Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          5L99xL3yqkd7FrpUHzqNY5z01kT4zVsJ8cC1S5OqThg=
Subject key identifier:   B2:44:0C:D4:12:C3:CB:3E:AD:A6:50:B6:AD:1C:AE:1E:8E:4A:90:DF
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       0198D6613360C2F4F6DAC98EAB9326111ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 10:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:31 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: xE0oPS3eCgl8JztEy4YGh57doP6wJCfN0BoFmEbj8Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:33:60:c2:f4:f6:da:c9:8e:ab:93:26:11:1e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Aug 23 10:02:31 2025 GMT
            Not After : Aug 24 10:02:31 2025 GMT
        Subject: CN=b2440cd412c3cb3eada650b6ad1cae1e8e4a90df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:a9:6b:89:e9:5a:58:98:f6:5f:3c:f1:7f:
                    16:b7:4c:24:36:6c:5a:d8:b3:78:e6:9c:d1:d1:a7:
                    0a:19:fa:08:ad:a5:d5:30:1e:0f:d5:a7:a3:85:74:
                    43:34:f9:8d:db:5e:15:8b:49:20:aa:a2:af:b8:79:
                    10:b7:b2:b6:59:a2:05:d3:6c:7b:61:64:3e:bb:18:
                    f6:97:ad:73:d3:d1:20:80:c4:ce:29:53:c3:7d:67:
                    59:19:62:81:22:98:e4:f6:a4:66:fd:ae:41:be:be:
                    31:0a:3c:2a:c2:c8:a4:7a:ca:a7:d0:42:53:53:0c:
                    fc:af:97:20:86:64:c6:68:5f:01:9f:ac:00:54:ad:
                    f3:98:f2:0a:56:78:cb:5a:69:09:f8:69:21:86:29:
                    6c:87:76:08:ee:e9:36:3f:e5:9d:12:de:17:ea:e5:
                    da:59:97:f9:3b:77:92:14:96:37:2b:64:b3:f2:fc:
                    be:6f:4e:6f:2c:bc:56:e9:48:19:2c:50:a9:81:86:
                    c0:ec:e0:69:60:50:fb:07:a2:22:f9:c4:6b:76:40:
                    be:d8:7f:da:ea:f1:d4:c3:3e:fa:b7:b8:9d:4a:c6:
                    d1:bb:a3:bf:16:b1:f2:4b:98:bb:a0:56:61:5b:66:
                    6d:ec:c2:aa:25:51:13:bb:8f:29:8a:1a:11:ed:af:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:44:0C:D4:12:C3:CB:3E:AD:A6:50:B6:AD:1C:AE:1E:8E:4A:90:DF
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:35:96:3f:a4:81:e9:e2:09:ca:67:29:1a:cb:ab:b0:2a:
         6f:d6:9e:be:b9:0e:85:4c:e8:b3:50:9e:ca:7f:ac:0a:1d:83:
         0d:97:c2:9f:bc:e8:8d:b3:a7:0f:85:8d:b9:df:17:b5:44:21:
         54:4d:67:2d:50:43:44:18:ca:54:fb:91:a4:09:d3:0a:00:2e:
         d2:5f:ea:9b:58:9c:4c:47:00:ab:d9:8e:66:49:fd:a5:86:a6:
         0f:95:f9:6c:97:6d:da:3f:97:da:c1:8f:d4:54:b0:f8:6d:6d:
         28:04:a0:d7:8d:b4:d9:af:8e:cc:74:0d:00:78:99:df:46:4d:
         71:9b:99:9c:00:1f:3c:46:3d:29:5d:64:07:ba:9b:b4:8b:df:
         d9:6a:8d:dc:2e:a2:ca:c6:5e:d9:24:f6:14:86:97:b9:15:ed:
         77:bf:e6:e1:f3:0f:98:0a:c4:6a:41:a2:05:19:8d:3b:c2:28:
         64:34:ea:ba:5c:af:9b:68:20:06:54:29:ed:5d:a0:73:5b:31:
         43:d1:ea:8d:38:4a:8b:fc:d8:b4:8b:13:47:cb:09:ef:41:db:
         3f:91:fd:77:f6:1e:57:d2:e2:59:10:f6:c2:c4:7e:10:b7:cc:
         82:ff:e0:07:7b:53:c7:ca:45:48:9b:fb:9e:7c:f1:e4:2f:64:
         09:15:3f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:37:20 2025 by rpki-client