Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
File:                     rJvjcV48J7py7MaNHl_1yTZ30AE.mft (raw, json)
Hash identifier:          y893QcDSzUIMiT5x6Qdj18l0KxDYi/P8NoKQEy28C1s=
Subject key identifier:   1B:BD:6D:55:21:31:0E:0F:C0:04:4A:BA:AF:95:AF:D8:DF:26:B4:5D
Authority key identifier: AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01
Certificate issuer:       /CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
Certificate serial:       0198D54EA1463D6801A6551D5F9280883C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
Manifest number:          12DA
Signing time:             Sat 23 Aug 2025 05:02:36 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:36 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:36 +0000
Files and hashes:         1: rJvjcV48J7py7MaNHl_1yTZ30AE.crl (hash: 5D8QbF3d8l6amgRGAn5+29ev6tZKgDTKLFr3e2L0G2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:a1:46:3d:68:01:a6:55:1d:5f:92:80:88:3c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9be3715e3c27ba72ecc68d1e5ff5c93677d001
        Validity
            Not Before: Aug 23 05:02:36 2025 GMT
            Not After : Aug 24 05:02:36 2025 GMT
        Subject: CN=1bbd6d5521310e0fc0044abaaf95afd8df26b45d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:3c:e0:ea:eb:08:c4:8d:83:d9:cf:95:a1:
                    76:0f:76:30:8a:e8:88:67:6e:a5:41:68:61:b5:b7:
                    be:f2:51:1c:f5:6f:81:e8:46:b0:2a:05:56:ca:8b:
                    a1:b8:b9:32:4d:bd:65:fd:8c:64:cf:a5:3a:e4:75:
                    30:05:78:63:9b:17:d7:f4:13:ef:94:a3:3f:64:65:
                    52:b1:95:c6:4e:0c:d4:0b:fd:69:cc:b8:46:2a:b0:
                    6b:16:45:05:ae:37:cb:47:4c:72:5c:e2:3e:39:3b:
                    a0:d6:1f:f7:aa:ff:5f:fa:f1:dd:38:71:3b:a6:9c:
                    d5:30:8f:f0:b3:71:db:79:ee:f0:fc:49:d5:78:e4:
                    13:6c:00:0a:cc:2a:30:17:b5:f7:b7:a7:96:d3:77:
                    fd:19:47:e7:2d:ce:91:b0:2d:a2:4f:36:eb:77:81:
                    d7:03:22:48:ac:f2:80:cb:37:f2:70:05:1c:ef:ce:
                    1e:8d:0c:ef:49:ea:d5:02:7d:36:26:20:ed:d2:c0:
                    e0:a4:79:59:e3:97:6c:20:37:3c:b1:d6:87:93:2d:
                    03:10:ad:8c:ba:53:df:01:d3:7c:c4:ee:eb:06:e0:
                    01:20:4c:87:d1:e1:ef:93:62:42:a9:db:57:fb:55:
                    53:f5:f8:f3:78:b8:2d:c4:12:ce:fa:34:67:39:a1:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BD:6D:55:21:31:0E:0F:C0:04:4A:BA:AF:95:AF:D8:DF:26:B4:5D
            X509v3 Authority Key Identifier:
                keyid:AC:9B:E3:71:5E:3C:27:BA:72:EC:C6:8D:1E:5F:F5:C9:36:77:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJvjcV48J7py7MaNHl_1yTZ30AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/adfa79-2373-4bf5-836a-ca0ca67a586b/1/rJvjcV48J7py7MaNHl_1yTZ30AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:18:5c:86:0a:dc:ed:2b:d2:8d:86:2f:16:ed:b5:a0:01:f4:
         6f:16:96:29:26:65:50:92:e4:df:d3:5e:e3:5f:bc:d6:90:92:
         77:c8:68:92:e0:70:fe:5a:7d:a7:f6:ed:21:95:f3:84:c8:4b:
         e8:65:98:d0:7e:e9:f1:d4:e3:38:69:85:f7:0c:0e:fa:cf:fd:
         09:18:c3:2b:f8:18:07:c0:2c:c7:48:f4:55:c8:6c:54:25:e0:
         de:c2:a0:d2:ce:70:c7:ad:eb:b0:80:dd:38:c0:6e:e6:07:b5:
         e9:8c:40:5d:24:4a:12:a1:04:c0:fc:ed:43:1b:e2:73:49:40:
         29:25:6b:c4:a2:29:a1:70:ba:08:72:70:1c:91:84:4b:80:e7:
         88:31:c0:e3:ce:91:9a:78:80:b8:e6:23:ed:e9:7e:6c:38:ee:
         63:17:e7:df:0b:18:a4:71:10:a8:34:b0:d4:4d:37:f7:c9:34:
         70:05:2d:c9:95:bb:61:de:8d:b2:e3:8c:6e:0b:c8:b0:38:fe:
         d7:2d:93:92:a3:ad:45:0b:2e:cc:8e:cf:d5:05:97:5e:62:ac:
         2b:bc:49:f7:4c:32:90:51:ca:49:bf:74:40:73:b7:1d:15:d1:
         45:3e:ca:3c:56:e2:75:ae:04:c6:1f:0d:59:30:fa:56:29:13:
         dd:80:3d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:41 2025 by rpki-client