Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
File:                     h4_WMe8uxzeUN_18dvjiRf8IJLs.mft (raw, json)
Hash identifier:          r8EDwkEAj3IrrUnd05Pyn8BYV6Vy3jPssLHDI5K0VAE=
Subject key identifier:   51:AB:95:B5:8D:25:86:95:2A:95:56:33:0D:B7:B9:9C:73:A3:6A:B4
Authority key identifier: 87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB
Certificate issuer:       /CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
Certificate serial:       01984776F90138BD1D00EF786A37F775B41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
Manifest number:          15FD
Signing time:             Sat 26 Jul 2025 16:00:35 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:35 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:35 +0000
Files and hashes:         1: h4_WMe8uxzeUN_18dvjiRf8IJLs.crl (hash: doXoojsiZgRDn4kvkzNTWopi15Ye/mUjtyPOdEwEx60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:f9:01:38:bd:1d:00:ef:78:6a:37:f7:75:b4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=878fd631ef2ec7379437fd7c76f8e245ff0824bb
        Validity
            Not Before: Jul 26 16:00:35 2025 GMT
            Not After : Jul 27 16:00:35 2025 GMT
        Subject: CN=51ab95b58d2586952a9556330db7b99c73a36ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:b6:12:72:ed:6b:b0:e8:df:04:2b:ad:50:
                    2c:7a:d2:e2:ec:9d:82:3e:a1:89:dc:00:ca:c0:21:
                    cd:85:7b:47:54:0f:eb:48:36:26:d8:93:00:47:84:
                    e7:55:1b:c2:c5:fb:c6:72:ce:1e:d8:81:c6:64:01:
                    00:58:57:e2:71:cd:1b:d8:8f:bd:5a:11:9f:d4:06:
                    3b:9a:c4:e1:45:00:9d:a9:bb:6d:e6:12:14:80:2b:
                    63:b6:84:b2:75:93:3a:d5:13:e5:48:03:0a:35:aa:
                    77:15:86:46:04:12:27:09:8d:9e:00:bb:69:a3:b0:
                    18:99:f5:78:7a:18:2c:c2:e0:7c:cb:e1:fb:90:41:
                    0b:78:65:3d:13:ed:45:25:8b:54:aa:80:bf:d6:a1:
                    4f:23:28:17:9c:e1:71:1a:c8:7b:6f:c7:97:b5:2e:
                    e6:fa:00:1c:7e:9c:b2:6f:49:49:8e:69:64:49:c5:
                    4f:d5:c1:c4:37:4a:29:46:aa:91:bd:ec:03:6d:48:
                    4f:af:26:b6:57:e5:91:51:77:83:0c:ee:65:0d:89:
                    ea:68:8e:72:48:24:b1:df:11:47:7f:8e:14:af:8b:
                    e2:8f:13:31:7a:51:1b:93:56:b4:c9:ab:58:09:8b:
                    9c:19:ec:9f:e7:17:ec:18:8a:1e:d0:bb:44:d6:99:
                    59:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AB:95:B5:8D:25:86:95:2A:95:56:33:0D:B7:B9:9C:73:A3:6A:B4
            X509v3 Authority Key Identifier:
                keyid:87:8F:D6:31:EF:2E:C7:37:94:37:FD:7C:76:F8:E2:45:FF:08:24:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4_WMe8uxzeUN_18dvjiRf8IJLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/aa3dcb-da64-49c8-98ed-ba6cb4252fd7/1/h4_WMe8uxzeUN_18dvjiRf8IJLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c5:ae:a6:d3:40:7e:a3:7a:fc:7c:61:bd:83:04:44:f3:f8:
         b5:23:d4:21:a0:1f:50:93:83:db:53:09:2b:68:40:d7:3f:62:
         c0:d8:3a:d5:0e:81:f9:c8:91:b5:75:69:02:76:a8:1d:bd:8f:
         83:cb:6c:7e:86:ec:4f:59:68:35:4f:2e:a4:ff:22:f8:cd:52:
         5c:f1:87:7f:26:ad:ac:ff:34:d5:1c:0c:bb:55:c6:d7:d6:16:
         b3:e4:b9:b3:e8:d8:b8:ce:3e:9c:ec:67:72:24:11:a6:2e:a1:
         ef:84:19:48:09:3f:69:eb:af:69:a4:a2:9f:8a:9b:b5:2d:66:
         9d:ec:0d:1e:95:07:8d:1b:93:56:f8:3d:7d:ae:db:27:4a:1a:
         c0:25:98:74:a1:28:4c:3a:a9:87:9a:28:18:9a:7a:3e:f3:97:
         1d:9c:0b:e6:25:16:96:18:44:bf:67:41:58:59:66:28:c7:8c:
         50:7f:88:d3:f0:92:2b:5d:f9:6e:32:8d:2a:3a:56:96:68:2b:
         cc:ef:37:b1:e2:1e:ca:a8:f3:92:4a:2c:ca:e6:27:23:50:a6:
         dd:bc:eb:22:b8:f5:7c:12:a3:d5:22:d1:73:40:0c:3e:03:15:
         68:46:fe:34:d9:8a:32:a9:3c:0f:90:28:3c:2b:9d:f7:0c:11:
         a4:36:96:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:51:34 2025 by rpki-client