Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
File:                     55rcKmJwJwixoO4N87TPkiiW3NY.mft (raw, json)
Hash identifier:          +csXoxK/IYHXhCYTNXVsypUW7UHy1mF0W+mvUFMJZOs=
Subject key identifier:   61:A7:56:B4:8C:6C:42:A3:C2:6E:6E:56:7E:74:99:21:02:7B:56:61
Authority key identifier: E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6
Certificate issuer:       /CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
Certificate serial:       0198499C44D406F20ABC67B9C1A451FDD370
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
Manifest number:          0350
Signing time:             Sun 27 Jul 2025 02:00:34 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:34 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:34 +0000
Files and hashes:         1: 55rcKmJwJwixoO4N87TPkiiW3NY.crl (hash: pP0jSl6RspUVMvlqafmFrJ4oCeczZaIUPksLiOOWsps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:44:d4:06:f2:0a:bc:67:b9:c1:a4:51:fd:d3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e79adc2a62702708b1a0ee0df3b4cf922896dcd6
        Validity
            Not Before: Jul 27 02:00:34 2025 GMT
            Not After : Jul 28 02:00:34 2025 GMT
        Subject: CN=61a756b48c6c42a3c26e6e567e749921027b5661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:90:82:5e:31:c5:71:cd:0a:21:be:4d:66:
                    39:8a:c8:86:d5:86:60:6e:9d:a5:92:8b:51:3a:c5:
                    25:d3:b0:58:62:22:58:91:5a:8d:66:5a:82:2f:47:
                    70:1c:c5:2e:c7:91:e0:ee:2e:d9:3f:6d:de:b3:ff:
                    65:fc:f7:47:6f:2d:5d:d3:ff:a6:e7:6a:fb:66:52:
                    fc:27:86:7b:13:78:7f:06:bb:97:03:68:df:25:1f:
                    f9:db:27:86:45:69:08:2c:c9:e7:c1:48:1b:ea:04:
                    23:cf:14:26:cc:52:77:b2:19:6a:b5:19:07:4b:bf:
                    c5:31:e7:0a:77:5e:9c:3b:62:17:c5:f1:61:fc:f0:
                    24:e9:32:c9:e1:91:60:6b:fa:36:42:b2:f7:dc:84:
                    89:4d:57:8e:9a:01:f3:3d:22:6d:9f:08:93:8f:91:
                    2e:1b:47:a2:56:c8:3b:fe:64:43:85:b3:95:07:01:
                    70:18:d3:54:96:2b:e6:38:7b:13:ea:3c:3f:8f:b1:
                    4b:09:ea:b8:5c:e0:41:6e:7b:4e:a8:c0:3f:49:a0:
                    38:03:d9:bb:d4:0d:d7:11:6c:71:60:7d:d2:48:a2:
                    b3:c8:3e:26:e3:7c:4b:34:c3:a8:be:5f:49:97:f4:
                    2b:b8:bf:5d:f9:7c:9f:61:5a:20:61:24:50:87:8d:
                    e1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A7:56:B4:8C:6C:42:A3:C2:6E:6E:56:7E:74:99:21:02:7B:56:61
            X509v3 Authority Key Identifier:
                keyid:E7:9A:DC:2A:62:70:27:08:B1:A0:EE:0D:F3:B4:CF:92:28:96:DC:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55rcKmJwJwixoO4N87TPkiiW3NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5b617d-08ea-4674-b3c4-363c1b431963/1/55rcKmJwJwixoO4N87TPkiiW3NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:a5:e1:d8:d8:a2:0d:9e:4b:e0:ff:b5:e2:0c:36:fa:d7:71:
         f6:d7:50:3a:89:99:aa:b6:6f:66:b2:0f:06:ff:c8:99:bb:d6:
         c1:90:e7:6b:71:ff:bd:e7:24:c1:4c:05:e9:c9:8f:b0:05:ab:
         0f:aa:28:ea:0e:b5:e3:9b:8f:6f:67:c2:dc:88:b2:ba:05:68:
         46:6d:73:a2:a6:99:5e:96:0f:14:04:37:cb:1f:9c:fe:d5:37:
         a6:d1:42:7b:1b:27:af:04:32:1b:f9:32:11:93:8b:1c:c3:c4:
         2a:0a:50:58:49:50:32:8d:5c:de:1a:fd:83:ee:f6:21:54:68:
         ac:58:5f:35:69:69:1a:b1:92:e9:64:04:6b:dd:d4:98:f6:64:
         ed:16:75:b4:f1:ce:b1:57:ba:61:63:0a:10:2c:24:a1:00:35:
         c1:df:51:cc:03:de:72:c5:e6:bc:50:ce:d4:ac:a2:86:7b:48:
         7e:78:34:74:4c:bf:63:ac:13:1b:e7:0a:63:ff:35:dd:87:67:
         3f:27:30:04:b0:97:45:1e:d8:a3:9c:13:f9:ce:94:75:07:f2:
         95:f1:6e:24:7e:a5:c3:53:63:c2:de:75:0e:fb:54:8e:fd:2e:
         91:c2:93:29:f2:d6:d1:7b:e9:de:bd:25:89:d1:02:5a:c0:fb:
         fa:40:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:44:06 2025 by rpki-client