Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File:                     15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier:          hqeYFe8YgvQ/dNAj27XrkcuChAe4yux0A6cdq8xONTc=
Subject key identifier:   F7:02:22:18:CA:C8:2C:18:E0:C9:28:AF:A8:D1:0C:FD:21:DD:DF:0D
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer:       /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial:       0198D54E05F314EF4C167EA9A050733FEDB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number:          0758
Signing time:             Sat 23 Aug 2025 05:01:56 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:56 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:56 +0000
Files and hashes:         1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: X3iMLoK7AKgRCg9MQuL0BUz6ZZpj50r5jF4pR88xPJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:05:f3:14:ef:4c:16:7e:a9:a0:50:73:3f:ed:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
        Validity
            Not Before: Aug 23 05:01:56 2025 GMT
            Not After : Aug 24 05:01:56 2025 GMT
        Subject: CN=f7022218cac82c18e0c928afa8d10cfd21dddf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:bc:a5:46:f9:16:62:36:a1:5c:69:11:86:
                    1a:83:04:15:be:ca:a4:ef:a0:a5:85:e0:4d:06:50:
                    b4:f4:47:81:51:6f:f4:ec:6e:59:43:38:e6:e8:c7:
                    d9:53:19:fc:7b:d4:41:70:88:aa:14:91:1e:3b:14:
                    52:1e:9b:40:21:34:7c:0f:7e:46:7c:b0:ab:db:03:
                    bd:d5:f6:f3:74:73:8c:0a:d4:84:a3:66:89:5c:54:
                    41:ae:ae:fa:20:98:ba:d1:4a:73:00:09:62:f5:dd:
                    7f:f0:4f:6f:7f:e2:eb:53:38:3c:67:f7:e9:04:93:
                    cf:1c:6f:f6:cf:6b:c6:26:d4:6b:cf:06:2c:85:96:
                    40:f8:e8:5b:7e:46:41:ae:b2:3d:6c:d7:58:5c:1d:
                    16:54:49:f9:86:fd:1c:85:6c:57:9e:43:f5:fd:fe:
                    53:df:e7:c8:5a:dc:f2:33:42:98:f6:10:e3:11:83:
                    2d:fd:c8:2c:58:93:1e:43:ae:5a:c2:fa:28:80:90:
                    35:b3:2c:1d:80:bc:ae:3b:79:18:a1:97:b8:04:f0:
                    86:99:f7:bf:fa:b3:a6:7d:3d:38:e7:5d:8e:15:ec:
                    49:fb:7f:dc:7e:30:bf:97:c8:d7:41:e9:33:2b:ab:
                    36:a5:13:98:a5:00:e5:8f:cb:67:ed:47:c5:5d:a5:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:22:18:CA:C8:2C:18:E0:C9:28:AF:A8:D1:0C:FD:21:DD:DF:0D
            X509v3 Authority Key Identifier:
                keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:92:c1:1c:4a:ae:4f:43:73:e4:93:5e:52:5d:7c:a7:a1:81:
         47:42:c0:91:a4:0f:c2:99:3e:93:d5:f9:2e:cd:7b:ee:8a:79:
         6c:1a:2f:c8:31:fb:0b:47:71:a2:c5:1e:39:80:ce:f5:58:74:
         40:10:e1:26:d4:12:02:98:5f:24:54:f9:b8:b5:69:54:82:b5:
         1c:dc:7e:d7:0c:a2:08:a5:75:d9:6c:97:fb:c5:95:f1:3c:0f:
         b0:41:66:b7:c5:5d:94:b3:4f:cc:db:49:9c:52:a3:06:f6:fc:
         f0:f2:b8:18:00:9a:50:1a:37:f4:21:40:36:49:66:52:eb:c3:
         36:2d:65:5e:90:ff:aa:1f:41:8b:66:50:e2:5a:83:0c:c5:ba:
         d9:13:e4:50:71:c2:41:f6:a8:a4:f3:fe:12:33:25:45:e5:7e:
         50:b7:da:4b:ec:13:50:5b:f6:ee:ed:29:42:78:4c:83:bb:6e:
         6e:79:6b:f6:e8:32:66:71:af:70:d6:0d:8a:65:c2:ba:15:d9:
         48:b7:45:f8:c8:8e:e1:f5:08:21:c5:d2:55:81:2f:ac:1b:4d:
         65:eb:89:42:81:65:9a:d3:37:d2:75:ab:74:6f:70:e2:fc:04:
         4a:90:66:41:54:4e:08:1e:e7:bc:49:6d:8a:57:a2:46:8d:10:
         15:b1:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:06 2025 by rpki-client