Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File:                     Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier:          MUQv6fX57lhFcJ57q7G73SWT1ZGhnTJ3D1nKr68lkDg=
Subject key identifier:   2D:2B:C7:AD:57:17:ED:86:19:89:20:7E:2A:E5:BE:E9:D1:A3:EE:07
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer:       /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial:       0198D4E05ACD0C7ECED12DCCFE52A7C1BA74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number:          05E5
Signing time:             Sat 23 Aug 2025 03:02:09 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:09 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:09 +0000
Files and hashes:         1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: 1jSb/QbuZdTa5MjvKVN8gFaRPlSd3clL623XCiU7Ue4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:5a:cd:0c:7e:ce:d1:2d:cc:fe:52:a7:c1:ba:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
        Validity
            Not Before: Aug 23 03:02:09 2025 GMT
            Not After : Aug 24 03:02:09 2025 GMT
        Subject: CN=2d2bc7ad5717ed861989207e2ae5bee9d1a3ee07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:21:ca:3f:a4:b4:62:d1:49:47:70:dc:79:
                    b6:2c:d9:4b:2a:55:ed:26:68:81:98:d1:4f:7b:41:
                    a7:a9:2a:45:f4:18:c5:86:97:53:8f:9e:7b:1c:b3:
                    84:26:ca:f2:b0:54:09:43:6a:eb:1f:1e:06:94:0e:
                    0b:08:aa:2d:26:c5:4d:e9:0d:15:e9:32:b1:fd:71:
                    ed:85:6f:da:04:84:99:0f:bd:40:4f:25:ec:8b:f5:
                    1d:53:54:39:17:d3:ac:8a:dc:80:24:95:2c:e9:a9:
                    9f:44:31:07:eb:5a:c3:84:3a:1c:fd:18:77:42:a7:
                    6f:9a:fd:45:c1:0e:56:68:9a:ce:92:2c:4b:50:91:
                    1e:08:21:7d:7a:d9:b9:f8:a9:f7:45:ba:05:4e:c1:
                    d6:e5:dd:9b:b1:61:77:00:2f:84:5b:c9:e6:b5:30:
                    cc:1c:32:3b:a4:c4:ff:24:7a:91:f0:e8:9a:aa:06:
                    72:a4:6b:f0:81:6c:8c:e5:2d:be:4e:7b:4f:02:c0:
                    be:b0:64:64:6d:91:a4:da:4e:7c:9b:8e:47:7c:46:
                    ca:ae:2d:c6:50:61:0c:c3:30:df:a9:80:f9:63:c9:
                    96:f5:ab:d9:25:7f:d4:86:2e:4c:8b:d6:7f:06:7a:
                    f8:3e:15:2a:42:5e:b8:53:ea:3c:bb:15:81:be:bf:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2B:C7:AD:57:17:ED:86:19:89:20:7E:2A:E5:BE:E9:D1:A3:EE:07
            X509v3 Authority Key Identifier:
                keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:7e:9c:ce:99:91:84:73:fe:95:08:85:d7:8c:2a:9d:7f:9a:
         7c:c8:9b:1f:12:9a:c5:2f:24:3d:ad:c4:fc:01:8b:c5:60:91:
         5b:f6:8f:24:bd:1a:7a:fd:b6:2b:a6:63:83:27:cc:e0:0e:c3:
         e1:4e:0c:15:ab:13:b0:c7:a5:50:b1:69:c9:97:b7:99:f0:f0:
         6f:8a:93:fd:61:5d:a7:c4:eb:cd:e7:33:db:c7:c1:ca:4f:6a:
         60:34:94:02:f6:66:52:cd:9e:de:15:e9:13:0a:fe:3e:b0:8c:
         b1:97:6a:72:c9:6f:bb:95:ac:19:6a:a8:58:c8:f4:1a:fe:fd:
         48:57:80:63:45:a2:09:7e:00:f2:38:95:2e:36:56:69:47:2b:
         41:5e:fc:a1:2b:bd:b8:67:8d:15:3f:ec:f6:f0:ba:45:a5:f4:
         6a:80:27:2f:ec:a9:1e:08:0d:5d:51:86:3c:1b:93:58:76:4c:
         b2:ae:be:1d:e8:e5:b4:6d:8f:49:9b:73:14:03:74:01:d9:3d:
         08:ab:1f:5a:ec:6e:91:6f:65:f1:1a:3e:35:23:54:59:e8:75:
         8c:40:62:7e:64:eb:3d:f7:3b:1d:af:12:ad:64:96:82:ad:81:
         6c:4c:3c:be:c9:c5:09:b4:b7:21:ea:be:37:fc:65:4e:47:a6:
         ee:66:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:10:51 2025 by rpki-client