Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          BU32NKQ0BDTs8A/aCsWas241RM44CeJ0X4w0MuAC1go=
Subject key identifier:   DC:42:75:D1:C6:8E:35:63:8B:F3:6E:F8:6A:97:02:5D:0E:B7:6F:17
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       0199FC214F8D852BC96A7E28BA24B0A43207
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          0584
Signing time:             Sun 19 Oct 2025 11:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:05 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: dczQUu9MujEtO+40xtqiFQORWfpA90SSO/FJeHmeBIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:4f:8d:85:2b:c9:6a:7e:28:ba:24:b0:a4:32:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Oct 19 11:01:05 2025 GMT
            Not After : Oct 20 11:01:05 2025 GMT
        Subject: CN=dc4275d1c68e35638bf36ef86a97025d0eb76f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:44:b3:72:de:b0:63:0c:1b:2e:ee:47:72:
                    55:ab:ab:f7:cc:3f:40:80:fd:61:0a:f5:ed:a0:2f:
                    27:b8:60:3f:38:e5:36:ee:20:cf:50:26:6b:68:18:
                    e3:a6:62:53:bc:51:2c:61:89:df:90:9e:9f:8d:50:
                    cf:b8:c4:58:77:8a:90:6c:2f:65:33:a3:66:a1:23:
                    6c:de:42:22:c7:1c:5c:5b:c2:ba:73:77:42:d9:f9:
                    26:72:79:64:88:6c:81:5d:29:70:de:f6:96:e6:5a:
                    31:f7:30:3f:40:55:b1:01:71:a7:45:fa:16:da:c1:
                    66:db:90:82:9a:aa:30:11:14:78:97:bf:3d:00:76:
                    09:2e:90:b8:47:2f:52:c6:59:76:ba:02:6e:e3:ca:
                    6b:af:31:7b:fa:78:ba:6a:fe:de:16:9d:c2:3f:71:
                    a8:97:18:7e:c6:d3:50:a9:68:e1:88:20:4b:9a:85:
                    a6:19:13:ba:2b:bd:7f:e6:34:8e:1a:21:84:0b:ca:
                    74:03:39:6b:85:f3:d8:6e:17:2a:6e:e1:ea:83:c8:
                    23:5e:50:40:53:a7:a9:23:de:aa:98:66:2d:c5:9d:
                    bd:37:83:9f:43:46:69:ae:02:10:cf:d8:31:87:45:
                    32:99:b4:fb:3c:5b:89:26:70:4f:93:f1:44:07:b0:
                    d0:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:75:D1:C6:8E:35:63:8B:F3:6E:F8:6A:97:02:5D:0E:B7:6F:17
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4b:01:6d:31:82:7e:cf:70:db:b6:6d:43:90:cd:76:f6:8c:
         a0:ba:9b:c0:61:39:5b:b9:a3:12:53:37:fa:4b:f6:4c:70:1b:
         d5:e4:ad:2f:97:5a:3b:b3:a7:c9:75:51:e7:13:6f:25:f7:fa:
         59:8d:b5:a7:e8:8f:74:2b:1c:d6:35:c6:38:5f:7c:f3:d3:97:
         de:24:e3:8a:33:11:26:d6:fd:bf:7c:de:48:e4:d4:7f:45:b7:
         7b:b5:82:4d:e2:2c:f0:0b:ca:2c:67:5a:5d:0e:2c:eb:e4:04:
         ec:59:d6:61:39:16:90:72:42:88:a5:82:f7:1d:c1:b0:3f:35:
         21:58:58:be:f7:92:f0:ce:09:1f:27:1f:49:e3:69:bc:54:22:
         2a:70:33:e1:df:62:31:e9:fc:05:40:20:f5:24:c6:ce:da:fd:
         8c:ea:c7:9f:49:95:51:af:f7:29:dc:88:b7:24:d5:96:41:15:
         1a:ce:8c:77:77:4f:f2:c1:52:c4:6d:59:04:a7:1f:ff:38:91:
         db:d7:13:6e:2b:10:de:d1:cb:98:4c:b3:c4:5b:a8:e9:ed:12:
         0b:46:7f:13:94:d5:f3:9e:b5:f0:cd:6d:aa:d8:97:ad:50:75:
         2a:84:67:cb:6a:01:c8:6e:cb:e2:3f:ff:78:cc:fe:16:67:6f:
         39:09:f0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:50 2025 by rpki-client