Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File:                     VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier:          LSF2g6XWBHlkEbV2pi8VQ5n+vr+8iJhFj4qweSBKIX4=
Subject key identifier:   81:76:E2:41:32:6C:8F:48:77:D5:C9:60:83:34:3B:92:25:ED:DA:2C
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer:       /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial:       0198D472BA0081596AD74438A540F7B4384D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number:          13DA
Signing time:             Sat 23 Aug 2025 01:02:25 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:25 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:25 +0000
Files and hashes:         1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: tbW3j4omjhI7mGxHDlFM1PmLmM/itB/XX/7G0tk+2Zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:ba:00:81:59:6a:d7:44:38:a5:40:f7:b4:38:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
        Validity
            Not Before: Aug 23 01:02:25 2025 GMT
            Not After : Aug 24 01:02:25 2025 GMT
        Subject: CN=8176e241326c8f4877d5c96083343b9225edda2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:3a:1c:0f:0b:b8:5f:d5:a6:35:fa:95:d9:
                    6d:30:6d:30:34:81:31:d6:ff:5d:a3:38:1b:c5:24:
                    32:4c:8b:e5:c1:3f:9b:ca:99:e1:92:28:39:51:23:
                    83:0d:c6:40:ff:9b:63:81:42:dc:8c:cf:42:78:dd:
                    91:98:ce:74:43:78:d2:84:73:6e:30:72:6e:4a:08:
                    b9:ba:cf:50:89:ad:46:4f:8f:f6:80:9f:7e:5e:ba:
                    32:c8:19:88:ef:49:23:75:4e:89:4c:74:c9:1a:69:
                    71:4e:bb:0d:75:be:96:0a:8b:72:9a:32:58:33:a1:
                    17:7b:d6:fc:f8:8c:64:83:a3:b5:37:ab:30:02:5d:
                    e8:5c:b8:2a:be:ec:dc:ff:e8:af:b4:6f:07:2c:8c:
                    79:c2:87:70:26:78:64:c2:ee:20:56:ca:3e:4f:42:
                    70:21:50:cc:68:a1:d8:e8:8f:ec:b0:59:36:99:66:
                    1a:9f:16:49:0b:8e:df:3d:64:72:6c:3d:e7:15:a7:
                    14:bd:ee:70:ed:fa:0c:85:d3:b9:b9:8e:90:f6:df:
                    ef:4a:59:8f:4a:4c:2e:df:1b:0e:a1:1f:32:0d:91:
                    d2:cc:00:0f:68:03:fe:66:b0:0e:44:6b:8c:38:3f:
                    3a:00:0c:02:c2:15:76:e7:ca:47:6e:99:87:9d:81:
                    3d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:76:E2:41:32:6C:8F:48:77:D5:C9:60:83:34:3B:92:25:ED:DA:2C
            X509v3 Authority Key Identifier:
                keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d4:a8:fa:9d:31:7b:23:e6:47:54:09:6d:40:f0:16:3b:38:
         31:28:a2:09:1e:1b:f4:96:62:8d:ff:28:86:4d:f2:30:11:23:
         09:d6:96:ae:e0:07:f5:f0:28:cd:6a:17:fc:51:dd:77:77:cc:
         59:80:e8:76:4e:28:c6:41:2b:ba:ef:5b:b2:58:23:8f:3f:ad:
         40:21:7c:13:ca:ca:be:8a:16:51:8e:dc:7d:66:d0:d3:aa:05:
         fc:40:8b:1e:76:3b:f0:42:6d:dc:51:c2:d0:bb:a7:a4:d3:95:
         8e:d1:d3:25:18:55:55:29:e8:18:d8:09:a4:41:2b:6c:57:60:
         98:92:36:a7:62:56:db:e7:1b:50:9f:6e:c8:29:17:67:a3:f2:
         8f:d3:2a:92:43:d2:ab:61:1e:45:7a:92:1a:e6:d6:b3:3e:34:
         51:b3:6d:c3:e5:ed:0d:5a:59:1d:bd:ac:ad:be:05:0e:84:65:
         c6:ce:3c:36:17:9c:92:f6:e0:92:8f:fb:99:78:d9:08:2b:68:
         f5:56:cb:94:10:f2:cd:0c:fa:cb:7d:dc:49:78:36:c3:d2:63:
         b5:f5:0d:9f:c3:8c:c4:39:f2:09:ed:20:ec:7a:81:0b:c4:56:
         b8:14:7f:f4:1d:57:ee:56:80:c7:28:4d:8c:d0:8f:f5:06:4a:
         56:22:35:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:31 2025 by rpki-client