Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          fWp/2hJb890sEiXbOWjOHUA/KZI6B9T7id7+FB2aE+w=
Subject key identifier:   E3:54:D4:D0:1F:32:75:78:35:73:F1:65:A0:81:EE:9B:CF:09:CC:08
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       0198D51627CECD3EC19CFF044C8DE9BA7F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          15D8
Signing time:             Sat 23 Aug 2025 04:00:55 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:55 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:55 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: I4IZIMEl6Fwkc8cFxE1gSwlD3tBc4VVBHrS4EuJ698w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:27:ce:cd:3e:c1:9c:ff:04:4c:8d:e9:ba:7f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: Aug 23 04:00:55 2025 GMT
            Not After : Aug 24 04:00:55 2025 GMT
        Subject: CN=e354d4d01f3275783573f165a081ee9bcf09cc08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a2:3d:15:bc:6d:d6:bc:53:c1:d4:cf:bc:68:
                    8f:3e:7e:72:cd:43:48:dd:db:41:6a:9e:3d:6a:78:
                    a4:d6:88:3a:f4:85:aa:59:e4:b3:da:83:c7:b8:ad:
                    6b:4e:fe:dd:01:10:07:2c:cf:0c:fc:1e:5f:c9:85:
                    3d:b2:dd:e8:20:9a:0b:93:31:c3:d4:78:31:eb:83:
                    eb:58:d1:c7:d6:24:f0:09:53:4b:fb:60:ec:dd:c1:
                    01:12:38:85:75:8d:98:b0:9c:8d:af:63:26:1d:8a:
                    9b:e8:bc:93:a3:90:d3:45:e8:f3:1e:64:dc:73:48:
                    d0:f6:d0:63:17:cd:78:3a:1c:fc:6a:05:cb:1d:31:
                    de:c7:30:90:59:b6:9c:71:f7:70:c3:67:83:c4:0a:
                    fc:25:df:43:b9:e1:13:61:e8:82:0c:4f:bb:b4:ce:
                    cd:82:48:d4:5e:b2:8e:c2:d0:cf:54:16:42:ef:01:
                    d2:47:d4:67:37:21:79:b4:05:54:8f:3f:af:b8:08:
                    24:7d:98:70:fe:0d:30:30:95:44:05:4e:3a:e4:62:
                    a0:57:07:7e:c8:9d:84:4f:23:f5:c5:97:46:8e:47:
                    70:b0:b5:84:a7:e2:f1:87:95:b8:c1:a8:50:88:1f:
                    6a:aa:5d:05:94:0e:8e:08:5f:21:a8:6c:b8:fa:26:
                    5c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:54:D4:D0:1F:32:75:78:35:73:F1:65:A0:81:EE:9B:CF:09:CC:08
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f3:1f:3d:0f:dc:39:17:f3:cf:8a:40:0f:1d:44:56:0b:d0:
         11:13:fc:e9:d1:0b:71:b1:c7:30:14:cb:ac:cd:35:3f:0b:30:
         0c:36:53:c7:d2:db:e9:8e:95:16:30:23:71:5d:aa:38:83:43:
         5e:19:50:6e:46:b9:89:47:4f:4e:0f:6a:96:1a:4c:0a:f1:c4:
         fe:12:d4:d1:67:1f:25:41:e3:87:fa:c4:32:4f:fd:16:f0:84:
         bc:84:81:1b:53:8e:c6:63:e7:06:d7:68:33:df:35:47:54:eb:
         50:ef:46:05:da:0f:7f:b2:d3:a4:2e:95:63:e0:c7:32:d3:8d:
         01:14:9f:e8:6d:31:3a:24:2c:b1:7f:ff:6c:9c:2a:c6:90:3d:
         9e:41:fb:76:dc:92:b2:79:58:f2:c9:4a:03:a0:99:e3:f6:58:
         e8:24:cc:d5:41:14:81:35:0e:8a:a1:4c:a8:63:d6:7f:bd:e3:
         26:51:64:d6:c1:a7:20:7a:9b:8f:ca:84:f9:a4:10:ac:ef:1f:
         76:d0:ec:d3:38:40:87:3b:66:e3:dd:56:8c:f3:3b:9d:e5:d9:
         2f:97:f8:a7:56:71:a5:4b:cc:9a:df:fc:4b:f6:a2:61:97:14:
         a8:66:f6:ef:ba:02:e3:f6:f1:7d:91:aa:f9:9c:c6:ab:d2:37:
         51:4f:c8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFifOzT7BnP8ETI3pun8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MTU3NTI4YTljY2U5MjUxOGYzNmJmMGE4MWI3OTAxYTY1
MGFlOTQwHhcNMjUwODIzMDQwMDU1WhcNMjUwODI0MDQwMDU1WjAzMTEwLwYDVQQD
EyhlMzU0ZDRkMDFmMzI3NTc4MzU3M2YxNjVhMDgxZWU5YmNmMDljYzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqI9Fbxt1rxTwdTPvGiPPn5yzUNI
3dtBap49anik1og69IWqWeSz2oPHuK1rTv7dARAHLM8M/B5fyYU9st3oIJoLkzHD
1Hgx64PrWNHH1iTwCVNL+2Ds3cEBEjiFdY2YsJyNr2MmHYqb6LyTo5DTRejzHmTc
c0jQ9tBjF814Ohz8agXLHTHexzCQWbaccfdww2eDxAr8Jd9DueETYeiCDE+7tM7N
gkjUXrKOwtDPVBZC7wHSR9RnNyF5tAVUjz+vuAgkfZhw/g0wMJVEBU465GKgVwd+
yJ2ETyP1xZdGjkdwsLWEp+Lxh5W4wahQiB9qql0FlA6OCF8hqGy4+iZcmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONU1NAfMnV4NXPxZaCB7pvPCcwIMB8GA1UdIwQY
MBaAFOYVdSipzOklGPNr8KgbeQGmUK6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEt
N2QxYjJkOWEyNDA1LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lYjg0ODQtODkzZi00MDBkLTkwODEtN2QxYjJkOWEyNDA1
LzEvNWhWMUtLbk02U1VZODJ2d3FCdDVBYVpRcnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/MfPQ/c
ORfzz4pADx1EVgvQERP86dELcbHHMBTLrM01PwswDDZTx9Lb6Y6VFjAjcV2qOIND
XhlQbka5iUdPTg9qlhpMCvHE/hLU0WcfJUHjh/rEMk/9FvCEvISBG1OOxmPnBtdo
M981R1TrUO9GBdoPf7LTpC6VY+DHMtONARSf6G0xOiQssX//bJwqxpA9nkH7dtyS
snlY8slKA6CZ4/ZY6CTM1UEUgTUOiqFMqGPWf73jJlFk1sGnIHqbj8qE+aQQrO8f
dtDs0zhAhztm491WjPM7neXZL5f4p1ZxpUvMmt/8S/aiYZcUqGb277oC4/bxfZGq
+ZzGq9I3UU/IaA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:10 2025 by rpki-client