Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
File:                     daRvv8jeUjM5XHPeUflVO7doRgU.mft (raw, json)
Hash identifier:          FQIiI3/71MrTxKh3HT+wgp74JNIXN9RZwg7YKHdgCQo=
Subject key identifier:   F0:53:01:DC:CB:74:B5:D9:39:AA:10:32:7A:BD:64:7C:6F:F9:4D:45
Authority key identifier: 75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05
Certificate issuer:       /CN=75a46fbfc8de5233395c73de51f9553bb7684605
Certificate serial:       0198D661307A0E467F263D3A9879160929A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
Manifest number:          1645
Signing time:             Sat 23 Aug 2025 10:02:30 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:30 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:30 +0000
Files and hashes:         1: daRvv8jeUjM5XHPeUflVO7doRgU.crl (hash: z3ge8Gss5v+vEX+Tw7+hHWlThG/VlXZ/5zvVdigOcBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:30:7a:0e:46:7f:26:3d:3a:98:79:16:09:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a46fbfc8de5233395c73de51f9553bb7684605
        Validity
            Not Before: Aug 23 10:02:30 2025 GMT
            Not After : Aug 24 10:02:30 2025 GMT
        Subject: CN=f05301dccb74b5d939aa10327abd647c6ff94d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:53:11:54:63:c4:d1:16:fd:16:a2:33:ed:10:
                    8b:3f:71:a3:42:ef:5e:81:66:fb:87:e0:9c:7c:27:
                    ad:d5:04:0c:0f:26:f7:57:8b:fb:f1:e3:d9:6c:23:
                    72:46:9f:68:ce:65:c4:bb:c1:ef:b1:cb:f9:0d:94:
                    5a:c8:2a:0d:9f:f6:21:59:01:b7:db:26:b6:a9:5a:
                    38:98:72:d0:82:37:52:eb:a9:31:6a:1a:27:ee:1c:
                    60:51:89:eb:5c:ba:08:28:88:1d:99:45:50:ad:e6:
                    0e:c8:90:8a:b5:24:2e:21:75:41:50:9c:69:7c:4c:
                    a5:97:cb:d7:45:0e:7b:3b:86:39:ec:b1:11:88:36:
                    0a:39:68:7b:04:e7:cc:cc:29:a1:a5:1a:61:e3:cb:
                    f4:f1:ab:08:25:41:c3:07:83:97:b6:9f:92:50:36:
                    2b:e3:9a:62:58:4d:5c:cb:67:11:65:30:42:88:2d:
                    e1:fb:37:8c:5a:06:19:2b:b4:83:5a:3b:07:93:d6:
                    53:5c:0c:c1:6d:30:ae:6a:f8:35:c5:32:eb:ff:2a:
                    b4:14:47:95:6e:ec:0b:c1:f0:e6:fd:93:53:fe:fb:
                    c8:53:9c:3b:e1:30:72:ba:63:78:29:8e:84:3a:c1:
                    33:55:09:a4:11:35:ae:3c:23:8c:98:d9:db:5f:f2:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:53:01:DC:CB:74:B5:D9:39:AA:10:32:7A:BD:64:7C:6F:F9:4D:45
            X509v3 Authority Key Identifier:
                keyid:75:A4:6F:BF:C8:DE:52:33:39:5C:73:DE:51:F9:55:3B:B7:68:46:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daRvv8jeUjM5XHPeUflVO7doRgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/427e2c-96f6-4e43-914a-8c7c54f3c5b0/1/daRvv8jeUjM5XHPeUflVO7doRgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:ad:89:f9:79:5c:88:08:9f:c1:b8:97:92:df:02:46:35:
         d7:cd:1c:4e:0a:78:0f:18:e7:49:da:7d:57:6e:4e:71:56:9d:
         72:97:02:04:c8:37:79:cd:cf:96:6f:3e:59:c3:fd:38:06:4f:
         3a:4c:a5:6f:14:fe:90:fa:ce:0e:77:19:fc:e5:e4:f1:13:71:
         01:19:6f:45:97:9e:ff:3b:e4:7c:fd:86:48:99:b4:93:b5:18:
         d5:08:2e:4b:5b:3a:a7:c7:ea:9e:4d:be:a8:b0:45:dc:7d:ff:
         1a:e7:5c:4b:37:20:70:33:b7:19:20:b2:18:f0:fb:0e:87:f1:
         ca:7e:d4:b6:69:fb:d0:2d:9e:a7:f1:c8:af:26:30:97:96:62:
         5b:4b:25:81:63:54:cb:9d:ea:58:37:ac:fc:5e:2c:92:20:13:
         3a:9f:0b:bc:b6:a9:d6:6b:cf:c8:91:3e:50:b5:08:6b:b1:49:
         99:49:2f:86:d4:f8:26:78:27:92:96:76:a9:31:2f:06:46:4a:
         07:47:51:be:f9:67:b5:5d:88:76:ad:54:e0:70:1e:d5:5c:45:
         b1:7a:4a:c6:f3:63:00:87:6f:c5:21:94:b7:9a:a4:0d:aa:da:
         45:78:ee:01:b5:8a:25:0d:8a:c0:3b:eb:0d:b9:d7:04:00:ca:
         06:c7:6c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:09 2025 by rpki-client