Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          Lsynp8R5VxW8eIePsRBqm9K+6bEipN5yBMXgrliGGGA=
Subject key identifier:   45:27:56:A4:B5:19:44:72:2D:5D:7B:AF:13:7A:22:23:61:72:44:A8
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       01984B53A142FAC1A975EC15B7810DD1E3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          15FF
Signing time:             Sun 27 Jul 2025 10:00:28 +0000
Manifest this update:     Sun 27 Jul 2025 10:00:28 +0000
Manifest next update:     Mon 28 Jul 2025 10:00:28 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: DUCcPWHPoGggKMMPU3vL7D8G338W1LV+jNj6u4TzEyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:53:a1:42:fa:c1:a9:75:ec:15:b7:81:0d:d1:e3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Jul 27 10:00:28 2025 GMT
            Not After : Jul 28 10:00:28 2025 GMT
        Subject: CN=452756a4b51944722d5d7baf137a2223617244a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:b4:72:c4:a1:6b:a3:28:ab:95:93:86:23:
                    09:e7:87:2a:c6:2f:08:74:78:0f:22:e8:e6:2d:e8:
                    5b:ac:e9:5f:f5:77:57:74:8a:ef:0b:6d:6d:f7:d8:
                    a3:27:2e:2e:21:20:1d:88:6a:35:46:76:ff:24:52:
                    5d:60:46:9d:fb:a9:ed:03:fd:82:c6:4e:2b:c7:95:
                    e2:41:fc:66:c0:25:93:e1:0e:7a:68:3e:6b:b6:23:
                    c7:e6:97:04:9c:06:b2:56:2b:3b:50:a1:22:2c:22:
                    1f:13:81:d5:30:49:4a:43:c0:c9:60:66:3c:0c:c5:
                    3e:70:9f:6a:38:6f:ad:a8:70:0d:e2:53:43:69:f6:
                    c9:df:66:cd:cb:00:70:ac:a0:a5:9c:77:c5:1b:83:
                    60:8a:11:ff:24:ed:b9:0b:22:f8:0f:d8:d0:30:47:
                    b0:be:d7:1c:24:44:0c:29:68:b1:f6:6b:69:93:bc:
                    ef:dd:27:85:5a:1c:46:b8:cd:d8:2b:04:09:08:da:
                    43:82:5e:e6:e2:73:f8:10:ae:32:81:ed:77:33:42:
                    6e:4e:b9:6b:34:7e:36:71:2f:9b:93:a3:09:9e:26:
                    ea:ab:67:aa:3f:37:3a:8d:46:26:db:04:2e:b0:0e:
                    31:c2:21:6e:79:57:60:73:ad:39:26:c2:07:a6:7a:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:27:56:A4:B5:19:44:72:2D:5D:7B:AF:13:7A:22:23:61:72:44:A8
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:e9:ac:08:8d:37:91:31:f2:cf:e9:41:3f:33:b3:5f:6b:
         0f:dc:fa:da:58:67:21:20:42:51:7b:36:5a:7b:89:95:94:68:
         0c:e7:6c:e8:c7:98:9d:ad:c5:c5:81:fd:b7:79:25:ac:7d:9a:
         e0:50:14:28:01:65:a8:4d:1d:7a:09:68:5c:c8:55:78:22:a5:
         fe:d5:bd:08:7c:d9:c0:5a:5d:d0:73:04:34:dc:2d:70:da:1b:
         41:4a:05:33:ad:08:bb:da:7e:92:81:b9:2a:cc:e2:51:8a:65:
         49:e0:60:a5:02:95:f8:4a:7b:f8:ec:f5:3f:58:65:64:e1:3d:
         1c:d8:e1:82:58:39:5e:42:d3:9e:7c:ba:46:f4:c0:87:e0:13:
         09:27:88:2b:8b:08:9b:8c:4f:3e:e9:02:ed:a5:a2:93:d7:7d:
         36:3b:fc:af:78:e0:43:b2:c4:e7:39:f6:34:76:82:f1:8b:f8:
         7e:3e:c4:eb:ed:bd:c7:4c:b9:73:06:b8:d2:fd:d0:d0:6e:00:
         7f:6b:49:02:ef:58:8a:54:89:56:11:83:9b:d2:7f:c6:ac:c1:
         b6:a2:42:88:c4:60:5f:88:4b:3e:23:f4:09:b1:28:17:5e:6c:
         b5:82:60:c8:2f:bd:7e:bf:12:46:8d:cc:9f:2b:4d:13:78:e0:
         f7:be:6e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:20:18 2025 by rpki-client