Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
File:                     msLwFwWoWaHX3lAwr4LfmlLI7C8.mft (raw, json)
Hash identifier:          uxTa4la6J/hZyfYiH1fx5tcO+2EhYZal9KQNLt/cAvg=
Subject key identifier:   CE:FF:69:AB:CF:D6:02:5D:F6:96:9A:83:FE:22:62:07:8A:55:60:9B
Authority key identifier: 9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F
Certificate issuer:       /CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
Certificate serial:       0198D661277D89B0F330012945441565B4E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:27 +0000
Files and hashes:         1: msLwFwWoWaHX3lAwr4LfmlLI7C8.crl (hash: WXAogmpibSNDPEGQC7zNJCB1jA4n3s/ImCFS8oq+n7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:27:7d:89:b0:f3:30:01:29:45:44:15:65:b4:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac2f01705a859a1d7de5030af82df9a52c8ec2f
        Validity
            Not Before: Aug 23 10:02:27 2025 GMT
            Not After : Aug 24 10:02:27 2025 GMT
        Subject: CN=ceff69abcfd6025df6969a83fe2262078a55609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:37:24:8e:60:1e:13:e5:5a:a0:94:16:d0:2b:
                    ab:c5:c4:5b:27:af:85:84:a5:31:6c:c2:a0:e2:e6:
                    ee:76:62:fa:fa:47:11:5c:8a:20:ed:1a:81:4f:36:
                    7f:4b:7f:af:ea:00:37:fa:55:1c:9a:13:fc:94:b4:
                    68:69:a2:9e:fb:44:bb:8e:05:c3:bc:a4:08:63:95:
                    f1:7a:59:04:ee:2f:7f:9e:77:8c:93:74:c3:f9:00:
                    eb:04:7d:7c:7d:e6:3b:b4:06:2d:bb:17:30:b1:d1:
                    35:71:9a:9d:bb:ef:e2:dc:a2:df:c6:28:8c:01:a9:
                    1f:75:b5:94:98:98:a4:82:32:9e:0a:cf:5c:bc:74:
                    14:9c:23:95:a5:09:11:88:6c:0d:ac:0e:14:33:a9:
                    94:53:2e:d6:17:75:b4:e3:d4:93:14:50:cc:47:64:
                    08:6a:45:9e:98:2e:ec:e6:73:ee:61:9d:0c:70:f7:
                    57:a0:b0:d6:ea:c4:74:1f:e9:93:22:cb:bc:0c:a2:
                    2e:0c:3c:fc:1f:f2:76:98:d0:1e:3b:ab:4a:51:fa:
                    76:8e:0f:5d:2b:32:10:00:95:c9:14:ce:c2:4a:9a:
                    07:3b:e9:88:29:77:eb:2d:e0:16:61:df:73:09:cc:
                    5b:bf:f1:89:27:95:4b:82:cb:9d:be:0e:b0:2f:68:
                    4e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FF:69:AB:CF:D6:02:5D:F6:96:9A:83:FE:22:62:07:8A:55:60:9B
            X509v3 Authority Key Identifier:
                keyid:9A:C2:F0:17:05:A8:59:A1:D7:DE:50:30:AF:82:DF:9A:52:C8:EC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/msLwFwWoWaHX3lAwr4LfmlLI7C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/5f6ba0-9ca5-4a67-9f3a-187a57a4d677/1/msLwFwWoWaHX3lAwr4LfmlLI7C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a1:37:ca:9a:7f:2a:23:8d:62:34:0b:11:97:0b:fc:34:14:
         ed:69:d6:d9:5a:c1:3c:e6:c6:94:3a:ee:40:99:06:b8:4d:9f:
         f2:94:8b:54:7e:c4:59:03:42:88:ed:e3:c6:37:2b:19:e0:02:
         92:9a:d7:01:69:29:b0:be:10:78:9a:0e:31:7e:46:77:0c:8f:
         d4:c0:ba:30:47:1f:31:d6:c7:7b:4e:cb:f0:13:aa:7f:82:63:
         d1:f9:20:0e:38:a0:0a:8e:95:e7:46:0d:9d:56:47:8e:11:6c:
         e9:e3:ad:65:c2:d1:9f:07:16:1b:25:23:39:86:77:70:b5:5b:
         dc:90:21:02:05:ea:11:12:fa:c4:1d:9f:bc:b3:43:53:0e:48:
         79:3e:2d:cd:29:60:8c:e7:e0:40:64:b9:ea:f6:ea:27:ab:e5:
         78:b3:f2:fc:a9:8d:4a:a3:54:7b:e5:5e:35:c7:c3:89:97:0d:
         f8:4c:08:4f:cb:fb:46:17:37:29:32:01:4e:69:d7:6d:20:50:
         4c:62:a8:f7:fc:cc:6a:a9:0e:bf:0c:94:07:6c:a7:40:12:90:
         9b:1a:e6:87:f1:29:2e:5f:b0:66:70:ae:80:31:3a:d9:be:b8:
         15:5a:a3:4e:62:86:72:62:1d:55:8f:b1:17:7b:e1:48:94:ea:
         b6:a6:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:49:17 2025 by rpki-client