Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File:                     rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier:          LNrkohPoHogDmx+ME6qsTbl7/V8FwQQxmZiz11lF3UE=
Subject key identifier:   E1:91:E4:7F:2E:2F:1C:8B:A9:C9:90:82:0C:94:42:32:6F:D3:DD:EB
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer:       /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial:       0198D583FE38B4F803C790A58A4CE8E6412D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number:          1545
Signing time:             Sat 23 Aug 2025 06:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:53 +0000
Files and hashes:         1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: 6TxKY0UdQMsA0RMW4cGbiFgI+9s5in2KVEPTyF9h6BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:fe:38:b4:f8:03:c7:90:a5:8a:4c:e8:e6:41:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
        Validity
            Not Before: Aug 23 06:00:53 2025 GMT
            Not After : Aug 24 06:00:53 2025 GMT
        Subject: CN=e191e47f2e2f1c8ba9c990820c9442326fd3ddeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:ab:d5:ed:f6:62:71:f2:9b:99:a4:9e:ff:
                    f4:a2:cd:24:46:ae:d5:0a:0a:b6:27:e2:5d:cc:da:
                    f5:fb:43:80:16:49:93:ce:7c:20:bf:50:38:f7:a8:
                    d5:b7:6f:d0:96:c7:53:ab:40:8b:35:f2:7a:98:16:
                    02:df:d7:15:61:f4:28:2d:6b:30:fc:83:80:1e:e0:
                    14:b0:fe:b8:f2:e5:db:0a:34:9f:82:bc:dd:0f:bd:
                    7d:2e:08:44:bb:8d:a4:fc:2e:e0:d3:ed:01:82:f8:
                    bd:fc:d0:3c:32:a6:35:02:80:2b:61:3a:25:de:16:
                    c2:4c:ef:3d:fc:53:dc:18:38:1f:2a:d1:95:4e:17:
                    dc:84:cd:eb:aa:67:cd:e5:b8:00:a5:40:4a:7a:11:
                    9d:43:3b:7c:74:52:d7:ba:72:41:55:d9:69:17:92:
                    33:7f:cc:fc:0b:46:83:81:e2:c7:87:48:d9:a1:04:
                    52:11:d4:5e:16:0d:69:45:dd:5a:8d:39:fa:f6:df:
                    9c:28:87:9d:b7:47:65:8c:90:29:30:61:e9:60:29:
                    cf:52:d5:1d:84:88:49:3e:c3:54:77:0d:4f:87:98:
                    9d:f1:ac:85:34:46:f1:23:bd:78:a4:a9:32:e6:f7:
                    fb:80:b7:ab:ed:4f:31:75:2b:29:d6:e0:63:98:80:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:91:E4:7F:2E:2F:1C:8B:A9:C9:90:82:0C:94:42:32:6F:D3:DD:EB
            X509v3 Authority Key Identifier:
                keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c8:d9:3f:95:35:0d:10:97:db:7f:f4:a2:49:80:5b:fa:b7:
         34:28:d1:84:74:7e:ea:70:6e:af:ad:14:2d:30:a0:be:b6:9f:
         2c:43:cc:8b:fc:ac:a7:7c:0c:7b:ae:7b:b7:46:df:19:54:ac:
         11:39:aa:e7:8c:5c:9d:a6:11:66:a9:08:0a:4d:12:60:29:7a:
         be:68:48:5d:7c:39:1e:b6:ad:69:5f:dd:9e:34:2a:88:f2:dc:
         70:fa:26:7d:7a:2b:6c:62:49:0c:b2:e6:b8:c8:62:a4:de:65:
         96:d4:30:fd:70:e7:14:86:9c:74:c8:2e:ca:68:d5:86:66:58:
         6f:8c:00:ac:a4:45:75:91:80:1b:97:51:74:78:cb:84:cc:4e:
         f6:52:88:d1:82:1f:29:f9:e1:93:cb:2b:be:e4:e8:66:45:b2:
         77:fb:30:f2:dd:00:13:81:3c:f5:a9:73:14:67:78:90:7e:5c:
         3f:1e:21:f6:e9:65:91:66:2a:ed:f7:e0:f5:31:f5:37:49:d8:
         1e:d3:ca:cd:a1:3f:25:8b:7e:05:d9:0a:b4:9e:a6:98:2c:a0:
         07:c7:d1:86:8d:7a:49:2b:a5:5e:fb:cc:38:d8:16:fa:1e:f7:
         a5:8b:31:17:0b:9a:da:88:5e:a8:7f:06:40:73:fe:7e:4f:32:
         a4:1c:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:41 2025 by rpki-client