Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
File:                     p3l5GlNwwc1X5JPZSfke-82mYX4.mft (raw, json)
Hash identifier:          sEKVuNavRJrxkEReT7vfJHyE01gMzHUEU/yeo4LJLfI=
Subject key identifier:   7C:51:DF:EB:4C:5B:08:BB:0C:A5:E9:84:71:97:B3:3F:1E:31:A4:E5
Authority key identifier: A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E
Certificate issuer:       /CN=a779791a5370c1cd57e493d949f91efbcda6617e
Certificate serial:       0199221EFD77DA836F3B009D2F86BC4B45AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
Manifest number:          0B14
Signing time:             Sun 07 Sep 2025 03:01:20 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:20 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:20 +0000
Files and hashes:         1: p3l5GlNwwc1X5JPZSfke-82mYX4.crl (hash: yuymppDUMksQkfctflwkV30q+RL7vSMOM1Dp/IIsfl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:fd:77:da:83:6f:3b:00:9d:2f:86:bc:4b:45:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a779791a5370c1cd57e493d949f91efbcda6617e
        Validity
            Not Before: Sep  7 03:01:20 2025 GMT
            Not After : Sep  8 03:01:20 2025 GMT
        Subject: CN=7c51dfeb4c5b08bb0ca5e9847197b33f1e31a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:37:58:50:ee:ae:af:a4:a6:0b:68:5f:8f:4f:
                    6d:00:7e:ec:53:bc:84:c8:b9:c3:a7:a7:bf:df:63:
                    0f:08:ec:49:b3:3e:64:87:2c:19:08:36:61:f0:2b:
                    56:a5:a6:63:7a:fb:06:cc:ec:17:4e:2a:71:b9:04:
                    bd:f7:03:69:a1:1c:51:05:d6:b5:30:30:7d:1d:00:
                    d0:46:7c:e7:86:77:5d:aa:12:5c:6b:05:9d:cd:7f:
                    59:22:16:55:1b:c9:63:3c:bb:a7:f2:a9:9e:c6:4b:
                    76:6e:c2:4e:05:7f:4b:49:59:04:40:ba:e1:3c:72:
                    ad:5c:b9:ba:72:23:5c:d3:fb:33:02:92:eb:d1:6d:
                    f7:5d:d4:81:37:08:eb:9d:7a:c6:94:aa:27:66:a0:
                    1b:6d:f4:70:58:25:a4:c1:a9:96:cb:ed:74:24:ef:
                    b9:8c:91:82:db:50:3f:f0:e4:f1:b9:f6:a5:9b:1d:
                    ce:e5:ed:2c:42:83:98:ab:99:17:c0:0a:c3:82:f6:
                    f7:64:cc:27:02:81:01:1a:73:dc:1e:09:dc:37:52:
                    89:d6:f0:48:d0:8c:38:59:df:e2:27:18:77:09:04:
                    54:01:ee:69:13:3a:4f:a1:11:ab:5e:c2:91:35:d4:
                    73:b2:d9:18:27:0e:89:88:1c:28:f7:32:26:09:53:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:DF:EB:4C:5B:08:BB:0C:A5:E9:84:71:97:B3:3F:1E:31:A4:E5
            X509v3 Authority Key Identifier:
                keyid:A7:79:79:1A:53:70:C1:CD:57:E4:93:D9:49:F9:1E:FB:CD:A6:61:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p3l5GlNwwc1X5JPZSfke-82mYX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4eeb29-5bdd-48b6-9954-4d8accba69dc/1/p3l5GlNwwc1X5JPZSfke-82mYX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c8:53:ae:33:34:33:93:8a:dd:db:ab:b0:a9:49:c8:cf:6f:
         3b:84:b2:42:c9:78:82:f7:81:e0:d8:fe:2f:db:4b:06:b9:7c:
         76:c8:9a:b3:da:73:c5:65:72:a0:9c:94:c1:44:02:4d:88:15:
         2f:0b:71:a8:c1:2c:42:c7:f5:7e:e2:74:e7:9e:24:f2:db:14:
         c8:dd:01:17:1d:be:be:e5:13:25:97:94:b5:c0:9c:b3:01:a9:
         35:f9:1f:65:c5:41:af:f2:96:39:53:57:db:25:9a:9e:7d:da:
         94:51:95:c6:12:86:05:db:97:53:a0:6d:a0:98:be:13:91:1a:
         9a:b8:2d:c4:f1:08:d4:01:8e:5c:fb:b8:4a:e0:a0:27:d2:32:
         b5:e2:0d:b3:d7:1a:25:c8:45:15:8e:5b:bb:8c:34:dd:32:17:
         b4:58:a2:19:2f:5a:a3:23:85:58:e4:43:6b:91:1b:5f:3d:47:
         c5:1f:77:3f:8a:98:5f:be:70:3a:39:0b:63:b5:9c:b8:30:39:
         1c:a1:34:ed:c9:4d:0b:20:e0:a5:07:d7:bf:fc:c8:41:51:fc:
         47:f5:0a:7a:05:d7:fd:73:1f:14:61:c1:e8:26:24:d6:e7:e8:
         55:4d:59:2d:93:39:c0:fc:5f:aa:cd:1e:43:74:73:fb:42:37:
         bf:aa:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:09 2025 by rpki-client