Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File:                     elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier:          4k4jcwdRRLUsYlSwn6H23mxEi81GeYCIhzJnIurX4tw=
Subject key identifier:   E6:E2:2F:9C:00:9E:D5:7A:17:51:73:F6:FD:F1:D1:E8:9A:EF:B6:EE
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer:       /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial:       0198D583718BDB691BE47FE800D2555143E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number:          0648
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: ExXdnea3QQLhRqFIiFZQLkgQa7LoEneoRdF8ufakc8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:71:8b:db:69:1b:e4:7f:e8:00:d2:55:51:43:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=e6e22f9c009ed57a175173f6fdf1d1e89aefb6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:81:ce:92:e9:1b:49:67:0f:d7:ee:a5:29:
                    7d:a0:93:94:1e:72:d5:4f:17:9e:c0:ec:aa:f2:89:
                    bf:5a:a9:e8:0a:9c:e5:99:1a:94:d6:a5:8f:4b:ea:
                    7a:fb:07:0b:9f:82:1d:56:fe:d4:ba:bb:28:13:b5:
                    91:9f:97:48:4d:d1:b7:b9:ed:42:d5:11:46:06:06:
                    3e:38:5f:f6:cd:80:7a:42:cf:f5:13:78:22:7d:88:
                    f2:8c:1a:de:6d:c2:86:1f:54:80:67:75:0d:ec:8a:
                    52:3b:74:17:f5:7f:ab:1d:54:d8:98:e0:60:9e:e3:
                    77:ba:6b:80:c0:d8:4d:a3:f0:34:5f:ba:b0:38:b1:
                    5a:c4:a2:7c:b9:1f:72:76:6e:7b:7f:c0:c1:04:fc:
                    95:93:ea:39:ed:cf:62:32:3a:9e:e9:6a:ad:8c:b7:
                    61:0a:48:9a:56:e3:e3:d4:f6:f7:5b:df:4e:d4:81:
                    d9:54:15:20:c0:24:8b:1b:8d:83:2f:1a:f8:5b:54:
                    d9:88:d3:a6:80:b1:50:8a:cd:55:17:ba:74:55:4d:
                    18:a3:0d:5f:31:5c:0c:28:ee:14:c7:fd:62:57:59:
                    e6:41:9d:9d:fe:8b:43:72:95:07:89:75:b6:5d:dd:
                    82:9e:b5:8f:d0:80:72:4b:cb:25:05:ed:9d:d8:c9:
                    a5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E2:2F:9C:00:9E:D5:7A:17:51:73:F6:FD:F1:D1:E8:9A:EF:B6:EE
            X509v3 Authority Key Identifier:
                keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:46:7b:6e:29:39:b3:a7:d4:81:37:2f:1c:4f:fd:f6:8c:
         f7:d0:9f:8d:c3:d8:7e:f9:25:fa:ec:32:aa:a9:be:46:07:e2:
         49:95:ec:ab:fb:6f:f2:c0:09:15:70:48:2e:46:52:82:2a:91:
         db:f6:2a:a9:aa:d8:90:3a:38:ca:33:a9:2a:1d:a4:7e:2d:51:
         a3:2b:f5:b4:ca:e3:80:01:0c:29:a1:2c:97:a9:26:f8:a1:d5:
         5e:bd:6b:fa:5b:7f:69:0c:7a:02:04:5c:49:32:b1:13:49:11:
         e9:0a:12:04:4f:d8:3b:f8:57:d6:6e:13:d0:f5:2d:29:ac:6c:
         18:b6:51:bb:ce:b2:14:72:14:5e:2c:a8:8e:dc:05:53:73:2c:
         07:5b:db:3b:d8:b5:89:cc:20:c7:5a:56:55:72:bb:d4:c7:3a:
         1d:73:81:62:cc:63:e1:5e:73:3f:c0:0d:9d:4f:d3:97:4a:fd:
         71:82:de:da:01:3e:7a:8e:69:42:0a:fc:fe:57:52:6e:01:21:
         51:8e:a1:c2:c3:74:16:08:4d:d9:e4:3d:cd:8f:a7:af:50:dc:
         0c:bf:f3:e4:cc:64:a4:03:81:07:44:2b:16:75:e8:a7:10:7f:
         28:a1:f6:e1:cc:66:8d:41:a8:fb:9f:fb:f5:38:23:26:ad:3b:
         79:f9:f1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:27 2025 by rpki-client