Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
File:                     1e-BdSPHDnJw0q7lorbXJWojQiM.mft (raw, json)
Hash identifier:          vlGag5OqUMliZPezUcZyBAE62bV0W7HegMPpPaQZEvM=
Subject key identifier:   EA:D2:32:16:4D:88:6E:E8:CC:31:3B:A2:E7:D6:CA:8C:DB:81:DA:35
Authority key identifier: D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23
Certificate issuer:       /CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
Certificate serial:       0198D65F0F82CC57B83F7A88C9FDA6EB9F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
Manifest number:          02BB
Signing time:             Sat 23 Aug 2025 10:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:10 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:10 +0000
Files and hashes:         1: 1e-BdSPHDnJw0q7lorbXJWojQiM.crl (hash: K0l7T/gbJyJfL4s1ZLXzuEFuOrKP+h1aFD22JeZgHtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:0f:82:cc:57:b8:3f:7a:88:c9:fd:a6:eb:9f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5ef817523c70e7270d2aee5a2b6d7256a234223
        Validity
            Not Before: Aug 23 10:00:10 2025 GMT
            Not After : Aug 24 10:00:10 2025 GMT
        Subject: CN=ead232164d886ee8cc313ba2e7d6ca8cdb81da35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d0:2b:4e:41:89:b9:de:c2:b2:3d:7c:23:59:
                    c6:25:94:62:99:51:bf:12:b1:29:b7:37:96:cb:b0:
                    37:ff:34:51:a7:f6:5e:b5:39:9c:78:66:69:19:35:
                    ea:8c:f0:dc:6a:09:d6:d6:14:6a:ea:1f:31:70:e0:
                    ed:f9:e3:45:1c:60:ef:3a:03:9f:8d:d2:5b:5d:c0:
                    7e:66:d4:ee:5a:da:07:97:05:88:9d:04:03:6b:b2:
                    46:a2:5a:13:db:bc:bf:05:61:6a:e2:f0:e1:4e:90:
                    6f:1a:4e:89:9d:fd:da:2b:99:32:87:4e:36:0c:65:
                    77:2f:9a:c8:a9:6e:c9:81:d9:02:da:e2:40:a7:94:
                    b3:5c:9f:e7:f2:5a:7a:5a:38:61:ae:45:46:dc:cd:
                    3a:00:76:55:75:98:d2:20:34:2a:24:71:11:c0:32:
                    47:7e:fa:28:59:d2:4b:30:b9:e0:29:b2:e4:bc:78:
                    96:dd:ef:9e:7b:55:74:bd:de:96:86:74:0d:da:5e:
                    36:d4:92:25:3c:c4:eb:e0:21:cb:52:4a:67:64:17:
                    fa:e7:ef:58:4a:19:97:38:3b:6a:ca:40:33:d1:9c:
                    fd:45:f4:48:f3:03:13:33:de:0b:ff:22:9f:26:04:
                    13:f7:1b:75:53:69:f1:ef:fb:94:43:a2:2d:0c:38:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D2:32:16:4D:88:6E:E8:CC:31:3B:A2:E7:D6:CA:8C:DB:81:DA:35
            X509v3 Authority Key Identifier:
                keyid:D5:EF:81:75:23:C7:0E:72:70:D2:AE:E5:A2:B6:D7:25:6A:23:42:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e-BdSPHDnJw0q7lorbXJWojQiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/094b20-09cb-46eb-8974-4df20842e460/1/1e-BdSPHDnJw0q7lorbXJWojQiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:1f:49:84:bd:cf:38:5f:f7:cb:db:03:ea:c7:22:1b:11:
         6f:f6:24:2c:90:16:ea:75:a6:a7:c7:2c:59:57:6a:94:38:c1:
         46:d2:a3:b1:6b:b8:c0:a0:e2:f5:60:88:f7:61:aa:8b:dd:98:
         b2:65:68:b7:b9:67:b2:3f:16:ed:74:dc:99:54:2e:f6:de:76:
         c4:70:e1:d4:19:7e:77:66:29:0c:6f:87:27:2a:33:3c:10:94:
         b0:4a:93:1c:90:42:76:64:33:6b:47:2f:cd:42:59:3f:b5:73:
         d4:26:5c:df:be:a1:24:29:ef:44:64:0f:cb:a8:14:b4:6a:5a:
         74:5a:42:4b:83:1a:81:31:b6:be:bf:26:9c:97:38:7c:fc:98:
         fa:1a:85:6f:08:42:00:b2:b7:0c:2a:86:c3:f1:b0:f3:d9:8d:
         c6:61:5c:e1:2c:1c:e8:28:f8:67:fd:38:6d:9b:bd:47:14:44:
         67:25:f8:e9:68:4b:b3:32:bd:06:d6:56:63:fb:22:1f:f2:9c:
         92:45:a0:31:b0:5f:7d:de:e1:bf:99:7b:13:c0:97:c2:8e:b8:
         f4:4c:2b:6e:e3:6d:63:6a:9e:61:b1:6b:d3:88:b4:a6:86:d1:
         59:0e:ae:8d:4f:b8:fa:6d:b5:64:ca:cc:de:dd:3b:13:21:de:
         b8:8f:f5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:38 2025 by rpki-client