Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
File:                     zEaGqhpTLOSwws4IIxfiSU6BgaI.mft (raw, json)
Hash identifier:          3iLLUCLE6e55I7zhInLJ2/0lSpk3J28R6jt7Ut/dfBU=
Subject key identifier:   4C:B0:B0:B4:76:06:4A:14:F8:F3:15:E8:47:F8:A3:53:9E:3A:2E:ED
Authority key identifier: CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2
Certificate issuer:       /CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
Certificate serial:       0198D5BBCAAECEBAD02E4068696F2DFB9013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
Manifest number:          1563
Signing time:             Sat 23 Aug 2025 07:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:50 +0000
Files and hashes:         1: zEaGqhpTLOSwws4IIxfiSU6BgaI.crl (hash: 3iaHeR6lEeW8TGVnODVr4gtQtLoeUh7GJQMVxwLFEsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ca:ae:ce:ba:d0:2e:40:68:69:6f:2d:fb:90:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc4686aa1a532ce4b0c2ce082317e2494e8181a2
        Validity
            Not Before: Aug 23 07:01:50 2025 GMT
            Not After : Aug 24 07:01:50 2025 GMT
        Subject: CN=4cb0b0b476064a14f8f315e847f8a3539e3a2eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e2:09:b0:23:ef:c0:6f:fb:27:24:23:f2:1b:
                    91:77:1e:16:12:ca:78:85:73:d2:32:30:98:a2:f4:
                    5d:2b:39:65:52:1e:47:ae:b1:fc:16:dc:02:44:b8:
                    8e:81:84:fc:0a:83:9d:38:a4:7e:f5:bb:6b:47:6f:
                    38:e7:d0:ff:00:d1:21:37:3e:aa:e7:67:4b:40:f3:
                    39:2d:ae:dd:48:f2:95:37:bf:06:0c:4f:59:fa:c8:
                    0d:a1:7f:38:fb:ab:f3:2a:07:13:84:2c:c4:de:c4:
                    6c:f7:60:46:e7:1a:e6:d5:32:df:ee:9c:3d:ec:43:
                    34:37:03:e2:80:4b:d3:51:d0:27:81:e6:70:40:35:
                    6d:76:da:25:8f:ba:f5:a8:27:a5:60:28:3a:7b:24:
                    fe:e2:30:9b:97:20:73:8d:f7:23:0d:e8:f8:90:32:
                    7b:c5:4c:8e:a5:c5:46:d3:ce:13:63:fb:d7:5f:77:
                    b3:bd:a4:2d:ea:96:2d:6f:5a:6f:20:58:26:0f:b3:
                    51:16:68:6b:9d:d5:9c:b2:75:91:91:8e:25:1c:92:
                    6d:3b:da:e9:be:1f:ce:a2:a5:09:f2:73:75:d4:60:
                    97:cc:11:e2:ce:c2:26:b0:7d:c9:be:1c:15:50:59:
                    24:58:f0:73:01:33:3b:bb:eb:f2:14:d6:4e:fe:89:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B0:B0:B4:76:06:4A:14:F8:F3:15:E8:47:F8:A3:53:9E:3A:2E:ED
            X509v3 Authority Key Identifier:
                keyid:CC:46:86:AA:1A:53:2C:E4:B0:C2:CE:08:23:17:E2:49:4E:81:81:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEaGqhpTLOSwws4IIxfiSU6BgaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/493fdb-a384-470c-9ffc-61c143b1c3a4/1/zEaGqhpTLOSwws4IIxfiSU6BgaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:33:3c:f9:b8:94:6e:2d:57:46:c0:70:b8:0b:e9:45:fb:d3:
         de:32:dc:0d:6b:dc:1a:03:be:43:e2:aa:7a:91:a5:da:92:3e:
         f3:18:5a:fc:3e:5e:23:47:31:96:21:18:65:89:fb:74:db:a2:
         80:6a:52:f2:f0:ed:99:4a:55:1f:c2:2c:10:fb:68:95:4c:a0:
         78:bf:1c:81:ab:bd:59:9f:0d:05:7c:8f:76:ba:e9:1a:22:46:
         13:7f:b5:ce:22:83:c8:5f:e7:3a:a3:78:80:b1:23:1e:57:5c:
         fa:51:b5:38:f3:05:82:16:e9:f3:d5:0b:72:a9:cf:ab:e8:7e:
         f3:86:6d:ad:24:db:fe:40:d6:9b:32:fb:23:ee:04:70:9f:64:
         25:4d:c8:a0:bf:5e:e4:6c:f1:45:1d:6c:94:42:c6:67:d6:50:
         dc:dc:f7:9a:09:85:42:b7:36:97:d7:c5:e8:b7:a4:82:4b:74:
         d7:bc:ac:0a:fd:d8:be:63:c6:c3:c9:29:78:8e:22:80:17:53:
         d4:b7:a4:8e:ca:60:31:d3:9e:89:b3:92:95:2c:38:55:07:77:
         63:cc:6b:b5:90:f4:c3:09:dc:30:d0:3f:c2:b7:79:31:01:35:
         ae:1d:5a:cf:f5:80:65:27:de:52:94:07:ba:8d:70:ac:f9:49:
         c8:22:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:56:32 2025 by rpki-client