Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
File:                     se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft (raw, json)
Hash identifier:          xnP4T2PXlPYcIRtthq5QU9GksIIYjgbmXSnyjC8Rrjs=
Subject key identifier:   32:92:31:28:13:8E:D2:A6:AF:AC:7A:6E:C5:3C:88:5C:58:08:BD:F3
Authority key identifier: B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4
Certificate issuer:       /CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
Certificate serial:       019921B1FC25C007BD3C9A1C7064F94E7044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
Manifest number:          0FEF
Signing time:             Sun 07 Sep 2025 01:02:16 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:16 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:16 +0000
Files and hashes:         1: se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl (hash: aaf3PU6Oc/GB3NX3n235bhTqZxWGwEQ72XzA0vDEJgQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:fc:25:c0:07:bd:3c:9a:1c:70:64:f9:4e:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee6ec1af3e8855780b57d50c33b6c8ee3324a4
        Validity
            Not Before: Sep  7 01:02:16 2025 GMT
            Not After : Sep  8 01:02:16 2025 GMT
        Subject: CN=32923128138ed2a6afac7a6ec53c885c5808bdf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:22:98:e5:a1:f1:83:2b:66:cf:28:95:dd:
                    bf:5b:aa:11:40:32:1b:bf:e0:45:1a:f5:c7:d1:e5:
                    58:19:59:12:75:eb:78:be:1b:0e:77:a0:73:47:ea:
                    09:f1:c6:a8:e2:e5:b3:bc:16:f9:76:eb:b0:d2:f5:
                    da:75:84:ac:09:24:48:39:26:cf:be:12:27:12:23:
                    ad:0b:16:c9:26:56:3d:7c:db:54:ec:e5:05:53:ba:
                    0d:d2:e7:08:4e:cf:a0:c6:8e:f6:60:c0:eb:61:27:
                    7e:55:99:a0:fd:98:9b:72:ff:20:3c:b0:99:de:b2:
                    7e:4a:97:7a:d8:7b:0c:89:b4:69:d4:61:5d:0a:30:
                    2d:0b:bb:32:b0:a6:53:21:bb:de:00:e0:03:8c:bd:
                    ff:6d:28:2e:1e:f3:d0:b1:1b:69:be:85:89:dd:1c:
                    ef:d0:25:ee:e7:89:6c:85:db:2d:a6:a9:81:4e:bd:
                    6b:f5:bd:88:f9:71:eb:ec:ff:fe:4e:dc:29:f7:8b:
                    db:82:7f:1e:86:f2:94:a2:ae:f5:74:5b:4d:ab:a2:
                    a9:3f:7e:c3:ec:cf:3d:d3:d4:17:9b:70:a8:f5:26:
                    d4:a9:4d:2b:19:50:ab:55:c5:a2:5c:c4:f9:ff:1a:
                    71:61:af:1a:8e:dd:07:6d:8a:49:06:29:b5:63:59:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:92:31:28:13:8E:D2:A6:AF:AC:7A:6E:C5:3C:88:5C:58:08:BD:F3
            X509v3 Authority Key Identifier:
                keyid:B1:EE:6E:C1:AF:3E:88:55:78:0B:57:D5:0C:33:B6:C8:EE:33:24:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se5uwa8-iFV4C1fVDDO2yO4zJKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/20dab8-4dd6-40f5-9c22-652646366691/1/se5uwa8-iFV4C1fVDDO2yO4zJKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a5:cb:94:52:81:3c:95:8d:7e:b2:1a:e5:1f:81:83:78:53:
         56:30:4d:1b:be:06:cd:c2:09:f5:68:6f:7e:e5:1b:43:30:82:
         40:1a:a0:40:26:6b:fd:26:26:29:12:83:08:82:a3:a3:34:41:
         7f:3d:fd:90:ee:a3:ec:0b:81:3b:1f:da:fb:77:f0:ca:1f:f8:
         b0:f5:ba:68:1b:71:d9:f6:be:e7:ea:42:4e:17:cb:08:ee:5b:
         32:7f:95:20:b5:a2:45:08:8d:32:a6:cd:12:77:45:49:6e:70:
         8a:7d:c4:a0:e6:69:ca:cc:51:cf:cd:dc:50:55:45:ae:93:6b:
         d2:8b:01:5f:0c:f2:ee:34:da:87:52:91:cb:13:61:a9:ca:d1:
         94:3f:c1:ab:46:b0:a9:45:9f:20:f2:15:20:13:85:45:2c:71:
         03:4e:24:82:9b:cb:6c:3a:54:9e:67:af:23:67:38:af:b1:fe:
         85:e3:91:ae:b1:90:2b:e8:0a:a5:49:09:94:50:66:aa:84:1f:
         4a:54:a7:60:19:62:74:79:70:d5:54:fa:6c:42:f4:fd:5a:96:
         0e:ee:93:c0:13:34:b8:40:50:59:91:33:ec:b8:fa:f9:4c:9f:
         66:d0:b0:ab:22:84:f4:fb:dc:73:67:69:c9:e5:ba:31:e4:d6:
         f9:95:e5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:11 2025 by rpki-client