Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File:                     cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier:          wv0s9vzGVI9jvvbnrbleCTsmqDh4aQgRiuZGjex5dTs=
Subject key identifier:   72:A9:C5:34:74:43:1B:15:5A:B1:88:91:E7:AC:03:83:0C:5F:30:3C
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer:       /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial:       019923A0ED95FFE10A323526164D50FDC203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number:          0F45
Signing time:             Sun 07 Sep 2025 10:02:53 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:53 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:53 +0000
Files and hashes:         1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: jd/i107xAZBIlcKuGpeOqwCy/7X9J4InIWynHs967vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:ed:95:ff:e1:0a:32:35:26:16:4d:50:fd:c2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
        Validity
            Not Before: Sep  7 10:02:53 2025 GMT
            Not After : Sep  8 10:02:53 2025 GMT
        Subject: CN=72a9c53474431b155ab18891e7ac03830c5f303c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:9c:88:44:6b:50:d8:f9:6e:2d:5b:99:09:
                    82:8b:a3:e6:a2:e3:c3:c6:74:37:f5:ab:54:34:55:
                    23:54:4c:c8:7d:05:b5:9d:3a:d6:cb:4d:0b:6b:2f:
                    88:2c:18:a5:75:56:ef:6a:09:a5:97:89:28:dd:36:
                    4a:b1:85:79:32:0f:43:92:cc:4a:74:ce:b6:84:c2:
                    c8:39:19:0c:b0:ec:87:11:16:c8:e5:78:43:fb:1b:
                    e5:d2:3f:4e:8a:ef:18:35:fb:94:8e:c6:bd:52:32:
                    b1:e0:1a:2f:50:da:f0:15:b1:50:05:4e:89:a7:a0:
                    da:19:e1:ca:67:61:87:44:95:19:ca:03:2f:e1:b4:
                    e6:c4:c8:9e:c5:53:cd:5f:6c:25:f2:78:68:e6:f4:
                    24:9b:d4:ae:c1:c4:a1:bf:f4:5d:12:22:2f:8f:09:
                    09:89:57:ef:be:ca:97:04:84:dd:0b:ca:e4:64:0c:
                    b5:fa:17:cc:40:da:74:06:5e:1a:15:fd:89:69:86:
                    09:83:72:97:c2:ae:ab:9a:07:99:a7:bd:fe:53:1a:
                    7d:65:56:36:31:15:59:a1:15:39:9a:67:77:1d:a3:
                    25:1c:9c:e1:61:2a:e4:53:07:bc:9d:58:ab:fb:7a:
                    b5:19:c0:87:5a:bb:dd:39:56:d6:40:fe:a4:47:b8:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A9:C5:34:74:43:1B:15:5A:B1:88:91:E7:AC:03:83:0C:5F:30:3C
            X509v3 Authority Key Identifier:
                keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:3e:fe:f3:05:ea:14:2d:e2:d1:94:34:c6:7d:d1:91:39:
         33:3a:d3:d5:85:08:d1:51:b1:43:be:6a:3a:c9:d0:5d:a3:68:
         50:05:39:24:8e:38:5a:40:92:53:3b:fc:96:f1:be:8f:58:2e:
         d6:67:66:4e:37:e7:10:94:2e:da:ab:e2:b5:46:b3:f3:0d:bd:
         ef:dd:a8:5c:08:b7:ed:6e:19:13:83:ba:b7:81:c7:19:ec:60:
         89:2c:c8:7d:e6:7f:c8:99:fd:96:7e:ce:f7:7f:0f:75:b7:7a:
         f0:a2:e2:5c:53:5c:f8:06:e4:4c:d8:94:11:b3:25:ba:f4:4b:
         29:3a:0b:df:34:a5:ed:40:9b:bf:9a:94:2e:6a:b9:73:e9:50:
         a0:ef:30:b0:ce:70:7e:2e:04:b5:c4:c0:98:9a:61:f0:da:3a:
         f8:48:93:f4:84:43:c3:2e:99:03:15:76:71:4e:bb:2d:ee:0c:
         e5:a2:4d:56:51:3e:b8:aa:a8:4b:ae:33:7e:60:09:e0:ce:52:
         4f:c4:2c:69:21:3e:31:7f:99:1e:00:39:41:e1:7c:45:df:3b:
         e4:75:ca:20:b5:d2:98:bd:4b:23:ba:ac:79:71:06:a3:39:68:
         45:85:7e:53:60:13:df:20:c9:57:46:6b:72:e4:0f:61:f8:d0:
         5a:a8:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:53:25 2025 by rpki-client