Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File:                     XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier:          LCEEUZZez8/6zJw6APJf+LI5ksN/XonWj064Y54aGDA=
Subject key identifier:   B6:09:54:D0:E6:B1:F7:71:BA:C6:CB:6F:0D:16:88:09:8E:C3:88:41
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer:       /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial:       0198D6CD61E2F9EC62DE795487460E5FD681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number:          0599
Signing time:             Sat 23 Aug 2025 12:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:40 +0000
Files and hashes:         1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: bIgW13sivlS1p6TFv/zQVkYEpwIzLxoEUJ8FIFArUfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:61:e2:f9:ec:62:de:79:54:87:46:0e:5f:d6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
        Validity
            Not Before: Aug 23 12:00:40 2025 GMT
            Not After : Aug 24 12:00:40 2025 GMT
        Subject: CN=b60954d0e6b1f771bac6cb6f0d1688098ec38841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:c9:24:87:d2:2a:8d:4e:a7:f3:b4:cf:de:
                    b1:a2:87:db:99:54:99:7b:e5:93:fd:63:ca:52:e2:
                    3c:30:cc:17:e6:7a:aa:92:9a:77:a9:c2:75:88:a7:
                    e4:70:f7:66:16:4d:02:c4:1e:a1:ee:b2:a5:f2:e9:
                    82:9e:db:2c:b3:1e:70:2a:20:69:3b:b4:b3:46:30:
                    e6:b8:bb:a0:da:86:6d:17:36:c8:9b:aa:e6:ae:34:
                    0d:73:e3:d9:3b:eb:84:15:ba:12:0f:51:13:6d:04:
                    2a:57:07:37:b9:1e:62:82:5e:76:89:46:43:59:38:
                    99:97:42:4a:f2:c2:f3:cd:cd:bf:c4:58:99:e0:4c:
                    21:c7:1c:58:c3:f2:ef:a3:17:a7:d9:00:a1:35:26:
                    8b:db:4b:f7:ec:a6:a7:6c:c7:a9:3d:2f:48:e0:f7:
                    e9:99:b0:dd:66:02:5d:7a:e3:77:da:8b:a4:b7:c9:
                    9a:b3:a8:e5:79:d4:fb:5d:ac:05:87:d5:f2:43:18:
                    0f:78:d1:40:66:e4:83:9c:3f:11:60:be:a5:e2:2f:
                    05:6e:7c:78:6b:68:0c:a8:93:4b:67:52:ec:bc:85:
                    d3:5b:9a:d5:18:00:34:86:06:e4:b0:44:cc:68:db:
                    52:11:db:00:a2:92:dd:76:16:92:35:7e:e5:fc:ad:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:09:54:D0:E6:B1:F7:71:BA:C6:CB:6F:0D:16:88:09:8E:C3:88:41
            X509v3 Authority Key Identifier:
                keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:38:ea:25:c1:09:7f:ba:c4:c0:41:73:20:7e:cc:7c:ad:f6:
         e3:68:f8:b6:21:c7:4c:56:ba:9c:c1:3b:5f:09:91:bd:55:d3:
         fc:dd:a1:f7:c3:72:5b:56:a1:b8:18:09:99:d0:9f:bf:87:c9:
         17:e5:00:13:18:a9:3d:c3:9f:d4:7b:49:42:7d:27:dc:71:65:
         a7:dd:35:1c:3e:ed:dd:f5:07:ad:9e:a0:b7:aa:db:cb:7f:3c:
         4a:bb:59:36:eb:c9:bd:d5:cf:88:d5:a3:28:40:68:e3:76:7f:
         b3:a8:aa:ed:40:b4:78:38:c8:a7:91:bf:3b:1f:ff:fc:1e:db:
         18:03:9e:7f:3d:7c:fe:c3:37:4d:95:8a:d2:fa:59:64:22:ad:
         32:c2:f4:c2:f4:9c:de:e6:64:06:3f:8a:12:69:43:e6:31:e1:
         74:c8:b6:27:74:90:fe:9d:38:b7:d4:a9:02:83:36:6c:18:eb:
         ba:21:0c:31:70:75:0d:04:9c:06:e0:63:e2:a4:91:47:a1:1c:
         36:ca:29:aa:33:3c:cf:53:b7:6f:ad:6e:74:64:37:62:83:1f:
         91:f9:53:95:d3:98:2f:85:65:9a:a6:b6:8a:c4:8b:4c:9a:83:
         ea:4c:be:f3:ae:c7:ea:65:44:75:79:9b:6f:72:61:30:24:71:
         e6:d1:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:15:30 2025 by rpki-client