Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier:          o9V6HosL/q0VuggN7Bt4woKvyaPX75Hz09ljg6l0akk=
Subject key identifier:   20:28:72:77:E6:AE:2F:B4:27:C2:A9:25:D6:EE:E6:E8:D8:76:A2:C5
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer:       /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial:       0198D6612050D9BEA5E69959ED240FDE80EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number:          0FC8
Signing time:             Sat 23 Aug 2025 10:02:26 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:26 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:26 +0000
Files and hashes:         1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: BgXUMbEjIngJu5fTZtCM8b/FGT9PJGUCdk2coVsZ98s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:20:50:d9:be:a5:e6:99:59:ed:24:0f:de:80:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Validity
            Not Before: Aug 23 10:02:26 2025 GMT
            Not After : Aug 24 10:02:26 2025 GMT
        Subject: CN=20287277e6ae2fb427c2a925d6eee6e8d876a2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:c4:91:d7:7d:60:ca:56:d4:a3:1b:2c:9b:
                    c4:4c:7a:82:ac:7d:51:a3:85:74:ed:ea:1e:e3:d2:
                    1d:35:d9:bc:a3:a7:bc:43:e6:f4:87:8c:eb:81:23:
                    c4:21:b0:c8:e0:58:4d:86:7f:15:5a:ca:c2:4d:04:
                    e8:00:31:a3:4c:bd:ec:c6:78:7a:a8:47:6e:d2:65:
                    1d:97:9c:4d:da:27:b6:c4:32:70:2d:c1:35:4f:88:
                    1f:a7:64:0e:52:fc:75:3a:b8:25:e5:5d:6a:b8:60:
                    08:04:2c:aa:e5:f9:19:38:0a:56:42:4c:85:48:d7:
                    9b:ae:6f:cd:cb:6d:11:13:8e:73:1d:3e:27:5a:77:
                    c8:d1:af:da:db:0f:77:d9:c1:e9:dd:45:45:90:40:
                    69:a4:04:cd:3a:9d:c4:c2:c8:1f:60:f4:b7:59:e3:
                    09:f8:45:78:28:82:93:79:14:dc:81:00:4f:86:45:
                    e3:40:50:22:14:c8:6a:2a:7e:06:39:c5:66:f3:85:
                    5a:13:08:6b:9f:be:e1:8e:37:20:cc:7b:fc:eb:e6:
                    a2:ae:1d:0d:4d:a5:b7:cf:1d:46:06:9f:8f:89:fe:
                    22:09:9e:05:81:19:07:5e:3e:23:91:37:79:3e:3c:
                    dc:97:62:85:9e:4e:86:b5:fb:94:11:66:9b:e1:44:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:28:72:77:E6:AE:2F:B4:27:C2:A9:25:D6:EE:E6:E8:D8:76:A2:C5
            X509v3 Authority Key Identifier:
                keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:39:75:7c:8e:5b:82:d1:3b:df:70:04:f4:de:61:51:59:79:
         13:a6:7d:6d:27:04:bf:f9:78:a0:7c:a2:7c:f4:b1:fd:ef:9e:
         d0:ee:0f:53:e9:ff:a5:3c:59:62:b0:d2:4c:08:09:9a:fe:8d:
         f8:71:61:b5:5e:c1:1e:c2:da:75:7c:e7:b3:df:7e:5d:62:41:
         84:4e:ec:ad:90:3e:aa:db:c0:72:80:a6:cc:47:51:42:df:d1:
         e0:8f:e1:6c:20:39:dc:c0:58:97:34:96:92:ff:03:65:c2:30:
         55:e9:5f:74:00:81:c1:c7:4b:a6:5a:53:1c:b0:6d:e9:69:d2:
         f4:53:d5:aa:6b:5a:4d:d1:6f:53:3f:ff:6a:3f:eb:fb:94:6e:
         fe:1c:18:d6:4b:25:a6:ca:80:fc:b7:78:92:d0:8d:2c:16:0f:
         fd:c3:00:7f:52:f7:8c:06:0d:62:3c:45:d4:a8:c7:0f:96:fa:
         db:4b:2f:06:70:12:89:69:c8:12:99:b3:98:a3:a6:49:b6:0e:
         45:29:c5:9e:06:ba:ef:f2:67:f3:2f:31:de:a6:be:b7:cd:1d:
         dc:be:dc:3e:72:21:25:8b:50:a7:0b:c0:62:fe:4f:dd:b2:f2:
         a7:06:91:6a:98:c7:81:43:33:c8:8a:5b:ff:39:47:cd:c0:47:
         28:e6:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:54:15 2025 by rpki-client