Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          b7VncfsRYAWRqEof0YHUP6EKzblLP11xhuQ9zifd6Sc=
Subject key identifier:   F9:46:0B:6A:8D:29:66:BC:EE:8E:5A:4E:D8:FA:B6:82:68:CE:66:06
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       0198D773A0221CAFE3ADB255D0A8382466A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          0511
Signing time:             Sat 23 Aug 2025 15:02:15 +0000
Manifest this update:     Sat 23 Aug 2025 15:02:15 +0000
Manifest next update:     Sun 24 Aug 2025 15:02:15 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: c9G+on0gtfHSGgCYs0oc1OjE0Nm+7WDhy//EsgQiu6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:73:a0:22:1c:af:e3:ad:b2:55:d0:a8:38:24:66:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: Aug 23 15:02:15 2025 GMT
            Not After : Aug 24 15:02:15 2025 GMT
        Subject: CN=f9460b6a8d2966bcee8e5a4ed8fab68268ce6606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:1d:ac:7a:a5:51:09:45:b1:41:29:8c:75:
                    a1:3f:fd:47:ca:e4:84:f2:9e:19:ce:f3:26:a3:7d:
                    8a:87:c9:47:a4:f5:2a:84:a6:51:d5:28:b9:31:00:
                    f8:d4:d6:d4:9d:d1:c1:43:22:cb:76:bc:71:37:0e:
                    d7:79:a0:f8:12:ff:c3:0f:87:81:01:64:8d:b8:46:
                    31:17:97:ec:20:f8:3d:d5:79:43:ce:b2:b6:b4:34:
                    9c:71:74:68:0b:86:01:78:ec:34:c1:04:71:39:5d:
                    51:32:3b:71:e8:3b:3d:f4:d7:b6:fc:95:cc:28:4d:
                    83:f6:da:4f:17:30:66:0f:33:e5:54:01:03:b2:e9:
                    2d:29:9f:a0:f5:da:93:46:f4:7d:63:a9:4b:5f:01:
                    00:5b:ea:dd:f2:17:45:8d:41:8f:43:dc:6b:5c:77:
                    df:aa:8b:bf:c9:59:18:86:ae:b4:92:63:57:61:8b:
                    d8:7f:6e:1f:b0:d8:a7:f0:18:1d:59:fb:af:35:63:
                    9f:16:73:e1:05:b0:98:cf:59:cc:1f:e7:d8:d3:4b:
                    fe:ea:66:55:e8:f2:bf:8c:49:2d:99:90:ac:9b:30:
                    6f:85:e3:3a:50:9f:ba:f0:7a:b1:b4:c4:d5:df:2e:
                    ee:11:e2:93:b7:f3:6c:3c:ec:b6:5e:77:5e:1f:0f:
                    bd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:46:0B:6A:8D:29:66:BC:EE:8E:5A:4E:D8:FA:B6:82:68:CE:66:06
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:32:85:0d:a2:e5:c0:28:b1:25:bf:20:61:ef:11:15:8b:56:
         b9:48:ab:58:ac:c0:38:39:34:53:1e:62:88:64:e6:9f:e6:fd:
         a4:69:22:c3:df:df:21:68:9c:22:c4:ef:df:6d:65:24:ac:2d:
         7c:34:7c:72:03:88:9b:c0:4f:b9:19:ee:10:c6:cc:ca:a6:d6:
         d2:fd:44:a0:be:be:a5:05:36:d7:3c:ef:0c:66:9e:8d:33:56:
         4c:dc:c1:f6:90:b5:0e:40:5e:8e:66:70:67:62:68:39:26:53:
         f3:3d:4b:af:1a:11:3e:3e:2a:f2:10:13:29:e2:86:a7:78:45:
         5a:83:86:67:0e:7e:77:46:fe:4d:19:b8:3a:21:c5:1a:2a:02:
         14:df:31:47:d2:a2:6d:e8:4d:da:70:17:62:a2:42:bd:82:18:
         49:fd:96:cd:c8:55:3a:d8:5f:fb:71:f6:4c:ae:81:23:5a:b5:
         78:1d:3d:2e:fb:7b:e9:88:19:bc:99:7f:05:21:81:d5:77:82:
         31:69:8a:66:4c:68:29:54:94:74:b6:7d:f8:96:18:1c:27:26:
         9d:07:95:2b:de:09:bd:5c:e8:ad:24:c3:d4:07:5d:d2:0d:5e:
         ca:49:77:f4:e8:7c:88:f6:eb:40:98:55:8d:23:05:84:a1:30:
         4d:56:b2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:26 2025 by rpki-client