Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          VIWAN7IOmNTW+ZS4fa2vkUxnNebTK8bgpmWCEz1TmHE=
Subject key identifier:   12:96:ED:78:6F:63:05:66:7A:52:2B:35:0E:A4:55:71:27:95:0C:C6
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       0198D5F18537B0C4913843FC76ABCDD8987E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          05A9
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: XcCSD7GpfPuqrMqa+uy7O2QuCTForeFsrtOR3v9PczE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:85:37:b0:c4:91:38:43:fc:76:ab:cd:d8:98:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=1296ed786f6305667a522b350ea4557127950cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:f9:41:4f:65:be:9b:1a:68:7c:44:8b:67:
                    d1:67:be:b4:f4:d0:39:e9:d8:da:76:78:5a:64:ad:
                    de:42:7a:5d:a4:df:cf:6c:ff:7c:df:94:28:41:a6:
                    24:bd:ca:b7:9d:32:e1:9c:f7:3e:ba:82:fa:f3:47:
                    ae:9b:4e:e1:1c:18:92:4c:6e:99:a1:7f:c2:cc:2b:
                    d7:13:b5:5e:de:4b:35:c2:74:b7:4b:68:7e:45:63:
                    05:66:0a:3f:ff:23:f5:76:e1:41:e3:4d:a2:83:1e:
                    60:00:3c:a7:72:d1:34:91:ab:54:07:79:c4:56:ff:
                    31:ce:fd:19:08:c3:33:24:d5:7f:05:16:3c:98:ba:
                    fb:47:ee:34:30:e6:bb:a9:e7:28:1d:82:c8:4c:fc:
                    36:b3:24:92:36:f3:5e:e9:0b:e2:fb:2b:c0:2c:03:
                    1a:26:d9:fb:9e:97:6e:98:27:a4:e6:63:98:16:cf:
                    fc:b3:d3:c3:25:8b:12:4e:52:18:74:c8:36:dc:36:
                    de:4f:d3:51:a4:48:03:1f:7d:fc:64:d1:19:69:3e:
                    ff:cd:bc:7f:c0:81:0d:01:8f:6c:d2:ac:ba:9a:98:
                    7e:9a:c9:56:ec:9f:c5:dd:93:1c:4b:9e:b1:44:8e:
                    bf:22:c4:50:c7:d7:64:ff:c8:99:7b:7e:a2:e6:22:
                    39:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:96:ED:78:6F:63:05:66:7A:52:2B:35:0E:A4:55:71:27:95:0C:C6
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:11:fb:9c:1b:e8:0c:b1:17:ea:1a:c8:f7:06:7d:10:6c:13:
         6c:5e:e0:d5:a0:55:b7:13:3a:c0:73:a0:61:ea:50:7d:83:6d:
         4e:57:14:6b:c5:33:a8:f2:af:86:87:46:7f:a8:68:a9:c4:c3:
         b6:9b:7a:5f:74:e6:ff:c4:e4:01:66:7f:f1:dd:98:84:c2:4c:
         4a:62:c8:52:d6:72:41:21:a8:24:e7:43:76:ff:a3:d9:1f:f6:
         44:3b:ae:25:f0:9a:57:c8:d9:21:f8:f9:a0:07:38:5e:c4:20:
         b3:e1:50:1e:c8:ee:28:09:0c:c9:0e:d8:80:c4:0d:ad:ff:f3:
         92:ca:29:8b:0a:a8:f9:ef:5b:43:31:73:57:fa:de:62:10:9b:
         f8:e4:67:e4:fa:3e:54:78:d7:b0:d2:11:03:a9:ee:22:be:7f:
         f1:dc:17:b5:80:c3:a7:b8:8f:ed:50:45:d5:a3:1f:8c:ac:e0:
         0f:02:b8:33:49:1e:fe:ff:34:6b:32:01:eb:77:08:09:3b:ff:
         3f:b9:21:e9:5e:d0:e5:0a:58:fd:7d:bc:02:21:b7:33:0f:30:
         16:ff:2a:37:23:67:c9:0d:94:f3:83:4d:16:ed:cb:fd:f6:f9:
         b3:8d:a1:5c:67:0e:b1:2e:3a:1b:53:2e:26:4b:b7:4e:35:89:
         e3:a0:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:29 2025 by rpki-client