Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
File:                     pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft (raw, json)
Hash identifier:          AVpq3zzHIxtikMjxCMFFoUskPVMHloNvg5MHiZZXvmI=
Subject key identifier:   CA:63:86:63:14:E3:CC:93:90:FD:48:21:03:49:78:5D:DB:D4:01:04
Authority key identifier: A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF
Certificate issuer:       /CN=a540abd19882cac80b766d72ad8fec24ab9550af
Certificate serial:       0198D4E0CE64263997FAB08643F42C79E0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
Manifest number:          15
Signing time:             Sat 23 Aug 2025 03:02:39 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:39 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:39 +0000
Files and hashes:         1: pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl (hash: cCAGqOr8jCaLxyXkjpd+7WDAAPj0ZdU/SHmCaXQshvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:ce:64:26:39:97:fa:b0:86:43:f4:2c:79:e0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a540abd19882cac80b766d72ad8fec24ab9550af
        Validity
            Not Before: Aug 23 03:02:39 2025 GMT
            Not After : Aug 24 03:02:39 2025 GMT
        Subject: CN=ca63866314e3cc9390fd48210349785ddbd40104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:d1:f9:9a:96:74:b7:9a:af:b5:59:1f:f7:
                    c7:4b:70:56:03:94:3b:c7:ce:eb:cd:13:c2:44:1b:
                    9e:61:3f:ab:fd:c9:72:49:d0:12:c7:21:37:89:38:
                    34:fd:3a:31:97:85:bc:4c:a5:9b:f6:fe:c4:42:d9:
                    00:26:1b:3b:d0:03:60:0c:ca:b8:d1:08:0f:3d:a5:
                    fc:f6:94:43:a3:67:d1:ab:1b:0a:bf:8a:15:07:52:
                    cb:fa:e3:d0:a9:59:d1:ca:0c:b5:88:5a:38:4e:e9:
                    9c:07:82:b4:4f:5a:fc:7a:f0:57:0a:73:fe:82:d1:
                    e3:55:63:12:52:29:9c:7d:92:aa:02:e9:2a:4d:63:
                    70:39:f4:e8:8d:6a:67:00:ae:de:70:b5:b0:72:b1:
                    f5:b3:40:64:54:fd:99:b1:5f:02:04:c4:98:26:03:
                    da:ea:07:25:e7:6b:af:4a:94:e9:ae:4c:b6:b7:c6:
                    cc:2b:61:de:84:ef:23:ab:c9:eb:8c:ba:06:d6:1f:
                    a0:aa:69:b8:6d:fc:71:0d:c5:b9:1e:24:ee:f4:de:
                    f9:f8:7b:cf:3b:fc:b3:92:1f:2c:51:e1:8d:72:c3:
                    d9:c4:95:9a:06:0d:7b:fd:e5:90:ba:f4:74:1f:34:
                    6d:44:46:de:bf:b7:57:d1:59:b6:52:1a:3d:29:a9:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:63:86:63:14:E3:CC:93:90:FD:48:21:03:49:78:5D:DB:D4:01:04
            X509v3 Authority Key Identifier:
                keyid:A5:40:AB:D1:98:82:CA:C8:0B:76:6D:72:AD:8F:EC:24:AB:95:50:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUCr0ZiCysgLdm1yrY_sJKuVUK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/76c3df-a69b-45d1-9172-deb139c4f1b6/1/pUCr0ZiCysgLdm1yrY_sJKuVUK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b4:d7:c9:41:18:88:78:5b:3c:41:0d:6e:fc:81:1e:69:fb:
         dd:cd:21:6e:96:48:b3:cd:fd:fb:e6:f7:c2:c9:d2:f7:3c:22:
         95:83:59:12:86:ae:08:e0:ce:d7:f8:12:a6:3b:2d:fd:70:0e:
         58:7b:ec:26:76:4c:2a:d0:2d:f6:64:01:2f:5a:40:2e:5e:f4:
         05:ef:1a:6b:44:c1:94:f7:19:f0:2e:15:54:3d:bb:4a:1a:79:
         85:b3:7f:0a:80:4b:f4:56:87:2f:cd:79:53:b0:66:a4:24:53:
         2e:42:92:c0:84:38:21:26:9d:26:01:27:70:1b:0a:d3:ac:fe:
         ad:ca:41:64:c2:65:9a:d5:ea:d6:6a:0a:7a:22:90:d5:4e:eb:
         d0:b8:71:a7:78:d4:2f:46:cd:86:b6:83:ad:7a:42:d2:60:26:
         d2:35:a0:e6:e1:35:3c:c5:68:cd:18:7d:48:41:3d:20:4c:ff:
         59:e0:5f:f7:bf:34:0f:d1:83:dc:68:f9:39:2e:22:5b:66:0e:
         52:f8:59:57:66:90:b7:51:f7:09:7a:64:4e:74:a5:67:6e:83:
         8d:10:57:a0:ec:0d:08:93:1d:ba:53:cf:e3:b9:a6:98:58:a0:
         b7:20:2b:04:5b:85:fa:61:d8:ab:ce:2b:8d:bf:21:c6:b9:84:
         a0:cf:22:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:26 2025 by rpki-client