Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
File:                     AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft (raw, json)
Hash identifier:          wEZyMtkZiwe3BbkznRbnHgbDLQxWUUbmxdr5aA0KxZI=
Subject key identifier:   39:93:76:AE:42:84:21:55:10:45:00:BC:5D:F4:49:1C:17:2B:8E:E6
Authority key identifier: 03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD
Certificate issuer:       /CN=030be91321074434c9e820db661c91ca62ccb0fd
Certificate serial:       0198D4736A9FC1D4B006781102E6AB65F094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
Manifest number:          1041
Signing time:             Sat 23 Aug 2025 01:03:10 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:10 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:10 +0000
Files and hashes:         1: AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl (hash: Byf4t0W2tudhRJT/SH4HPvnUyYR8DYR6/1XKWbu5Ozg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:6a:9f:c1:d4:b0:06:78:11:02:e6:ab:65:f0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030be91321074434c9e820db661c91ca62ccb0fd
        Validity
            Not Before: Aug 23 01:03:10 2025 GMT
            Not After : Aug 24 01:03:10 2025 GMT
        Subject: CN=399376ae42842155104500bc5df4491c172b8ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:48:c5:2d:1d:90:72:6e:35:7d:68:1e:ba:
                    a0:a3:f0:f2:db:57:e6:41:d4:fc:90:4c:72:42:c2:
                    74:f5:01:5c:80:08:01:49:d5:5e:b9:fd:a2:d1:f4:
                    d0:72:47:86:c9:ef:77:0a:dd:ba:e6:fc:cf:e9:c6:
                    a9:aa:f1:61:c3:f8:d4:cf:1c:07:59:12:a6:08:8e:
                    36:f5:64:28:cd:29:6c:39:05:c8:e0:2f:4b:47:d2:
                    74:46:29:54:fd:4c:e6:b4:e5:6f:3c:1e:c6:7a:c8:
                    8b:46:bf:ef:23:be:c0:85:29:18:8c:18:70:ee:1a:
                    59:49:4f:7d:0e:08:83:a6:95:41:11:a3:1e:93:52:
                    47:2e:a1:4a:80:99:34:ad:73:4f:6b:2e:50:1f:fd:
                    61:7b:2f:51:e8:84:70:4c:f9:a0:25:10:bb:4c:2a:
                    d0:66:b8:34:10:3a:cd:39:4f:29:f1:46:7e:b8:38:
                    da:6e:a4:5c:b0:6e:86:c2:29:ab:b3:e0:32:cc:70:
                    3a:b9:7c:9f:5d:8d:c2:b3:98:16:e0:42:73:bd:a5:
                    26:94:1d:e6:93:a4:30:be:21:58:2f:05:df:16:cf:
                    2e:ce:5d:8e:a0:cd:44:99:bd:80:a2:58:fc:13:88:
                    11:61:9a:d6:39:25:ed:d7:dc:76:10:b8:d6:e9:d6:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:93:76:AE:42:84:21:55:10:45:00:BC:5D:F4:49:1C:17:2B:8E:E6
            X509v3 Authority Key Identifier:
                keyid:03:0B:E9:13:21:07:44:34:C9:E8:20:DB:66:1C:91:CA:62:CC:B0:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AwvpEyEHRDTJ6CDbZhyRymLMsP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/13df90-71bc-40be-824e-2c40d811fd4e/1/AwvpEyEHRDTJ6CDbZhyRymLMsP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:5a:9d:c4:6d:2a:33:59:64:95:2e:be:fd:b7:ee:f1:60:
         7d:26:15:91:7d:e6:67:f5:f8:43:bc:11:62:43:50:d0:bd:55:
         ef:d3:2c:70:50:48:c7:47:8d:b4:8c:c7:44:21:7b:99:ec:e4:
         42:f7:db:90:da:06:bb:98:8f:95:d8:f4:81:5c:03:de:38:56:
         1d:fb:a6:3f:37:83:39:fa:e1:33:30:37:7c:24:02:07:d8:72:
         0d:32:87:de:51:0b:1c:63:8b:71:9f:9c:eb:24:b5:e9:7e:41:
         cd:fe:f7:ed:0c:8f:ad:4d:98:9c:96:ff:91:3b:17:13:c9:44:
         1a:a3:ec:13:f0:93:4d:1a:85:ea:76:50:37:a6:f6:0d:82:36:
         89:ff:91:07:c8:97:50:0c:83:19:be:38:bd:cb:79:c3:d2:8f:
         96:24:49:57:25:83:d6:c2:e7:79:14:40:ce:5e:52:99:25:17:
         e2:05:d7:e7:a2:dc:f4:98:51:7f:77:c7:48:58:3e:56:c5:5a:
         2b:6c:5c:ce:ef:8b:ad:32:78:2a:df:4c:f4:82:d7:90:7d:2e:
         29:eb:9f:ca:28:bd:c6:ff:fd:8f:d1:2d:82:b8:da:f4:73:bd:
         12:d5:22:8c:b5:54:48:ae:a5:99:56:7e:c4:10:3e:21:d4:9a:
         92:6d:50:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:47 2025 by rpki-client