Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
File:                     XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft (raw, json)
Hash identifier:          Nue9l9FvmaHGkG+QQil8yN/TV2Pef2DDVJAw2q6yuhw=
Subject key identifier:   A2:47:61:7C:2D:B6:5C:88:8C:3C:B5:F9:5A:C2:26:02:6E:8C:D7:D2
Authority key identifier: 5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B
Certificate issuer:       /CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
Certificate serial:       0198D8512411B8F5ACDCD4B694F12440C81B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 19:04:12 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:12 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:12 +0000
Files and hashes:         1: XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl (hash: 8uZtuWGpjnmZzu/aHKMaqi34a4BHfa+XMCg7Et/HEYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:24:11:b8:f5:ac:dc:d4:b6:94:f1:24:40:c8:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c344a1ac0cbfc40c75a0cfc7bec96c7c35bd27b
        Validity
            Not Before: Aug 23 19:04:12 2025 GMT
            Not After : Aug 24 19:04:12 2025 GMT
        Subject: CN=a247617c2db65c888c3cb5f95ac226026e8cd7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:2c:fb:a4:13:01:57:9e:56:38:c3:03:06:
                    05:05:04:fc:0e:cb:57:f9:23:22:ea:2f:7b:f5:bc:
                    b5:18:fe:66:88:83:71:50:ee:ba:8a:a7:f8:47:7f:
                    06:30:bd:18:25:3a:5a:7a:16:ad:e1:53:45:db:92:
                    fe:2e:07:d0:30:ea:ed:e6:2e:c4:ad:f5:c0:30:03:
                    f6:84:ea:8d:20:d3:07:58:3c:41:73:b0:f6:e2:a5:
                    aa:f7:5a:80:36:d7:b6:97:5d:81:67:02:45:74:b5:
                    c9:e0:2d:75:56:96:dd:f8:3f:7a:07:51:dd:76:ce:
                    6c:9f:a5:89:5a:d3:37:42:e2:f3:58:59:29:04:7a:
                    c6:99:a3:64:51:e4:b1:fa:e0:9c:fc:1d:3c:b5:02:
                    1b:3c:2e:cc:c6:24:c8:a8:ec:da:79:5e:50:04:4c:
                    5c:0c:5e:a5:d2:10:ee:42:60:d0:ca:55:04:20:e8:
                    45:3b:8d:97:d6:81:a1:bb:7d:f7:01:15:5a:e9:8f:
                    08:63:c4:66:14:e4:bc:76:f8:91:01:87:71:bf:18:
                    85:35:a7:11:57:96:71:74:ee:05:8d:9d:d3:f2:df:
                    2b:11:d8:31:ed:66:76:a9:23:06:3f:78:c0:8e:65:
                    8c:a5:b2:e0:12:42:0b:c1:d5:e0:74:39:bb:97:77:
                    05:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:61:7C:2D:B6:5C:88:8C:3C:B5:F9:5A:C2:26:02:6E:8C:D7:D2
            X509v3 Authority Key Identifier:
                keyid:5C:34:4A:1A:C0:CB:FC:40:C7:5A:0C:FC:7B:EC:96:C7:C3:5B:D2:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329ab8-b1d9-4f9f-a9c8-cd18510edcdf/1/XDRKGsDL_EDHWgz8e-yWx8Nb0ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:81:91:a7:5d:c8:39:fb:8c:7a:59:c7:4f:9f:ee:3d:65:
         16:e1:2c:87:e8:74:c7:bb:67:bb:79:e7:fe:f4:11:9d:0e:6a:
         ed:9e:e5:2b:86:0f:b7:e9:6e:8e:b4:db:64:cc:cf:d8:12:01:
         54:61:e4:94:ec:78:18:7d:e5:f9:a2:06:e7:09:85:83:76:e3:
         2e:fc:a5:ce:77:c4:bb:93:19:c8:d9:17:d9:0c:c4:9b:ed:f2:
         06:67:ce:6c:08:91:82:bc:b4:9c:f7:bb:f1:e9:5c:04:d1:72:
         58:2c:5f:68:a2:e4:df:01:ab:c4:35:9e:a5:59:d9:52:c7:53:
         c5:87:bd:01:70:fb:42:1b:f7:3b:f6:da:e1:0e:3f:29:88:f3:
         f3:b8:b8:dc:5e:d0:93:b2:37:b4:a5:3a:6e:c8:d4:94:50:c6:
         44:0e:b3:c8:d4:9d:75:c6:47:42:a2:91:60:27:75:4d:67:5e:
         04:eb:a5:ac:79:97:8c:2b:22:34:ca:ef:b9:8f:fc:a5:db:bb:
         58:38:38:e0:e3:8a:35:9a:5a:cd:11:b2:c5:c8:c2:59:1d:50:
         d1:8d:2c:c2:f8:6a:1d:d7:32:09:6d:07:c9:00:2a:9e:60:c6:
         00:40:4f:42:66:be:32:ef:e3:3e:15:b8:f3:72:e5:09:bc:8e:
         d5:e9:cf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----