Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File:                     _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier:          7fnyXmwziijCTYiAYObkaFg0CMLbeH7SBhdNclw5DLE=
Subject key identifier:   E8:77:34:00:55:11:08:B6:38:68:51:56:ED:EC:63:1A:EF:44:73:0E
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer:       /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial:       01984A09FA58FA94CEAF933C532E5C503995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number:          025F
Signing time:             Sun 27 Jul 2025 04:00:24 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:24 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:24 +0000
Files and hashes:         1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: VaZRugafHuhy0bPFnivoqBUzE0Y/BGld+TkvHkGddr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:fa:58:fa:94:ce:af:93:3c:53:2e:5c:50:39:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
        Validity
            Not Before: Jul 27 04:00:24 2025 GMT
            Not After : Jul 28 04:00:24 2025 GMT
        Subject: CN=e8773400551108b638685156edec631aef44730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a5:b8:64:ef:16:02:c8:2d:aa:93:4f:31:65:
                    66:76:0e:d4:55:ac:ab:3f:87:71:2a:48:74:4b:2b:
                    89:88:2c:f4:9d:9e:7e:de:8b:d8:46:3b:a4:f9:f6:
                    09:ab:25:1c:bc:1b:29:a0:52:a6:50:48:0c:5e:63:
                    d5:c9:d5:0b:94:77:6a:96:50:e6:e9:d1:7a:34:19:
                    23:5a:f7:f9:07:5f:19:7a:1c:3c:e4:7c:7d:cf:58:
                    63:a3:32:c8:16:60:a8:18:3f:0c:16:7c:26:98:98:
                    7e:8d:ca:e2:17:e1:0b:48:73:94:04:ab:71:79:17:
                    2a:2f:dc:a9:87:c9:1a:63:25:84:e2:aa:7e:78:b7:
                    ad:f4:eb:ac:4a:30:a8:ce:60:05:8c:43:b3:0d:42:
                    ce:62:c0:eb:34:3c:6b:45:36:7e:f4:48:1a:e2:f6:
                    7a:25:3e:46:d1:91:ae:08:86:f2:89:ec:fb:80:19:
                    b0:58:9e:b1:b4:82:7d:7a:b8:12:23:45:d5:53:b3:
                    c5:cf:78:6a:da:34:cd:42:de:8b:e4:8e:2a:ac:8c:
                    17:da:f0:96:08:1c:56:58:8d:1e:ef:b3:63:98:54:
                    be:7b:79:f7:4a:f2:20:de:30:5b:c6:bc:c0:24:87:
                    0a:35:3b:89:78:78:4f:92:7d:78:86:89:11:af:a3:
                    0e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:77:34:00:55:11:08:B6:38:68:51:56:ED:EC:63:1A:EF:44:73:0E
            X509v3 Authority Key Identifier:
                keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ff:83:51:47:75:0f:3e:5f:f3:e6:0e:44:94:21:79:45:f1:
         90:ce:4e:6e:7e:4f:2a:57:d7:48:de:68:10:61:b8:9e:6d:ea:
         a5:cc:75:e5:53:b8:a2:32:77:9e:a1:d1:2e:84:f0:59:1e:cd:
         74:54:10:7f:23:2b:d8:16:36:07:7d:04:d8:26:9a:64:27:8a:
         b4:65:40:53:c2:c1:1b:85:a9:4e:fc:4c:b7:d1:4f:26:9c:5b:
         b5:0e:f6:4d:7b:3b:89:3a:fd:1d:15:26:7f:83:c7:8d:79:c1:
         ad:f6:1b:9e:8d:74:db:aa:f3:77:50:b5:51:84:9b:a1:14:eb:
         c3:28:ba:ab:95:de:b7:44:37:32:46:ee:81:1a:10:d2:be:2b:
         e7:2a:b4:3f:8d:12:74:9f:aa:45:99:6c:d0:5a:63:2e:c1:ee:
         2b:06:65:83:78:e8:af:dc:8f:70:2a:01:ca:50:5a:12:64:9e:
         ba:33:ea:ec:8c:2f:ff:7a:ce:e7:95:cd:08:62:44:96:58:f5:
         41:c8:15:3a:b2:a2:44:db:34:50:81:6d:c7:ea:5c:3d:19:56:
         de:8b:36:91:a7:4c:c1:e2:67:dd:35:ea:14:bc:fa:4b:02:42:
         ce:ae:eb:28:47:ce:09:c2:81:6f:33:2a:63:5d:f8:5d:61:b0:
         02:48:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:31 2025 by rpki-client