Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
File:                     Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft (raw, json)
Hash identifier:          ihaqoK4tPxNARu5AiDTnctthzF0EoBm++a/+Y12z9pc=
Subject key identifier:   FE:72:CE:8A:23:49:8C:79:38:F1:E8:9F:9D:6F:00:7D:86:75:EF:60
Authority key identifier: 46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB
Certificate issuer:       /CN=46f6eebf80bd64dff5ab1012b90a556865a848db
Certificate serial:       0198D6982BCB8DB3C7B9CAC8EE000DDA907B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
Manifest number:          04EC
Signing time:             Sat 23 Aug 2025 11:02:33 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:33 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:33 +0000
Files and hashes:         1: Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl (hash: LjN729RkgVxOb3YFGjc3926sx88SX0V5VfL2pDRtl3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:2b:cb:8d:b3:c7:b9:ca:c8:ee:00:0d:da:90:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f6eebf80bd64dff5ab1012b90a556865a848db
        Validity
            Not Before: Aug 23 11:02:33 2025 GMT
            Not After : Aug 24 11:02:33 2025 GMT
        Subject: CN=fe72ce8a23498c7938f1e89f9d6f007d8675ef60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6d:59:be:07:67:97:50:fd:8e:d2:bd:09:a6:
                    3b:d5:5e:b1:5e:b8:06:2b:c4:0d:1f:36:98:87:44:
                    29:02:d9:ac:ec:84:f5:c0:cd:a2:31:7e:a6:56:00:
                    0c:76:ba:26:38:5c:1c:34:85:ff:bf:d4:1d:64:3c:
                    71:b9:c7:ae:87:3a:17:db:7e:fb:d4:ea:a4:72:91:
                    09:87:7c:d7:61:82:9e:31:c7:c4:a4:08:30:0b:19:
                    e5:4b:bb:fd:22:c2:7e:ba:9e:9a:a7:65:2e:29:9f:
                    f6:fb:0b:3c:ae:ba:26:9a:73:f6:3c:a5:eb:49:9b:
                    36:8a:cc:14:1c:c0:47:6d:31:bb:80:33:2f:a5:47:
                    55:a6:c8:27:02:ec:6f:58:55:70:29:4c:42:c6:2a:
                    aa:24:df:28:3b:4b:3f:9e:c5:c9:81:1e:56:6e:b6:
                    54:98:97:76:86:c0:73:89:1f:76:54:b2:d3:ce:73:
                    38:ce:6e:07:74:38:86:b3:ac:fb:ef:40:82:20:25:
                    cc:fb:53:d3:9f:33:8e:d0:17:de:c4:86:11:5c:25:
                    3b:4f:91:51:58:5f:3b:fc:0e:16:e8:a1:4c:18:a9:
                    ee:c2:78:4e:ce:5f:51:9c:36:0e:11:0c:89:ad:bb:
                    2e:fe:84:b1:98:57:86:d7:48:a9:7d:99:11:d6:52:
                    be:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:72:CE:8A:23:49:8C:79:38:F1:E8:9F:9D:6F:00:7D:86:75:EF:60
            X509v3 Authority Key Identifier:
                keyid:46:F6:EE:BF:80:BD:64:DF:F5:AB:10:12:B9:0A:55:68:65:A8:48:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/578faa-0a03-46ac-bb5c-9bdbb626b595/1/Rvbuv4C9ZN_1qxASuQpVaGWoSNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:44:70:9e:d5:e0:82:d3:be:ef:d2:98:31:f2:0a:55:0d:5e:
         75:14:6a:7f:ae:55:aa:04:e3:d0:f2:24:e0:ed:d9:dd:08:f1:
         23:0f:a3:e5:e7:9e:ea:0e:5f:29:09:2a:53:f8:04:1b:df:e8:
         d8:56:16:8f:90:64:18:4f:8f:03:7c:67:60:f8:11:ff:e4:d6:
         49:b6:a5:ae:a5:e6:99:9f:c5:44:9f:65:c8:3b:27:b8:99:17:
         55:38:c7:f2:29:72:08:1d:5a:0d:c1:2b:36:aa:c4:35:cf:40:
         79:77:ba:43:37:98:30:a2:c0:c0:4d:d4:b9:85:3b:54:ee:68:
         2d:82:33:ef:8c:96:07:15:01:ac:35:6e:d6:46:a4:fd:44:2a:
         92:d8:c3:41:c7:39:86:42:71:a8:49:e2:db:20:bb:23:f1:1b:
         30:cf:65:9f:6a:ee:87:42:5d:aa:88:12:a2:ec:11:83:54:fe:
         39:ac:f7:71:02:c9:ed:d6:59:6e:98:7c:c4:eb:07:37:eb:70:
         98:c9:0a:59:65:71:0c:61:98:56:55:50:ff:10:ce:a4:f6:fe:
         a1:d7:c9:9c:de:20:da:65:e5:64:43:77:8b:9c:3c:7a:7b:5d:
         79:c3:01:3d:4b:59:3c:bc:68:ec:7e:c6:f4:e6:e5:49:27:ef:
         80:6a:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:23:34 2025 by rpki-client