Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          fZ8Vhut+rciEuwU2L3unEAPirfHqEe4OinGobjSwihM=
Subject key identifier:   50:39:0D:F0:04:92:FE:31:21:0B:3C:BB:5B:F5:31:2E:81:46:6E:58
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       0198D4E0C763ECC6CCED4BE007953C697B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          15D8
Signing time:             Sat 23 Aug 2025 03:02:37 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:37 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:37 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: Cw0DmAfFvS2YDZ821DOY45a03ctVjRlrJJ4MYdLz3qs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c7:63:ec:c6:cc:ed:4b:e0:07:95:3c:69:7b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: Aug 23 03:02:37 2025 GMT
            Not After : Aug 24 03:02:37 2025 GMT
        Subject: CN=50390df00492fe31210b3cbb5bf5312e81466e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:31:81:d4:f9:dc:8d:2e:bd:bb:a6:15:fb:
                    ba:b7:24:5c:42:27:13:cc:43:86:57:c6:2e:0d:95:
                    ff:94:5f:6a:66:c0:b8:9a:0c:e7:8f:fe:ad:db:e3:
                    95:6a:c5:75:1e:fd:65:77:e6:d3:3f:aa:b3:69:76:
                    c2:7a:41:a0:df:b4:51:09:ff:e5:20:a7:4e:75:ea:
                    3a:e9:a7:88:41:78:1c:3d:a5:05:9f:97:b9:7f:c7:
                    f0:47:61:98:64:57:35:5a:45:a7:5f:8e:43:22:0a:
                    9b:38:b1:f0:f8:3e:7e:8f:72:a5:57:d7:d8:f1:0a:
                    66:5e:fa:9d:f9:d6:3c:51:19:64:fa:ec:7a:f5:4d:
                    ea:fa:b5:be:5a:2f:ed:91:c9:68:f3:b7:1c:03:bc:
                    44:3c:cc:c3:38:3a:0d:e0:55:39:0f:ca:73:2c:82:
                    5a:b1:d6:17:df:45:20:cf:b2:85:bd:35:8c:ea:95:
                    36:c6:f7:f8:cd:26:a8:41:be:12:24:de:cf:ba:14:
                    b3:b9:bc:66:b1:9a:82:ea:f4:23:dd:c9:ed:b7:9a:
                    88:67:d7:69:c5:6f:37:6c:ca:a5:9e:a2:f0:5e:25:
                    d3:c4:7b:5a:39:c0:2f:15:ea:cd:49:0e:59:6b:a7:
                    b0:62:63:05:2b:ac:0d:32:98:42:32:f0:00:d6:12:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:39:0D:F0:04:92:FE:31:21:0B:3C:BB:5B:F5:31:2E:81:46:6E:58
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:c4:45:56:71:9b:80:97:4a:46:87:55:d7:6a:7d:7d:be:
         eb:74:ff:a5:d7:4c:e5:c3:46:df:38:c3:2e:0e:9a:b6:3d:62:
         42:ff:8e:a4:f6:1d:fe:d4:8b:31:32:e3:30:1b:77:2c:6b:c8:
         2d:68:f7:b0:7c:f1:57:8d:b2:87:66:3e:50:d7:55:15:94:ea:
         7a:54:42:0e:78:a1:7c:48:2c:07:58:13:cb:9a:2b:bb:82:f1:
         9e:63:e3:82:56:ae:90:f4:b1:a9:0b:a9:e4:c1:05:b3:42:c1:
         80:9d:e1:91:d2:07:62:d7:37:b7:a5:f2:aa:04:06:b9:89:07:
         e1:8c:35:26:26:40:18:15:62:2a:e9:94:10:39:5e:8b:54:2c:
         e2:bb:b4:fe:a5:69:a2:35:d8:39:f4:ad:c7:14:8b:0d:66:4a:
         7b:1c:9f:69:24:88:d5:26:cf:df:96:25:ac:46:a2:f8:bc:15:
         11:2f:da:03:49:d6:64:34:99:00:f9:0e:a8:41:1d:88:8c:af:
         83:98:81:80:f6:8d:d7:01:90:46:72:ac:20:bb:c9:36:35:8f:
         90:b3:7d:74:42:76:fb:46:65:0d:df:e8:80:49:01:7f:ec:d0:
         8d:21:49:52:49:05:14:77:94:87:35:53:d8:1e:c2:3a:a2:c6:
         0b:57:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:10 2025 by rpki-client