Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File:                     9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier:          JUqdgMPMxg8E6Ua5nBvLJyArYfUj9c25AhXtTeKyiPI=
Subject key identifier:   EA:6B:25:BB:ED:2B:37:CD:80:B2:99:25:B8:71:CE:65:0A:95:B5:2D
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer:       /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial:       019849D36F90F211AE28F2CE3ECF88411E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number:          158F
Signing time:             Sun 27 Jul 2025 03:00:49 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:49 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:49 +0000
Files and hashes:         1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: MgWCnFO4ImHGol/PWKZtwzRZbS9c9PzbQ4LhzTZnV+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:6f:90:f2:11:ae:28:f2:ce:3e:cf:88:41:1e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
        Validity
            Not Before: Jul 27 03:00:49 2025 GMT
            Not After : Jul 28 03:00:49 2025 GMT
        Subject: CN=ea6b25bbed2b37cd80b29925b871ce650a95b52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2f:37:70:d0:71:a6:95:21:03:9d:a9:fb:f1:
                    5b:f1:8c:ef:8c:03:cf:26:3c:08:1b:4e:d1:13:96:
                    c6:fd:b6:bd:94:30:54:f4:77:5d:83:bd:91:06:a9:
                    e1:b6:61:69:06:14:47:5b:75:5c:67:dd:f7:db:5f:
                    bc:d0:c9:6f:cd:8e:21:06:bb:50:81:d0:4b:01:f0:
                    eb:c4:3e:14:a2:b6:99:5a:66:b2:ab:55:26:b6:8d:
                    39:de:0a:1a:67:e1:02:c2:94:a9:74:37:dc:4f:f1:
                    9f:8b:b2:d6:2d:03:89:47:d3:aa:1d:09:0c:42:d5:
                    79:c7:5f:38:2f:31:a1:07:df:c0:17:2d:19:12:a0:
                    62:9b:7a:2b:9f:2a:2b:bd:ff:a7:00:58:ec:3d:0b:
                    c7:ac:b4:d9:06:03:86:08:06:11:94:e2:9d:eb:58:
                    c8:05:47:a2:ca:34:02:34:c3:7c:57:ab:19:b4:d6:
                    ba:2f:67:b3:1b:ed:14:37:99:d6:6f:f9:bc:a4:57:
                    41:65:29:d0:ff:67:34:1b:90:93:02:47:2c:51:6e:
                    c9:bb:b8:73:0e:87:ed:0e:46:79:af:1c:2e:4d:0a:
                    2a:78:56:d6:92:1f:f7:ef:0d:27:53:0f:8a:63:ac:
                    42:01:44:bd:1e:77:30:98:6e:2a:70:98:5a:00:db:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6B:25:BB:ED:2B:37:CD:80:B2:99:25:B8:71:CE:65:0A:95:B5:2D
            X509v3 Authority Key Identifier:
                keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:de:0e:b4:6b:ad:39:02:9f:8c:a7:22:18:9d:a1:7b:87:ba:
         7e:b0:8f:b0:4b:57:8f:2a:9c:af:56:be:bf:97:9f:80:3b:12:
         43:b1:0a:0b:74:5b:50:0e:d3:24:44:5f:a1:b0:36:8f:67:be:
         aa:eb:4e:ae:28:d7:9f:03:9e:bf:97:de:cd:92:d0:55:67:74:
         9d:37:20:5f:93:bb:ee:c3:9b:b5:9a:88:25:34:6b:d8:63:40:
         d0:16:a9:44:c2:7d:61:5f:11:e3:4f:dc:76:85:15:fd:18:1a:
         e1:e5:0a:3c:a2:68:88:4b:85:95:d0:f6:2f:dc:f8:ec:89:3a:
         5a:92:e8:bc:e3:2a:54:a5:5c:61:fa:53:55:3d:4c:14:57:e0:
         b7:0c:d7:85:50:16:d0:ff:38:43:c5:91:30:eb:a8:81:e5:ce:
         89:65:73:f7:83:ee:03:dd:9f:55:6e:97:95:6d:e4:34:96:7f:
         c0:2d:e7:5e:b7:95:01:cc:72:fe:b5:5b:27:75:fe:b8:ed:16:
         09:9f:4d:b6:58:1b:35:37:04:22:81:91:38:d5:9f:26:a8:22:
         55:3a:eb:7a:45:3c:fc:ca:4c:60:95:80:35:3c:54:98:c8:d2:
         39:2f:52:cd:0a:29:0b:db:56:ca:e8:42:f8:e9:16:60:1a:ae:
         a9:4d:84:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:39:07 2025 by rpki-client