Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
File:                     mYf1lRU_EX4prIkHh2ZWpLin7GI.mft (raw, json)
Hash identifier:          lvqQ6r1lhoAf3GP/KrLYOwhOAETuMcCt8lWEMjyknNE=
Subject key identifier:   F4:8F:32:FE:E4:AF:76:00:3D:9C:32:EB:6D:93:13:22:1B:D5:A7:21
Authority key identifier: 99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62
Certificate issuer:       /CN=9987f595153f117e29ac8907876656a4b8a7ec62
Certificate serial:       0198D5BC2C2D7BBB1B065EFFC70C3E8AE5FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
Manifest number:          1131
Signing time:             Sat 23 Aug 2025 07:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:15 +0000
Files and hashes:         1: mYf1lRU_EX4prIkHh2ZWpLin7GI.crl (hash: zSM/G7DOQ4iyug/t9xOEcUwleW3P1ZIsya+Pt84L+JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:2c:2d:7b:bb:1b:06:5e:ff:c7:0c:3e:8a:e5:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9987f595153f117e29ac8907876656a4b8a7ec62
        Validity
            Not Before: Aug 23 07:02:15 2025 GMT
            Not After : Aug 24 07:02:15 2025 GMT
        Subject: CN=f48f32fee4af76003d9c32eb6d9313221bd5a721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0d:f0:eb:ee:39:b3:cf:77:c8:f1:e4:80:2b:
                    e9:40:f3:8c:d0:22:16:96:55:97:91:b6:64:48:6c:
                    e0:5e:62:70:32:15:78:a0:30:22:bf:e8:a6:3b:c8:
                    f5:e5:af:58:52:65:96:ac:27:fa:72:24:24:4c:b7:
                    fa:03:12:a2:ed:99:62:58:b7:ae:78:50:c7:3f:47:
                    6f:67:16:2a:4d:0a:b0:46:c5:4c:f6:85:69:9e:e9:
                    56:97:17:18:3d:0a:64:a3:b0:c4:f4:0f:8f:87:9f:
                    f7:c0:e5:d2:54:f3:31:17:e4:59:6e:dc:be:ed:27:
                    ed:9c:d9:5a:7f:c1:00:6f:19:d4:af:bf:65:89:09:
                    68:a7:05:9c:d7:b1:a2:88:9d:2b:cb:25:ac:87:e2:
                    f3:74:4d:bf:b3:b1:a7:2c:42:06:97:55:c9:3e:4d:
                    3a:11:e0:06:dc:f8:a3:b1:bb:02:64:74:d7:7b:ab:
                    72:fc:ff:26:d9:39:b2:a9:7f:99:55:8b:ec:7e:de:
                    0f:42:23:9b:99:d8:42:48:31:8d:2d:6a:1e:2a:51:
                    92:89:b7:f8:76:0a:92:85:92:96:3d:bf:5e:e5:d2:
                    ce:83:9e:23:c9:f9:3f:14:a6:48:c1:1b:b8:bb:96:
                    3d:7f:87:30:61:46:f2:31:f0:b5:e9:4d:4c:9e:70:
                    4a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:32:FE:E4:AF:76:00:3D:9C:32:EB:6D:93:13:22:1B:D5:A7:21
            X509v3 Authority Key Identifier:
                keyid:99:87:F5:95:15:3F:11:7E:29:AC:89:07:87:66:56:A4:B8:A7:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYf1lRU_EX4prIkHh2ZWpLin7GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/357492-07ab-4138-8426-b1674a37153b/1/mYf1lRU_EX4prIkHh2ZWpLin7GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:68:a8:22:98:e8:33:7e:dd:de:bf:fe:05:73:7e:3d:aa:94:
         c1:cb:06:74:fb:21:56:7c:5e:e0:fa:d2:5c:aa:3b:cc:04:6f:
         5e:d9:a6:fd:4b:a9:a8:de:4e:ea:77:8f:ec:7c:66:42:83:ec:
         60:ad:c4:3f:45:73:fa:fb:e1:13:cd:06:5a:66:ff:f5:c4:be:
         4f:95:ec:0e:0e:e9:1e:8c:06:f7:65:89:b0:a2:66:29:de:d5:
         ca:f4:a4:2e:74:e8:dd:05:c9:3c:ae:3f:6d:b7:e6:9c:df:12:
         8e:96:8f:fb:07:83:07:33:9d:37:d1:50:32:84:1a:fe:4f:e2:
         c2:5b:cf:bd:d5:c1:92:2f:40:f3:1a:f3:6a:0c:66:10:b0:6f:
         fc:be:bf:69:4b:6d:f3:5b:ca:0d:65:ce:e2:e2:74:aa:76:12:
         64:1f:71:ca:61:af:b1:af:db:a1:c0:68:85:55:3f:1a:e0:a7:
         47:2b:f8:15:1f:15:68:d0:79:07:83:cf:60:01:29:5a:f7:74:
         60:a2:ae:28:8e:d0:55:30:1e:4e:aa:13:f4:9c:b7:cb:5f:37:
         ba:ab:85:6f:58:e8:fb:37:e2:03:5b:a0:b7:87:4a:06:db:75:
         d7:f1:4f:ca:57:60:fb:c6:03:34:9c:03:53:8c:5f:ac:f4:41:
         ee:d6:58:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:57:55 2025 by rpki-client