Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          a+cQPSBGdHSi7FHVN2T8tou5hWeqIW4whq9XUTeWYr8=
Subject key identifier:   1B:76:48:FE:75:10:AD:48:24:BF:8E:D3:56:92:4D:31:0D:94:AE:A9
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       0198D51579A87B3CE21F9BDD87616633042A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          1544
Signing time:             Sat 23 Aug 2025 04:00:11 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:11 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:11 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: fY25YDsOmKnRKiD0DtIRV76Tn7zX50XPKGILXcTy4X8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:79:a8:7b:3c:e2:1f:9b:dd:87:61:66:33:04:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: Aug 23 04:00:11 2025 GMT
            Not After : Aug 24 04:00:11 2025 GMT
        Subject: CN=1b7648fe7510ad4824bf8ed356924d310d94aea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:82:4a:f8:60:55:10:17:fc:12:86:bf:2e:
                    48:fe:07:db:11:3e:01:07:59:57:97:b5:c1:05:23:
                    f9:7b:a2:e5:bf:d0:30:bd:67:7b:b4:51:c2:af:8c:
                    b9:07:89:88:d1:95:26:6b:5c:14:a4:ef:b4:a6:ca:
                    c0:d5:18:fd:8b:7b:cc:a1:02:b5:b9:68:4f:a9:00:
                    06:13:26:b7:14:26:5b:57:75:7f:c5:e5:79:11:73:
                    66:85:f4:7c:99:ca:9f:95:15:96:14:e8:40:74:d2:
                    2a:65:dd:29:41:53:71:8b:dd:d2:49:44:84:c9:aa:
                    09:0b:4d:33:79:9f:0b:fd:9c:d1:18:63:d5:f0:e9:
                    63:e3:67:83:f6:2e:7d:12:41:5f:e0:c1:f9:31:e9:
                    20:ba:8f:46:db:36:0f:b5:21:ea:e6:44:56:62:a3:
                    8b:59:ab:a8:fc:5d:50:0f:f6:3f:55:ce:ef:3c:24:
                    51:f5:c8:5b:60:bb:07:17:7a:07:37:68:2f:41:ac:
                    b8:11:a9:18:b2:1e:90:fe:90:f0:41:0c:41:41:de:
                    78:b6:bd:dd:7e:61:a8:86:0c:4c:e5:16:b6:49:41:
                    55:a3:f2:28:60:28:ed:8e:ba:32:d4:1a:95:cf:c6:
                    08:b1:19:da:7c:0e:66:a4:d0:31:7c:64:08:a2:05:
                    da:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:76:48:FE:75:10:AD:48:24:BF:8E:D3:56:92:4D:31:0D:94:AE:A9
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:22:fd:55:a4:ff:7d:b0:6a:06:89:f3:4c:18:d1:b3:46:66:
         29:17:ba:4d:19:39:fd:ba:c0:4e:e4:99:35:6f:ae:85:86:b9:
         e7:cd:c3:36:3f:70:8c:c0:36:ec:bd:fe:3e:f6:d1:25:39:c2:
         e4:2e:0b:8c:63:87:3e:f6:f8:6b:8d:f0:bf:83:cd:4a:02:12:
         3d:4f:b6:28:3a:de:a1:3f:25:39:0c:aa:a7:29:a5:b7:e6:f4:
         44:92:77:d4:e8:4a:4b:66:bc:4d:2b:6c:c9:c1:aa:d8:b0:52:
         02:74:21:52:ef:34:cf:75:11:ff:74:1d:3d:d3:0a:1a:e3:9c:
         18:29:3b:cf:88:64:02:25:4f:f4:bd:43:5a:c1:60:25:81:87:
         87:48:e9:45:f0:3a:36:ba:bc:5c:66:bd:96:7f:ef:cf:2e:b8:
         34:94:a4:7c:c4:38:fc:01:0c:42:c9:e0:0f:d2:48:f0:17:f0:
         ed:ea:a4:33:27:4b:2c:67:12:38:43:0d:d7:1b:b0:a9:2f:f1:
         de:6a:54:25:c0:ff:67:21:e0:2e:14:2a:44:a6:d6:06:cc:7a:
         38:61:95:33:de:25:c1:ae:77:80:77:e3:dd:4f:66:0c:79:62:
         b7:5f:78:8c:4d:72:af:9c:96:67:9f:a4:74:26:11:94:4a:ba:
         06:95:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:29:06 2025 by rpki-client