Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File:                     4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier:          eOLlbwpYLnWKLU/jrDH11KsGx1VxnCs37mGaY3FrAzU=
Subject key identifier:   55:D1:34:78:CC:90:3C:57:61:F1:FD:7A:79:6E:25:18:5A:C3:B5:E5
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer:       /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial:       019846D1D65987C2870BAF27EBE2EDDB8E7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number:          023B
Signing time:             Sat 26 Jul 2025 13:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 13:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 13:00:13 +0000
Files and hashes:         1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: aXxX2FQPtjYTEgqk7xJzxBj2aclCmfOC1Vm0J1i67Ho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:d1:d6:59:87:c2:87:0b:af:27:eb:e2:ed:db:8e:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
        Validity
            Not Before: Jul 26 13:00:13 2025 GMT
            Not After : Jul 27 13:00:13 2025 GMT
        Subject: CN=55d13478cc903c5761f1fd7a796e25185ac3b5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:94:0b:99:68:97:f7:5c:a3:af:15:a0:48:80:
                    7c:e4:5f:4f:88:ac:39:1f:05:64:78:30:62:49:33:
                    25:9d:bb:58:fd:b9:47:16:53:14:a2:cc:d3:75:e1:
                    52:8d:8e:b0:40:f9:01:78:83:a5:d9:7d:2d:e5:3a:
                    cb:9c:c7:cb:90:ce:69:28:de:d4:36:62:40:f6:1a:
                    ff:29:93:01:48:49:99:2c:2c:ed:3a:92:b9:66:02:
                    d9:a5:d4:9a:d4:8d:11:e8:2d:c2:ab:78:76:6a:6c:
                    fa:6c:9d:2a:42:9a:c7:46:fd:70:4f:9e:b0:c9:27:
                    f8:9f:99:e4:1d:87:51:e2:e7:13:c2:30:66:81:d2:
                    7f:db:d3:5e:ab:d0:7f:2e:6f:78:63:54:2b:19:d7:
                    a7:db:a6:b7:36:01:03:7e:a7:41:15:83:52:a6:5d:
                    92:e8:3b:2c:49:6c:b6:f1:99:36:37:aa:c8:66:6c:
                    5f:c0:a1:11:2f:50:8d:ae:5e:3a:0c:3c:9a:7b:b6:
                    37:28:b6:b7:03:88:19:ed:b5:74:53:03:5a:c4:dc:
                    f6:90:dc:f7:04:f9:70:07:44:e7:0e:5b:ba:93:37:
                    80:d7:27:c3:ce:2d:13:7c:13:10:d1:fb:74:71:81:
                    52:cc:39:bc:fc:6b:f4:ee:1b:ea:c1:d2:df:97:ad:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:34:78:CC:90:3C:57:61:F1:FD:7A:79:6E:25:18:5A:C3:B5:E5
            X509v3 Authority Key Identifier:
                keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:6d:45:16:b4:8e:fa:04:26:ad:f8:49:de:7c:1f:e8:67:14:
         63:6b:4a:81:d6:5a:35:0f:17:91:3c:55:19:8e:98:c2:5e:43:
         01:e6:a3:d5:15:ba:92:cf:e5:7f:01:8a:84:39:b5:8d:21:e9:
         ef:4c:ee:ba:7c:43:f5:3c:23:9a:d9:1c:77:ef:a6:0b:ad:fc:
         81:93:a9:7e:e3:4f:14:63:0b:da:e7:62:fb:3e:e1:43:dc:93:
         3b:05:da:46:2a:a3:65:47:6a:ae:de:5b:d0:0d:7f:41:bb:7d:
         78:93:aa:09:59:6a:ec:aa:d3:6e:e8:51:97:b9:48:e9:9d:40:
         0b:74:f6:67:1a:f2:59:d0:32:05:bc:8e:5e:07:1f:c8:cf:c5:
         17:78:ee:94:c3:0f:4e:68:2c:78:c1:20:54:0e:1b:b9:fd:ad:
         00:90:fb:66:9d:d1:6b:05:a8:11:66:6b:70:4a:8a:49:01:e7:
         93:4a:e1:8f:a2:9e:66:55:87:95:42:dd:49:8e:38:e1:04:b3:
         9a:69:ed:3a:90:42:c8:0f:30:39:7e:70:b9:2e:29:d1:17:69:
         01:38:9f:12:23:8e:b4:2d:9b:f5:96:07:4b:c3:ce:e1:71:7c:
         f4:5f:ff:cc:aa:57:8c:5d:36:b7:c7:db:f3:77:59:6b:b7:e6:
         56:0d:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:59:07 2025 by rpki-client