Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
File:                     viyseNddsY5zyuA-Gr5Zh0lSkxo.mft (raw, json)
Hash identifier:          B7f8KXp8C+9L9dN6vM6kYrNwD+Z97CphvhU30wmqpYE=
Subject key identifier:   A4:C9:09:C2:34:56:63:E7:21:14:72:E2:75:78:D4:D9:68:50:8E:08
Authority key identifier: BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A
Certificate issuer:       /CN=be2cac78d75db18e73cae03e1abe59874952931a
Certificate serial:       0198D4740D9F34BFFB12C5E3438F9DCA0D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
Manifest number:          135C
Signing time:             Sat 23 Aug 2025 01:03:52 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:52 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:52 +0000
Files and hashes:         1: viyseNddsY5zyuA-Gr5Zh0lSkxo.crl (hash: rTh1W1eEPYfU1/ewAUo9aYiDgkYTC/zrbFlzMElBaVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:0d:9f:34:bf:fb:12:c5:e3:43:8f:9d:ca:0d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2cac78d75db18e73cae03e1abe59874952931a
        Validity
            Not Before: Aug 23 01:03:52 2025 GMT
            Not After : Aug 24 01:03:52 2025 GMT
        Subject: CN=a4c909c2345663e7211472e27578d4d968508e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:b2:48:68:4b:cd:5e:0e:aa:21:2c:5f:63:
                    1a:cb:e1:a1:aa:04:ae:52:b5:97:44:a2:85:73:6b:
                    87:00:f6:a2:20:e7:6c:a9:de:ef:1f:fb:14:58:6f:
                    18:7a:26:34:85:bb:96:e6:a6:9b:27:83:20:99:13:
                    ea:01:05:d2:be:e3:aa:da:2b:1d:ed:ca:24:59:e2:
                    de:01:be:9a:40:63:8d:d5:ee:46:e3:e6:2e:fb:ee:
                    ad:46:fb:43:94:8f:a9:3d:88:5a:37:19:08:cd:a9:
                    c4:3f:9f:23:ec:a2:bf:d2:6d:10:a3:de:cc:84:9d:
                    c5:ab:d4:e3:cc:79:e5:ec:4d:d4:36:8b:04:35:6f:
                    dd:cf:98:15:31:15:35:f9:69:5e:02:f7:a8:2e:e8:
                    6c:ee:6f:4e:7c:a8:8e:75:2c:57:8b:8f:8c:6d:96:
                    c5:bf:99:60:c9:4f:d7:04:67:ba:60:bb:0a:a5:5e:
                    b5:e8:e0:37:63:ad:75:c2:83:26:68:84:57:8e:74:
                    07:7f:f5:c2:87:88:03:16:02:05:bc:3e:8d:ba:ae:
                    70:b2:7e:47:55:33:d0:d2:81:9e:4d:2f:26:16:96:
                    eb:c8:8c:fd:aa:f5:a4:91:f1:cf:87:e7:03:24:f2:
                    3a:7c:7e:38:3d:c1:c8:53:f3:00:57:70:a1:9c:6e:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C9:09:C2:34:56:63:E7:21:14:72:E2:75:78:D4:D9:68:50:8E:08
            X509v3 Authority Key Identifier:
                keyid:BE:2C:AC:78:D7:5D:B1:8E:73:CA:E0:3E:1A:BE:59:87:49:52:93:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viyseNddsY5zyuA-Gr5Zh0lSkxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/998886-2f98-40c6-b8d7-842038124763/1/viyseNddsY5zyuA-Gr5Zh0lSkxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:75:c7:b6:69:6c:48:a0:a3:db:84:8f:f9:f5:a6:b6:f6:22:
         a5:1f:5f:bb:7c:4a:b1:31:2f:62:11:1c:ec:5f:ad:02:16:72:
         87:7b:85:e7:87:24:84:2f:01:9e:39:8c:6f:6f:91:eb:8d:31:
         9f:4f:45:dd:72:a5:d5:f8:5c:09:28:50:01:31:bb:ab:cc:2b:
         e1:93:79:98:a1:b5:91:d6:5c:e9:4c:af:bc:92:78:d3:4b:f8:
         2f:d6:93:60:41:2a:88:33:ce:72:1b:a8:a0:ce:f5:f0:b6:68:
         32:af:52:2e:ad:4b:59:74:d0:89:b5:02:5f:70:76:cb:24:1d:
         95:da:20:a5:47:b1:d9:bc:3e:18:c8:ff:70:4b:c2:31:30:dd:
         c7:41:bd:3e:54:58:25:14:0e:90:1f:34:3f:fa:46:f2:dc:18:
         af:70:6b:4b:74:f0:d5:b3:5a:af:42:08:ac:f3:3c:c1:df:b5:
         fe:b7:b5:80:93:01:6d:57:cb:82:ef:09:cd:e4:db:f0:fd:d8:
         8c:c4:91:b6:da:3b:87:90:b1:51:86:1e:44:54:7f:bd:23:35:
         5a:4e:af:43:67:ef:8f:82:d8:a8:00:d1:43:f3:b9:9a:bf:75:
         d5:be:c2:28:21:60:70:bd:1e:41:b9:3c:c2:69:e9:64:3b:ed:
         0c:72:47:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:43:22 2025 by rpki-client