Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
File:                     _uXfTWBHvAq-eZp3LAhSusWN9Dg.mft (raw, json)
Hash identifier:          GcyOj+R22HoWHIOsoV1ywY+IrwC/QGKxpog7x8c3/qU=
Subject key identifier:   39:D0:B8:2E:2A:8E:00:C7:FC:BC:13:94:1B:DA:D3:A9:10:46:CA:91
Authority key identifier: FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38
Certificate issuer:       /CN=fee5df4d6047bc0abe799a772c0852bac58df438
Certificate serial:       0198D629815E55DEB16DD899571C24906BEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
Manifest number:          21
Signing time:             Sat 23 Aug 2025 09:01:40 +0000
Manifest this update:     Sat 23 Aug 2025 09:01:40 +0000
Manifest next update:     Sun 24 Aug 2025 09:01:40 +0000
Files and hashes:         1: _uXfTWBHvAq-eZp3LAhSusWN9Dg.crl (hash: O7lZxM4yn/hJMvfAnU5GVafzHxEtbHrOZ6h5x4Nj9YI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:29:81:5e:55:de:b1:6d:d8:99:57:1c:24:90:6b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fee5df4d6047bc0abe799a772c0852bac58df438
        Validity
            Not Before: Aug 23 09:01:40 2025 GMT
            Not After : Aug 24 09:01:40 2025 GMT
        Subject: CN=39d0b82e2a8e00c7fcbc13941bdad3a91046ca91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:7d:f0:ca:9e:50:d1:12:3e:0f:30:04:e3:
                    9f:be:d0:13:b1:f4:e7:5b:31:ac:90:d7:44:fe:61:
                    9a:62:ec:81:db:10:3e:a6:23:d4:0b:d5:fd:7d:18:
                    d7:5b:15:4d:0a:50:21:1f:51:71:e6:4d:d7:b6:cd:
                    44:a5:4c:42:56:4f:d4:c5:13:0f:e4:94:13:e0:83:
                    49:0d:56:16:48:95:5f:09:c0:a4:38:68:cb:67:3a:
                    e4:ee:62:56:94:17:e2:82:b3:b9:13:87:a4:30:8b:
                    96:88:ba:ea:88:68:17:15:24:f1:84:26:0f:ac:f2:
                    a4:29:fe:ae:3e:30:e2:8b:f4:d3:27:d3:80:8c:65:
                    2a:60:86:4e:ed:5b:47:00:6f:9d:b0:53:1a:e2:25:
                    6b:c6:a4:40:7a:98:c0:cf:26:4f:cc:cc:28:55:16:
                    18:a3:78:95:25:8c:27:6d:9f:2c:3e:a8:41:73:33:
                    97:75:c4:52:9c:80:17:21:80:bf:d7:50:40:62:99:
                    56:29:67:de:53:0f:39:c4:b4:67:65:ce:8c:e2:55:
                    98:01:ba:6a:e6:1f:53:5f:a7:1b:91:66:7f:ad:03:
                    50:97:37:2d:f6:e4:4f:21:d3:d9:cf:cc:e4:6e:67:
                    5b:ec:cf:b8:a3:d3:93:c7:83:1e:05:34:b4:b9:ee:
                    b6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:B8:2E:2A:8E:00:C7:FC:BC:13:94:1B:DA:D3:A9:10:46:CA:91
            X509v3 Authority Key Identifier:
                keyid:FE:E5:DF:4D:60:47:BC:0A:BE:79:9A:77:2C:08:52:BA:C5:8D:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_uXfTWBHvAq-eZp3LAhSusWN9Dg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/931702-c2dc-409e-b3ec-f3ba742d5040/1/_uXfTWBHvAq-eZp3LAhSusWN9Dg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1d:4e:b7:cf:b7:2f:8c:10:3a:bd:cf:9b:01:f0:94:8c:77:
         d5:30:3b:07:77:04:39:6d:5a:a6:43:02:df:af:42:4f:f8:03:
         4c:a0:19:0b:d7:de:85:c3:75:5e:df:fe:d6:8f:3e:fa:4e:26:
         44:f2:e1:72:d2:bb:c3:17:b4:88:85:94:52:c1:0c:43:02:4a:
         a8:be:da:43:aa:01:eb:02:3b:b8:3f:95:7c:67:c3:b8:84:4c:
         b8:d3:7d:05:41:34:81:17:c8:cf:26:bd:45:65:d8:76:fa:64:
         c2:be:40:02:86:b4:84:8a:3f:29:42:78:05:86:3d:61:d5:0c:
         08:ce:a1:b0:4c:af:ec:e7:69:24:25:fd:09:67:a1:49:d9:5a:
         a0:a9:63:3d:9e:6d:07:59:15:60:61:3d:a7:24:39:6a:e6:1a:
         6c:da:a6:d9:94:d4:8a:d3:a6:73:de:6c:5d:d4:bb:79:76:7d:
         3c:d3:e3:1a:e0:77:06:09:bd:ea:45:82:2b:10:56:b7:4b:b0:
         16:c9:27:a3:78:bb:99:d6:74:87:b4:6d:2f:21:00:17:55:d8:
         a3:41:2b:a0:df:26:39:34:4f:28:6b:02:d1:96:8f:d2:89:ff:
         f4:7b:63:28:c9:a4:d3:60:68:d3:29:67:4e:17:00:72:bb:f4:
         e5:82:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:08 2025 by rpki-client