Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
File:                     54CVVajwXwQLRfmuycPvVaG6kz0.mft (raw, json)
Hash identifier:          bDKQ/r+SRDgkp3Eh6VQFAXgd7XGJK1KRkxieq5ySRkM=
Subject key identifier:   98:AA:17:E5:16:60:9F:EE:40:F4:B6:F0:1F:C1:A6:CF:D1:5E:74:5A
Authority key identifier: E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D
Certificate issuer:       /CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
Certificate serial:       0198D583622F5B73B120CC30CDD2D137DF4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
Manifest number:          041E
Signing time:             Sat 23 Aug 2025 06:00:14 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:14 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:14 +0000
Files and hashes:         1: 54CVVajwXwQLRfmuycPvVaG6kz0.crl (hash: lUI+cInSnSnt732vSjUA4pavlgn87pROq8oIjLYMZr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:62:2f:5b:73:b1:20:cc:30:cd:d2:d1:37:df:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7809555a8f05f040b45f9aec9c3ef55a1ba933d
        Validity
            Not Before: Aug 23 06:00:14 2025 GMT
            Not After : Aug 24 06:00:14 2025 GMT
        Subject: CN=98aa17e516609fee40f4b6f01fc1a6cfd15e745a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:b0:09:40:5b:16:ef:82:58:ab:67:c5:6e:
                    6d:14:70:f0:c3:48:96:6b:71:90:89:83:27:a4:42:
                    c9:9c:f0:e1:36:64:6d:ba:c8:c5:6a:89:8c:bf:53:
                    f7:32:bd:3a:97:05:0b:1a:09:0e:57:b0:3b:67:68:
                    c1:97:ee:34:9f:10:4b:32:35:7f:80:79:1a:be:d6:
                    8e:d6:ae:de:9b:b1:a8:50:b9:b8:64:ff:ac:4a:e6:
                    f4:88:b2:8b:46:b8:40:15:b2:01:ca:8d:8b:78:d9:
                    41:d7:46:75:7e:a6:b1:0b:ac:a6:29:97:cf:1e:c4:
                    33:52:ad:75:20:9a:2f:a3:62:8c:7a:29:6e:33:0c:
                    82:d7:6f:83:85:d0:52:99:40:db:38:6f:22:98:45:
                    a1:7f:61:b9:67:df:44:c0:af:a4:7c:fc:e2:c3:72:
                    f8:19:b9:cb:a8:3e:00:8e:10:51:ee:78:5c:ed:30:
                    2e:0c:85:68:b1:44:1d:aa:a5:01:9d:03:b0:77:76:
                    5d:42:30:8b:10:68:d1:45:f9:13:ca:ee:f7:51:4f:
                    fc:49:c6:50:bf:50:82:78:03:0c:6c:82:5a:5f:fd:
                    70:cc:0f:36:99:a8:5f:23:c6:55:0e:b2:e0:20:5c:
                    b3:b2:8e:63:76:e9:9a:37:94:0a:35:5b:e2:b0:12:
                    22:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AA:17:E5:16:60:9F:EE:40:F4:B6:F0:1F:C1:A6:CF:D1:5E:74:5A
            X509v3 Authority Key Identifier:
                keyid:E7:80:95:55:A8:F0:5F:04:0B:45:F9:AE:C9:C3:EF:55:A1:BA:93:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54CVVajwXwQLRfmuycPvVaG6kz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e05e24-967b-4409-8de8-ca08fe6f3e57/1/54CVVajwXwQLRfmuycPvVaG6kz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b9:6b:5e:2a:e0:92:ca:65:d9:f8:89:1c:58:0f:04:5e:16:
         19:55:58:1f:3b:93:e0:ed:65:b4:05:3b:01:e8:4d:05:0e:bc:
         80:4d:5f:b0:23:13:80:5f:c1:3f:fe:a9:d3:0e:80:89:fd:9f:
         db:e3:dd:95:82:2e:de:15:31:03:08:21:c6:42:8f:ca:56:15:
         ff:b1:c5:07:33:20:bc:96:0e:2d:8c:7f:5a:40:aa:d6:a9:2b:
         2b:81:46:cf:76:56:30:fa:1b:01:26:0f:4c:9d:23:59:61:cd:
         1b:44:f3:6c:d6:f8:67:f0:34:3f:59:bc:3a:4c:dd:68:68:4c:
         77:7f:a5:f6:f0:2a:00:36:ff:af:82:5d:60:66:0d:3a:1f:99:
         d9:35:69:e7:1d:ca:72:83:92:b4:be:56:ee:67:6e:9e:48:ad:
         f0:ce:b6:c8:fc:dc:7f:88:3f:21:f1:94:88:e7:e3:65:ab:6c:
         d3:f3:8f:d8:d7:ec:3a:30:cb:7a:28:16:26:60:28:93:5d:a0:
         2e:3a:b5:92:ee:b1:f2:4e:1d:6b:ae:d8:0b:04:30:c8:e1:6d:
         7a:4b:eb:78:00:cb:5d:41:53:aa:94:60:6d:98:7b:d8:e7:8f:
         d7:e0:88:62:c3:cd:f1:dc:0b:0f:a4:0f:89:23:da:1b:93:a2:
         02:ff:06:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2IvW3OxIMwwzdLRN99KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODA5NTU1YThmMDVmMDQwYjQ1ZjlhZWM5YzNlZjU1YTFi
YTkzM2QwHhcNMjUwODIzMDYwMDE0WhcNMjUwODI0MDYwMDE0WjAzMTEwLwYDVQQD
Eyg5OGFhMTdlNTE2NjA5ZmVlNDBmNGI2ZjAxZmMxYTZjZmQxNWU3NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOywCUBbFu+CWKtnxW5tFHDww0iW
a3GQiYMnpELJnPDhNmRtusjFaomMv1P3Mr06lwULGgkOV7A7Z2jBl+40nxBLMjV/
gHkavtaO1q7em7GoULm4ZP+sSub0iLKLRrhAFbIByo2LeNlB10Z1fqaxC6ymKZfP
HsQzUq11IJovo2KMeiluMwyC12+DhdBSmUDbOG8imEWhf2G5Z99EwK+kfPziw3L4
GbnLqD4AjhBR7nhc7TAuDIVosUQdqqUBnQOwd3ZdQjCLEGjRRfkTyu73UU/8ScZQ
v1CCeAMMbIJaX/1wzA82mahfI8ZVDrLgIFyzso5jdumaN5QKNVvisBIi1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJiqF+UWYJ/uQPS28B/Bps/RXnRaMB8GA1UdIwQY
MBaAFOeAlVWo8F8EC0X5rsnD71WhupM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgt
Y2EwOGZlNmYzZTU3LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lMDVlMjQtOTY3Yi00NDA5LThkZTgtY2EwOGZlNmYzZTU3
LzEvNTRDVlZhandYd1FMUmZtdXljUHZWYUc2a3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLlrXirg
kspl2fiJHFgPBF4WGVVYHzuT4O1ltAU7AehNBQ68gE1fsCMTgF/BP/6p0w6Aif2f
2+PdlYIu3hUxAwghxkKPylYV/7HFBzMgvJYOLYx/WkCq1qkrK4FGz3ZWMPobASYP
TJ0jWWHNG0TzbNb4Z/A0P1m8OkzdaGhMd3+l9vAqADb/r4JdYGYNOh+Z2TVp5x3K
coOStL5W7mdunkit8M62yPzcf4g/IfGUiOfjZats0/OP2NfsOjDLeigWJmAok12g
Ljq1ku6x8k4da67YCwQwyOFtekvreADLXUFTqpRgbZh72OeP1+CIYsPN8dwLD6QP
iSPaG5OiAv8G/A==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:56 2025 by rpki-client