Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
File:                     ACY1rIzpE_p8zV123YYuJIxxy_M.mft (raw, json)
Hash identifier:          BY7Bf6xZmwwMxtk5EQ8pGeuMa4tOqBwrmeDmA0OlYhQ=
Subject key identifier:   E9:4E:F7:E4:F3:A5:03:4F:7D:9B:DA:A0:F2:B4:47:EF:DE:24:34:01
Authority key identifier: 00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3
Certificate issuer:       /CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
Certificate serial:       0198D4E0A18A2E14D75588127E1EA0D40581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
Manifest number:          05BA
Signing time:             Sat 23 Aug 2025 03:02:27 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:27 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:27 +0000
Files and hashes:         1: ACY1rIzpE_p8zV123YYuJIxxy_M.crl (hash: M9N6sX44I6fHl56JxSmLmLkzA4GysbdW+fSlA3qf4Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:a1:8a:2e:14:d7:55:88:12:7e:1e:a0:d4:05:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002635ac8ce913fa7ccd5d76dd862e248c71cbf3
        Validity
            Not Before: Aug 23 03:02:27 2025 GMT
            Not After : Aug 24 03:02:27 2025 GMT
        Subject: CN=e94ef7e4f3a5034f7d9bdaa0f2b447efde243401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:bc:49:6e:94:df:5b:02:dd:59:83:18:85:
                    d7:0e:92:4c:46:ac:8f:e5:ab:5b:55:c2:5c:7b:22:
                    51:6d:92:df:30:93:ee:e1:c7:9a:cd:a0:17:05:72:
                    da:2c:04:06:65:f7:07:3b:d0:ab:01:a2:d8:1c:ce:
                    f4:46:d8:42:78:87:2c:b0:e5:9c:f3:1c:b0:82:32:
                    52:ef:3d:d8:52:fe:b6:3f:17:da:0a:fe:d3:68:99:
                    b6:0f:65:ab:af:e1:a5:15:35:a2:49:bf:1b:84:14:
                    27:fb:76:84:f6:8f:43:00:cb:44:c4:32:da:49:83:
                    e8:40:80:14:11:81:b4:e1:61:6b:52:67:57:2f:10:
                    62:4d:65:3a:f4:3d:57:a7:1f:46:81:b6:6e:08:49:
                    a7:c0:b3:77:be:b3:bc:44:98:74:d3:4d:1d:92:af:
                    13:57:7a:d9:f1:57:43:fd:cc:96:a9:c4:16:90:3b:
                    6b:41:65:5a:05:96:e8:4f:b7:49:b0:3c:b3:b3:46:
                    35:d5:f2:02:a1:37:01:50:48:e2:cb:25:27:2e:2f:
                    7c:03:c3:6a:61:ae:38:a0:47:c5:40:b8:33:d7:4c:
                    49:92:ce:07:1d:2b:8a:b6:9d:ec:2c:f8:8d:68:b4:
                    b6:95:59:a4:04:6c:c5:41:e3:fe:a6:aa:cf:e0:8c:
                    6e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4E:F7:E4:F3:A5:03:4F:7D:9B:DA:A0:F2:B4:47:EF:DE:24:34:01
            X509v3 Authority Key Identifier:
                keyid:00:26:35:AC:8C:E9:13:FA:7C:CD:5D:76:DD:86:2E:24:8C:71:CB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACY1rIzpE_p8zV123YYuJIxxy_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ac0aee-9e3b-4d21-8b8f-b4e919f0825c/1/ACY1rIzpE_p8zV123YYuJIxxy_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:25:da:70:4a:e7:d0:78:e5:d5:89:e3:cc:3d:b2:f4:ea:79:
         a8:eb:17:58:9b:0e:92:d9:5b:20:4d:10:fa:79:0b:62:91:5c:
         40:e5:58:6e:77:b7:04:1b:77:86:40:82:de:eb:9a:21:9f:24:
         8f:1a:64:57:30:5f:e5:61:cf:28:f3:78:27:e9:15:5f:7e:32:
         d6:85:1d:ee:70:da:4c:3b:c3:99:42:dc:27:ce:2a:df:98:c3:
         9a:32:38:84:ba:79:b4:31:8c:df:3a:85:3e:f0:7c:da:ee:fe:
         68:08:61:50:db:95:8a:70:43:75:ab:cf:d4:17:0b:69:2c:4b:
         60:38:49:52:9c:2d:21:87:d4:6f:e5:fe:cf:b9:62:02:fd:b9:
         cb:d4:39:19:65:c3:56:ff:45:69:24:cd:32:1b:ca:1f:fe:fe:
         87:49:0b:ad:cd:d9:2b:08:b5:c9:f2:b0:07:8c:d7:29:28:8e:
         1c:c1:cf:ab:4a:38:00:21:2c:40:c4:b9:b2:34:63:83:fa:e8:
         40:58:74:61:4c:47:c0:f5:6c:e3:eb:c1:18:65:f0:4c:74:6b:
         5f:27:eb:29:ff:27:75:1f:3b:a2:e3:3f:8e:ef:2d:02:c7:1a:
         ff:48:1d:67:64:41:0b:1c:eb:d6:e9:a3:61:24:a0:9b:48:2c:
         af:c4:6a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:17 2025 by rpki-client