Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
File:                     xUplWNaSO-Qp2TiVMa3BAIeVJws.mft (raw, json)
Hash identifier:          iwHl8yM/HZ/BtkDAVDIR8vTD51/rIo15B7WXGv4e3q0=
Subject key identifier:   97:BE:49:BD:FE:8F:59:CF:C9:5D:BA:92:D0:61:9C:72:C7:51:1A:59
Authority key identifier: C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B
Certificate issuer:       /CN=c54a6558d6923be429d9389531adc1008795270b
Certificate serial:       0198481B61D1F59D56397D44F488F521B060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
Manifest number:          0CE0
Signing time:             Sat 26 Jul 2025 19:00:10 +0000
Manifest this update:     Sat 26 Jul 2025 19:00:10 +0000
Manifest next update:     Sun 27 Jul 2025 19:00:10 +0000
Files and hashes:         1: xUplWNaSO-Qp2TiVMa3BAIeVJws.crl (hash: egtcoMmBsr02fXjXzdIAGTnhCI0qCVizb5yePzPMZUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:1b:61:d1:f5:9d:56:39:7d:44:f4:88:f5:21:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54a6558d6923be429d9389531adc1008795270b
        Validity
            Not Before: Jul 26 19:00:10 2025 GMT
            Not After : Jul 27 19:00:10 2025 GMT
        Subject: CN=97be49bdfe8f59cfc95dba92d0619c72c7511a59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:6a:98:b0:52:27:5c:45:27:eb:ef:a1:94:
                    e5:82:d3:49:dd:f4:f5:5e:2b:57:56:d1:3e:f3:f8:
                    88:e2:72:8f:1b:a2:a7:19:77:af:d0:d9:2b:67:b6:
                    29:bb:2a:6c:8a:af:ba:e5:7f:e7:29:84:8c:4f:dd:
                    fd:5a:4f:38:63:28:52:9d:04:d5:cf:37:ca:a6:ad:
                    dd:ee:0f:78:7e:de:1b:35:9c:8a:3d:f7:84:c4:a5:
                    a6:dc:e4:90:b5:80:d6:f6:54:07:6e:15:c1:6c:e2:
                    3d:46:0c:59:77:4b:b7:65:84:f8:9c:61:6d:8e:84:
                    4d:37:1a:ff:d5:4d:94:49:e2:6f:40:14:49:2b:89:
                    f5:0b:1b:be:ef:98:a2:a5:42:c7:aa:f4:89:25:02:
                    ec:bb:8a:85:37:f3:0c:63:7a:6c:ca:06:f7:ab:4d:
                    ad:f7:09:37:bf:4f:c7:e1:74:01:27:d2:b6:6d:8d:
                    84:9e:53:0a:94:c3:61:16:0b:7e:9c:f6:3a:d6:72:
                    23:86:b6:56:2d:e1:4b:af:3c:32:20:26:bd:c6:76:
                    aa:51:8d:86:e2:48:82:45:f6:96:df:8a:ea:80:57:
                    6a:26:61:fb:80:0a:8c:6f:a0:87:9c:9e:df:57:c9:
                    85:f3:7b:2d:da:68:2d:1d:7b:65:a9:49:f9:2b:77:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:49:BD:FE:8F:59:CF:C9:5D:BA:92:D0:61:9C:72:C7:51:1A:59
            X509v3 Authority Key Identifier:
                keyid:C5:4A:65:58:D6:92:3B:E4:29:D9:38:95:31:AD:C1:00:87:95:27:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUplWNaSO-Qp2TiVMa3BAIeVJws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/658665-de3e-4c77-8bcc-ec2ed0b782b7/1/xUplWNaSO-Qp2TiVMa3BAIeVJws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:36:e4:cc:eb:94:ce:9f:85:55:40:a9:4d:11:e3:3b:98:65:
         56:5c:ee:68:c5:5e:b6:d3:2d:9d:29:6e:9a:f9:56:1f:80:d8:
         17:d1:25:20:04:18:cb:1f:a8:39:c3:3f:53:c8:68:4f:86:1e:
         18:01:05:74:4b:b4:bf:6b:a3:ea:ec:a8:89:cb:02:c6:83:39:
         2d:54:d2:24:8d:5e:39:c3:4c:60:c5:e8:27:ac:75:a5:5a:dd:
         25:1b:c6:86:84:34:f6:39:9f:73:68:c1:fe:81:4d:6a:40:ec:
         6f:eb:5d:45:22:43:2a:b0:c5:13:6e:ba:f1:b9:cf:e3:2c:91:
         38:5a:51:25:95:a0:fd:6d:a9:dd:64:ea:a5:c2:9c:86:c2:fc:
         b0:80:24:c6:0b:74:1d:4d:a1:af:b2:89:31:97:58:23:c3:60:
         2e:24:1b:0d:4a:5c:1c:69:34:9f:ab:a7:f0:d4:d8:da:6f:a0:
         17:24:bd:a7:af:02:9d:df:42:0a:d2:ad:cf:b8:f3:1a:5e:e2:
         da:00:d9:51:f5:d2:37:66:b2:b7:0c:8c:f7:9f:ff:d4:df:25:
         40:35:d3:c5:22:2a:a8:d1:3c:6a:68:50:32:4e:5b:9b:be:3e:
         83:a2:2a:62:c9:87:6e:4e:c4:14:59:ae:e9:be:71:3c:89:06:
         21:8a:da:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:25:25 2025 by rpki-client