Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
File:                     eV1ljeA6jc0LbfbnZscH9P49FS4.mft (raw, json)
Hash identifier:          7QgAOsbPoM/BE7AlGQajbsMLWHGPk9ipS3l7tGhSwPs=
Subject key identifier:   C3:00:73:A9:0C:DC:F0:69:63:AF:80:72:A1:67:07:49:E4:4C:50:CC
Authority key identifier: 79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E
Certificate issuer:       /CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
Certificate serial:       0198D5BC43437AF5DC0F28465F16416B6764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 07:02:21 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:21 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:21 +0000
Files and hashes:         1: eV1ljeA6jc0LbfbnZscH9P49FS4.crl (hash: VwVs+zm0GlRiVfI9a0nGh7K87yK8Au2+6NgRG9t2wEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:43:43:7a:f5:dc:0f:28:46:5f:16:41:6b:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=795d658de03a8dcd0b6df6e766c707f4fe3d152e
        Validity
            Not Before: Aug 23 07:02:21 2025 GMT
            Not After : Aug 24 07:02:21 2025 GMT
        Subject: CN=c30073a90cdcf06963af8072a1670749e44c50cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:e1:ad:bf:9a:14:ee:d0:90:04:14:b5:61:
                    5f:47:12:54:2f:c6:2e:e6:19:56:9c:54:8c:e5:cf:
                    fc:fa:45:33:e4:b1:09:ff:7a:6d:fd:9c:e5:9a:cf:
                    23:d0:7e:d0:92:b7:80:17:68:9b:bd:c6:a8:8f:3b:
                    5a:44:cf:01:35:a2:28:60:aa:b5:f1:53:14:d4:44:
                    7f:5e:d5:5b:0c:88:8b:b9:4b:b2:11:03:c9:db:46:
                    84:e6:d7:1b:9e:21:82:6c:6e:12:ed:22:9f:43:8b:
                    bb:9d:79:22:f0:9f:59:9f:6a:f1:b5:71:e3:88:f4:
                    d9:cb:b9:00:78:a4:08:05:54:c3:cb:98:5e:3c:1e:
                    07:b4:34:ff:88:15:c5:c9:4f:5c:94:a9:1a:d5:df:
                    35:17:d5:0f:80:ec:33:e7:5c:96:21:c5:51:bd:f0:
                    0a:6f:d4:07:61:25:24:70:9d:47:b1:b5:6d:c5:5a:
                    ea:fc:bd:c2:83:fd:d1:a7:ca:f1:ba:1f:07:c7:56:
                    04:1d:09:a1:2c:78:80:d2:e8:f5:e4:7f:ea:72:8f:
                    df:30:15:d2:80:f5:bb:d9:f6:80:5a:86:29:cd:f9:
                    cd:98:9f:32:45:36:b8:55:36:97:4c:90:66:17:25:
                    95:4c:03:0e:e4:f5:79:ad:c8:19:09:f1:45:e5:55:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:00:73:A9:0C:DC:F0:69:63:AF:80:72:A1:67:07:49:E4:4C:50:CC
            X509v3 Authority Key Identifier:
                keyid:79:5D:65:8D:E0:3A:8D:CD:0B:6D:F6:E7:66:C7:07:F4:FE:3D:15:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eV1ljeA6jc0LbfbnZscH9P49FS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ef8684-a761-4510-ac2f-7b75650cb2ce/1/eV1ljeA6jc0LbfbnZscH9P49FS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:fd:b2:eb:b1:5e:77:fe:2d:44:2a:f0:51:39:23:74:44:ce:
         83:fb:db:18:6e:ef:e0:ad:75:7a:c0:88:12:f9:27:39:9e:5b:
         da:e3:ca:65:82:a2:09:64:54:77:72:7c:42:73:f9:e9:35:82:
         58:83:05:40:81:30:93:09:2e:75:1c:bc:d8:07:3e:bf:27:1f:
         b8:85:f1:3c:64:2f:36:83:b7:17:a8:e4:aa:23:74:e1:20:3d:
         10:80:26:8f:a0:37:65:21:3a:b8:9b:1e:4d:e6:1c:36:41:18:
         6f:6a:7a:a1:ad:ed:94:3b:b7:c2:25:5b:6d:42:ff:7a:e5:8e:
         6f:b3:cf:4c:51:09:9c:c6:49:13:d0:07:7d:93:bf:d0:da:0f:
         ef:4c:e3:a7:1d:81:d8:4c:b2:87:4e:91:90:ea:4e:d4:10:6c:
         e7:eb:48:af:66:5d:be:09:2b:65:b1:53:df:2f:44:89:b3:a6:
         29:73:a9:1e:fa:3c:4f:21:0a:69:32:37:0c:9c:2e:2a:6e:5e:
         82:d1:75:36:62:e3:cf:88:bc:54:15:2d:35:50:6e:66:ca:3d:
         47:78:53:11:21:40:f4:26:a8:64:90:18:a1:07:cb:14:b2:ed:
         5e:e7:b0:91:34:37:02:74:01:36:4b:d2:fb:26:56:49:c1:e8:
         d0:0a:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:10 2025 by rpki-client