Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
File:                     Y4zEB87_V7E7SUVfMMILdhx5ErU.mft (raw, json)
Hash identifier:          UX8eVMOVQft+x/hr5xCpXg/guvidIM4z58h0smzso34=
Subject key identifier:   5D:51:79:B8:32:48:AB:74:12:41:2D:EF:A0:FC:F7:65:F1:E3:EB:FB
Authority key identifier: 63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5
Certificate issuer:       /CN=638cc407ceff57b13b49455f30c20b761c7912b5
Certificate serial:       019922FA1CDFC0692DAB55B5100F47FA98B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
Manifest number:          0133
Signing time:             Sun 07 Sep 2025 07:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:40 +0000
Files and hashes:         1: Y4zEB87_V7E7SUVfMMILdhx5ErU.crl (hash: 81kON/5oNAb66X0nc2NFmq/dkRhZLid3c7rgS4je8Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:1c:df:c0:69:2d:ab:55:b5:10:0f:47:fa:98:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=638cc407ceff57b13b49455f30c20b761c7912b5
        Validity
            Not Before: Sep  7 07:00:40 2025 GMT
            Not After : Sep  8 07:00:40 2025 GMT
        Subject: CN=5d5179b83248ab7412412defa0fcf765f1e3ebfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:ba:94:15:37:84:cf:76:18:b6:7a:d3:7d:
                    19:50:4f:49:9b:57:da:a0:6e:44:45:aa:51:45:dd:
                    e5:46:9e:6c:15:ce:24:b7:16:80:88:37:6d:f9:11:
                    61:a0:8e:a6:f1:81:d5:ff:e2:d9:be:98:04:6d:9f:
                    2b:89:f7:b3:a8:24:40:f8:a9:68:b8:ee:ca:69:54:
                    67:69:cb:ff:9f:8e:ca:55:3a:d5:66:a8:50:68:27:
                    b1:25:c0:0f:a9:53:71:63:f5:11:f3:2f:fd:0d:44:
                    90:25:22:85:79:3d:e6:98:82:59:78:bd:60:d4:2f:
                    22:e4:05:35:bc:f1:c0:ac:76:14:d8:bc:fd:d9:da:
                    48:8d:de:cb:81:26:c5:80:8d:45:ce:41:01:ea:83:
                    91:3d:45:ca:f7:bb:ab:8d:97:dc:a1:53:92:19:d6:
                    f3:f2:3b:70:96:f0:46:30:42:b2:72:e0:6b:c5:ef:
                    e4:74:d1:70:38:c6:2c:b0:e0:fe:7f:c6:2c:46:39:
                    4b:4e:4e:3c:c6:c5:7d:8f:d9:16:f0:44:f5:24:0c:
                    b5:7f:16:b3:5c:c1:2c:22:21:ea:43:53:be:93:b3:
                    e0:c8:40:ed:ee:63:fb:8f:c0:14:fa:20:e8:cc:8e:
                    7f:eb:76:d3:84:24:7a:c2:35:0b:76:bc:25:bf:84:
                    2a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:51:79:B8:32:48:AB:74:12:41:2D:EF:A0:FC:F7:65:F1:E3:EB:FB
            X509v3 Authority Key Identifier:
                keyid:63:8C:C4:07:CE:FF:57:B1:3B:49:45:5F:30:C2:0B:76:1C:79:12:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4zEB87_V7E7SUVfMMILdhx5ErU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/05e3f6-1598-4b4c-b603-d8bb790c2d04/1/Y4zEB87_V7E7SUVfMMILdhx5ErU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c0:73:4d:d9:f0:25:10:22:70:9f:b9:44:5d:1f:45:07:96:
         cc:4a:79:e1:d6:34:05:85:de:bf:31:7f:78:17:cf:3b:b7:1f:
         f3:6d:62:83:9a:53:b1:a2:96:b8:06:74:b2:b8:e7:a1:68:ff:
         7c:5c:ee:49:23:fe:de:f5:d7:b5:77:b6:fb:c4:24:a7:f0:ae:
         70:7e:5c:24:51:a4:59:b4:86:53:05:a3:a8:cd:e1:a1:80:ce:
         e6:4d:e5:91:a9:6b:f1:bd:b3:19:a3:3d:d9:a3:9d:3e:c9:77:
         b4:98:13:67:e4:a1:d8:00:5a:f0:bb:5b:00:a4:b4:40:28:6b:
         ea:66:cf:60:b2:dd:47:12:f0:f4:eb:cd:dc:42:71:6f:b1:fe:
         41:18:31:0e:87:56:71:62:b7:1f:fa:27:70:dc:d8:92:3c:70:
         00:2e:7d:32:e8:b4:e2:96:b4:18:0c:60:57:c9:25:7c:0f:bc:
         c8:05:c8:60:b2:93:6a:22:90:34:94:54:ba:e5:88:e0:26:a8:
         c1:3b:c1:96:3b:27:c2:3d:23:54:04:a5:ff:f0:a6:fd:c2:a9:
         07:ac:fb:3f:77:c4:26:11:75:58:ed:4a:8e:1e:df:74:58:40:
         a6:9c:69:8a:3a:c2:8c:c0:3d:8f:63:ad:21:39:31:09:06:c3:
         8b:d2:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:31 2025 by rpki-client