Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File:                     tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier:          LHvHLcT221jkJxm+/UfGmPaDBWSHOT/3Oyf6SX/GYYk=
Subject key identifier:   B1:9E:54:73:81:15:D6:12:DA:0F:D5:07:03:90:5E:FA:A3:E2:CD:36
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer:       /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial:       0198D47284E96A3AFDCB63660AF9248EF0B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number:          0E31
Signing time:             Sat 23 Aug 2025 01:02:11 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:11 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:11 +0000
Files and hashes:         1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: uh6Hq59LIFcHoupWxIJBOAOW58CodsYArFXqhhckP6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:72:84:e9:6a:3a:fd:cb:63:66:0a:f9:24:8e:f0:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
        Validity
            Not Before: Aug 23 01:02:11 2025 GMT
            Not After : Aug 24 01:02:11 2025 GMT
        Subject: CN=b19e54738115d612da0fd50703905efaa3e2cd36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:1d:3a:51:43:3c:90:8f:eb:b9:28:46:4b:
                    68:e4:27:68:ee:20:b8:ed:56:f8:81:ea:75:2b:93:
                    d3:b8:db:49:59:52:56:50:93:06:14:6b:ef:77:f5:
                    28:d1:d3:76:99:7f:b3:2e:bb:64:cc:63:c4:da:30:
                    03:13:e2:c2:7f:aa:44:51:2a:cd:72:48:84:3d:a9:
                    b2:b7:97:2b:48:dd:b4:91:5d:cb:6d:82:49:36:ef:
                    97:1e:ee:be:95:f4:22:41:b6:f3:61:b9:c8:f9:b7:
                    c0:75:7d:58:f6:e1:19:cb:32:a7:08:f0:ce:e0:c0:
                    77:03:82:08:08:e5:36:96:82:24:1b:89:82:0b:ff:
                    5a:86:11:49:40:0d:d7:30:13:c2:1e:d9:88:e8:55:
                    73:9f:0a:44:66:77:ff:11:06:21:8f:e8:97:3a:73:
                    f6:83:f7:0b:c7:39:bf:6b:bc:31:74:44:29:30:3c:
                    a2:96:b0:50:61:2f:8f:7b:58:89:4c:f7:1e:df:f1:
                    32:c5:8a:1d:ae:af:67:67:fd:b2:18:53:c8:7a:d0:
                    10:e3:fd:fb:11:34:11:b2:dd:60:bd:7c:1a:be:54:
                    ed:81:7c:b2:69:f5:a9:ee:9a:cd:5d:8e:44:e6:39:
                    ba:8b:4e:57:71:b7:81:ce:a0:7b:c9:30:44:4d:63:
                    dc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9E:54:73:81:15:D6:12:DA:0F:D5:07:03:90:5E:FA:A3:E2:CD:36
            X509v3 Authority Key Identifier:
                keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:14:5f:d7:94:ce:aa:ea:6b:b3:0b:c0:4a:a6:9e:55:44:12:
         57:80:c4:ad:b7:2b:54:a7:84:50:72:1e:88:c6:f3:bb:ea:62:
         c0:fe:14:ad:65:01:f2:e4:9d:9e:c1:7b:bc:f2:d7:26:a0:7f:
         4b:46:94:47:ae:26:f9:2a:10:c5:17:b8:17:39:af:b4:20:e5:
         0b:10:6a:d6:cb:b8:82:6a:69:3e:80:ad:a3:6a:85:b3:3e:64:
         02:76:d2:8f:4a:6d:bd:b1:a8:cb:88:28:b8:cd:15:3c:37:45:
         13:da:0e:f2:cc:ab:9d:67:d3:54:20:cb:1e:73:c7:95:f5:5f:
         dc:48:10:1d:70:b3:79:9c:cc:6e:cc:63:12:2a:04:74:0f:e2:
         1d:18:c7:83:29:36:29:c2:6f:d0:4b:72:66:87:73:c5:4e:36:
         69:4e:be:42:5a:27:13:f4:11:a4:b8:52:21:9d:f6:7a:1d:98:
         23:7d:c3:6d:1f:43:04:2e:0a:0e:87:77:57:69:60:82:3c:b1:
         c4:8b:db:fb:c2:0f:a1:a8:59:6a:89:2a:f6:d9:32:7b:db:1d:
         12:41:10:3a:ca:e1:ae:d0:99:5c:72:2a:dd:8c:1a:b5:a4:3e:
         14:d9:58:61:f5:11:80:e1:ac:54:61:2b:cc:f8:ca:86:06:88:
         b7:09:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:01 2025 by rpki-client