Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
File:                     rCRVsahZvE1mGBdQVfDsiWB_BS0.mft (raw, json)
Hash identifier:          mPl6G098TeHP9wS3248jD/u7VZl1ubZ9EdMC4O1Kb3Y=
Subject key identifier:   4D:C4:53:03:9C:00:37:D7:C1:3B:C1:DB:9E:89:41:23:32:60:CE:D9
Authority key identifier: AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D
Certificate issuer:       /CN=ac2455b1a859bc4d6618175055f0ec89607f052d
Certificate serial:       0198D5BC0941677483C0EEDDAEDB602A7D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
Manifest number:          1387
Signing time:             Sat 23 Aug 2025 07:02:06 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:06 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:06 +0000
Files and hashes:         1: rCRVsahZvE1mGBdQVfDsiWB_BS0.crl (hash: 6edc+3WcEv/oPiRIY9g2REw9Ji96DUd5/2vZcTNJeJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:09:41:67:74:83:c0:ee:dd:ae:db:60:2a:7d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2455b1a859bc4d6618175055f0ec89607f052d
        Validity
            Not Before: Aug 23 07:02:06 2025 GMT
            Not After : Aug 24 07:02:06 2025 GMT
        Subject: CN=4dc453039c0037d7c13bc1db9e8941233260ced9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:78:45:3f:19:aa:e0:6f:29:cf:eb:16:96:
                    f1:fd:20:6c:c8:29:ad:16:c4:08:b4:85:8b:49:43:
                    4e:0d:5d:aa:24:59:a1:74:08:40:81:c0:d8:b3:92:
                    38:52:6b:16:74:26:e1:c7:72:58:b6:cf:a4:fb:c4:
                    e7:f8:70:73:c3:f9:2f:6f:ba:67:73:52:d9:07:e9:
                    80:26:9b:69:44:fb:6f:ad:23:6f:f1:96:4f:40:5c:
                    3d:bf:f2:d5:f5:40:0d:52:b5:95:1b:1f:62:48:95:
                    00:d7:b3:c1:d1:71:6b:19:ba:96:04:7d:e3:13:93:
                    57:d0:9e:44:2d:68:91:99:da:60:92:1d:53:61:83:
                    08:de:73:cb:98:9e:74:68:63:eb:b5:8d:e8:7e:dc:
                    41:fc:64:c0:a8:d5:7b:6d:c0:fa:db:78:b0:ef:61:
                    68:d1:b8:92:db:2b:54:5f:7b:50:06:3e:ef:83:63:
                    e1:63:b0:9a:61:7b:63:75:de:7c:9e:78:8b:91:4a:
                    41:da:68:f7:f4:a3:88:31:77:c8:47:fa:74:77:d8:
                    4a:a9:a7:c7:d4:6d:f0:cf:e8:61:27:b5:ab:99:e7:
                    9d:b2:31:39:dc:9d:12:04:3b:80:1d:fa:0f:40:a2:
                    86:09:c7:7b:04:4a:07:79:e8:d3:9f:6f:00:be:05:
                    44:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:53:03:9C:00:37:D7:C1:3B:C1:DB:9E:89:41:23:32:60:CE:D9
            X509v3 Authority Key Identifier:
                keyid:AC:24:55:B1:A8:59:BC:4D:66:18:17:50:55:F0:EC:89:60:7F:05:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCRVsahZvE1mGBdQVfDsiWB_BS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/51d781-c155-4297-b0b7-c718361d4374/1/rCRVsahZvE1mGBdQVfDsiWB_BS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3c:30:02:1b:0d:59:91:a1:00:93:0b:a1:6e:31:a1:cf:8d:
         d9:dc:4e:01:70:d5:e5:0d:b6:80:65:de:a2:2d:39:37:fa:e8:
         5e:31:9e:cd:7d:8b:10:64:66:09:21:f0:ba:8d:ed:3b:6d:af:
         cc:43:62:5f:35:09:b6:70:23:e3:3c:09:ae:74:04:d5:b0:00:
         bf:df:32:30:ea:f2:cc:43:e0:a5:02:10:b2:63:1d:8f:92:21:
         09:a2:60:6f:c2:8f:46:11:ba:68:8d:04:4e:5d:e0:af:2e:1a:
         cf:0b:87:6d:66:fb:ba:a5:04:b6:61:fd:f3:d6:c7:72:bd:d5:
         6b:41:35:f0:1e:6a:d5:66:b8:64:b8:7f:d2:84:b7:e7:18:4d:
         1b:f8:2b:96:35:88:81:4c:37:ed:f7:cf:94:d7:e7:86:1c:cb:
         98:88:51:a9:1e:c3:2e:8e:23:4d:c1:c6:13:b4:51:d1:c2:18:
         36:50:e2:94:6b:e8:42:6b:e8:c9:bc:18:c6:00:0a:58:83:fc:
         cb:6f:6e:c8:41:f0:13:14:a5:cf:97:83:7b:58:23:90:66:72:
         1f:ed:2b:56:05:8a:8f:e7:cb:33:66:cd:99:34:2d:26:f9:04:
         87:f0:a9:10:70:ed:a8:52:9c:70:58:c4:26:c5:ce:bc:0b:9c:
         a4:8c:73:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:36 2025 by rpki-client