Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
File:                     eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json)
Hash identifier:          I7UM4WdsTtWwPtzA4V/YPjP2H0+4IiOwiPorTME3EEI=
Subject key identifier:   ED:9A:C2:88:D2:1E:94:14:79:98:36:66:F9:53:68:EE:CF:7E:DD:43
Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA
Certificate issuer:       /CN=7950522148d268376c84530c5d2da53e39bf1aca
Certificate serial:       0198D6602E91AFB777F5467FA54E6B4BCE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
Manifest number:          051B
Signing time:             Sat 23 Aug 2025 10:01:24 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:24 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:24 +0000
Files and hashes:         1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: MrKk73LS1M5WUBY/NNZ3xC+h/SfTpmmYrmVEa7o6MkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:2e:91:af:b7:77:f5:46:7f:a5:4e:6b:4b:ce:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca
        Validity
            Not Before: Aug 23 10:01:24 2025 GMT
            Not After : Aug 24 10:01:24 2025 GMT
        Subject: CN=ed9ac288d21e941479983666f95368eecf7edd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:15:0d:f1:47:f0:c2:09:be:b2:93:dd:be:
                    0a:4f:76:c4:27:a0:2f:76:ca:0b:25:12:93:14:31:
                    73:70:88:1d:1c:ee:26:a6:d9:61:c8:bd:cf:cd:6d:
                    52:fd:17:27:31:25:c7:b9:31:b6:0d:79:70:77:9f:
                    81:43:b4:57:77:09:a9:cf:a3:89:a0:d2:98:8a:63:
                    19:5b:ce:6e:1d:6d:17:3a:34:2b:98:0a:13:dc:c8:
                    17:15:9a:a7:89:7f:ec:bc:ce:5d:14:b0:36:8f:c8:
                    7a:75:5e:27:61:ba:85:61:2f:69:22:3b:61:1a:29:
                    ae:8c:eb:76:33:69:3f:da:d5:5e:92:1c:b7:89:7a:
                    48:24:0d:14:ae:56:a2:11:75:09:e4:b5:74:0e:91:
                    32:5d:8d:8a:9e:62:cb:67:b0:e6:c5:61:79:c3:d8:
                    0b:8d:9d:3f:42:f1:3a:6d:71:f9:35:75:e8:bc:9b:
                    6e:bc:6d:37:cc:2f:40:08:2e:47:95:47:15:da:0d:
                    f2:b2:b1:0d:30:68:f5:21:4f:c8:e6:6e:f7:35:f3:
                    1d:52:b3:ff:54:b9:ec:31:cd:c9:8c:48:5f:6c:e0:
                    38:20:30:5f:26:6d:3f:69:d4:78:79:0b:b6:81:72:
                    b5:97:93:15:e4:16:20:35:1a:18:97:3e:92:52:4b:
                    31:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9A:C2:88:D2:1E:94:14:79:98:36:66:F9:53:68:EE:CF:7E:DD:43
            X509v3 Authority Key Identifier:
                keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:70:20:90:fd:f0:68:f0:34:54:bc:9f:99:85:ba:dc:04:
         32:2d:53:54:3c:8d:ff:ed:80:a5:cc:2e:4b:ff:ea:77:5b:f0:
         27:27:b6:be:26:d6:92:59:5f:17:d7:9c:ac:98:a4:87:af:1a:
         83:ca:96:89:00:3e:3b:7c:7c:53:d9:3d:99:57:08:d0:49:97:
         f9:63:ae:13:be:ea:6a:c0:e7:99:6a:73:1c:2b:12:d9:f0:4c:
         4e:41:69:0d:e7:11:e1:34:e6:c4:57:14:68:ac:87:68:f4:b6:
         6d:1a:64:b3:28:45:9f:0f:07:1d:0b:00:d9:d4:56:c0:52:d9:
         2e:30:a9:7f:f3:32:4e:70:3d:8f:3a:54:ac:05:33:16:31:a8:
         14:7a:78:61:18:11:77:d0:23:cb:67:5a:1e:41:a4:45:98:7a:
         38:79:05:d5:70:4f:bb:ab:c9:17:9d:ed:07:cd:3e:27:e4:19:
         80:c1:61:6a:32:60:47:c4:b5:ac:d0:db:ee:6c:ae:be:95:5f:
         7f:a5:8e:84:42:08:38:40:08:c5:62:15:b9:84:08:18:a7:99:
         6f:43:af:d6:b6:83:5f:5e:3a:53:16:8a:3c:1f:e8:b8:5d:50:
         7f:6b:1d:06:e1:88:c6:2e:a6:0d:ee:df:5e:b4:9d:52:bf:4d:
         81:52:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:00:41 2025 by rpki-client