:f8:54:d7:2c:5a:82:43:72:0d:5e:d8:d9:92:66:07:
         54:41:1e:6f:0d:77:f4:bc:b9:1a:3c:bf:61:f5:32:fe:02:1b:
         43:36:a4:2b:e1:82:fd:8d:8a:0b:d9:b9:62:ff:31:f4:0e:ea:
         e4:f3:20:f7:97:1a:f4:3b:66:9a:29:c9:84:4d:8a:a3:4e:8c:
         f9:ff:7a:a1:a0:41:34:ca:e2:ac:a2:46:02:e5:81:0e:88:02:
         6c:32:c1:d9:45:ff:11:8d:48:3b:a1:7c:d5:21:01:ce:81:4f:
         8f:e9:4a:ec:31:e4:c1:fe:3b:cd:14:7a:1c:ed:e5:28:62:4d:
         a3:b7:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:50:53 2025 by rpki-client