Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
File:                     pKgNKvhhtwo37AUOAT5t-6lMiz0.mft (raw, json)
Hash identifier:          z9TLGG7PVJbfspU6n1GpI/w6cE/Mh9b9Zs4vIScrobw=
Subject key identifier:   FC:8B:BF:8D:81:88:25:D1:B3:DB:BB:3B:5F:5C:23:CB:AA:A2:63:AA
Authority key identifier: A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D
Certificate issuer:       /CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
Certificate serial:       0198D6604C62538FF794E11CE6359B504F83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
Manifest number:          0EEE
Signing time:             Sat 23 Aug 2025 10:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:31 +0000
Files and hashes:         1: pKgNKvhhtwo37AUOAT5t-6lMiz0.crl (hash: u5J50NI+IOfuQ2jdVOZeEuvoXlEZC1b3Nx6I/QqHXZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:4c:62:53:8f:f7:94:e1:1c:e6:35:9b:50:4f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a80d2af861b70a37ec050e013e6dfba94c8b3d
        Validity
            Not Before: Aug 23 10:01:31 2025 GMT
            Not After : Aug 24 10:01:31 2025 GMT
        Subject: CN=fc8bbf8d818825d1b3dbbb3b5f5c23cbaaa263aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:00:29:ff:f7:23:59:f8:77:b4:c4:16:6c:
                    14:1a:25:d0:0f:cf:1d:d0:e4:8c:dc:3d:07:95:6a:
                    cf:90:de:9d:6f:42:9d:57:01:d3:bb:d8:f9:81:a1:
                    db:96:48:de:ca:63:f7:d2:e4:0f:1f:59:31:09:06:
                    19:6f:cb:24:d4:13:a7:19:bc:8a:eb:22:c4:76:73:
                    10:26:32:43:0f:a7:af:23:56:6c:a8:69:df:4a:1a:
                    4a:f5:53:54:c2:d7:5a:43:18:eb:1c:7d:43:2a:25:
                    38:8c:36:1c:91:d8:ae:f3:4d:6d:b5:63:b7:13:e8:
                    c1:af:09:0a:55:11:3e:98:a1:e3:25:4a:8e:c1:76:
                    89:65:66:58:c1:cf:ff:51:a7:ac:35:8a:b0:53:d2:
                    d1:1d:95:ca:e2:33:e6:cc:1a:fc:b3:bf:24:e1:1f:
                    39:0e:46:96:af:c4:af:30:90:84:50:00:77:dc:67:
                    07:cd:0f:33:77:4d:d5:33:d6:bb:b6:44:83:4f:04:
                    8a:8c:de:99:47:49:1c:5d:3e:f0:ba:0d:7e:c5:a3:
                    b0:14:cb:aa:d1:10:53:fb:b2:2b:bb:6f:9c:58:05:
                    7a:b3:90:58:27:28:c8:5a:db:0c:41:5d:bc:a7:4d:
                    67:be:0a:52:29:1f:6a:96:5e:7d:1c:4f:75:fa:58:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8B:BF:8D:81:88:25:D1:B3:DB:BB:3B:5F:5C:23:CB:AA:A2:63:AA
            X509v3 Authority Key Identifier:
                keyid:A4:A8:0D:2A:F8:61:B7:0A:37:EC:05:0E:01:3E:6D:FB:A9:4C:8B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKgNKvhhtwo37AUOAT5t-6lMiz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec6225-d6a7-418a-b02f-6234ea09e186/1/pKgNKvhhtwo37AUOAT5t-6lMiz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:a3:70:1d:a0:01:1b:f8:0f:a6:cf:d7:41:56:16:41:58:
         ac:bb:d1:01:b9:f2:88:25:14:b8:22:13:96:1a:a8:81:1e:e9:
         12:3e:1f:44:3e:ae:02:31:18:18:f0:6a:a3:03:b6:86:80:9c:
         c9:00:23:4f:06:f7:c1:06:88:0f:b3:d4:dd:28:11:f8:9a:a4:
         d4:3c:99:03:27:7b:fc:0c:11:f8:77:53:ee:50:d0:00:db:82:
         16:f2:12:7d:b0:8a:a6:fd:ef:0c:77:32:1a:4f:d6:41:42:d7:
         f6:1e:2b:b7:04:ab:e0:a3:dd:39:5b:bd:3d:0f:49:7b:a4:1e:
         35:b8:b1:c2:a5:0a:f0:e9:8f:0c:bb:a0:29:b0:06:22:98:db:
         4c:fc:82:bd:29:46:12:32:51:51:f1:4f:a2:9d:fa:f6:d8:6b:
         9d:8e:a0:e4:6b:3f:71:31:0a:85:d9:90:ce:a3:cc:70:95:8a:
         3e:ea:0f:4b:65:63:2c:0f:34:02:18:40:cc:49:39:95:97:9b:
         bb:98:bf:f3:c6:99:47:cb:c4:76:29:5b:46:73:59:dd:c8:e2:
         95:82:3b:4d:33:6e:15:80:5b:06:b9:6b:87:ac:5e:a4:3b:d5:
         3c:6a:82:98:5a:96:85:35:93:4f:57:3d:44:36:b9:d7:d0:5e:
         c5:12:a7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:32:41 2025 by rpki-client