Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          cJ+NK62JauFsl9VGTctIl5iPXme0bwEYoUzTieZH7sU=
Subject key identifier:   79:5E:E5:52:67:A7:54:1F:B7:C8:B4:A6:82:60:81:88:57:92:67:33
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       0199239F5B917FAEC9C9FD574A3BB5ED28F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          04BD
Signing time:             Sun 07 Sep 2025 10:01:09 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:09 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:09 +0000
Files and hashes:         1: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: I9DjzKC207OaebcviRx+NSI9NMp/8eULGfl9o5qskFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:5b:91:7f:ae:c9:c9:fd:57:4a:3b:b5:ed:28:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Sep  7 10:01:09 2025 GMT
            Not After : Sep  8 10:01:09 2025 GMT
        Subject: CN=795ee55267a7541fb7c8b4a68260818857926733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:f6:57:e1:0a:d1:89:bc:18:bf:4c:b8:88:
                    3f:3b:ff:10:a8:02:d7:31:0d:fe:86:38:97:f0:45:
                    94:b8:35:36:eb:eb:22:eb:14:58:a6:28:ad:b8:83:
                    4c:6a:a7:ef:94:da:d7:a8:45:08:fd:25:e4:f0:ff:
                    92:24:29:71:58:a1:e0:ab:ce:61:35:db:1d:19:17:
                    d4:cf:d3:e9:ee:fd:5b:22:39:a0:58:57:b4:be:d7:
                    a0:ad:6b:e8:bd:36:4b:7c:f1:94:fc:19:2e:32:9a:
                    88:15:d2:ba:83:cc:5b:9e:6a:ae:38:a6:be:fb:3b:
                    be:ba:a6:46:42:75:35:69:18:bf:23:5c:73:fe:89:
                    72:b5:47:32:3a:ef:d2:aa:ec:9e:4a:73:9b:99:e0:
                    4f:a2:b2:4a:52:79:d7:c3:00:73:5c:cd:a7:6c:25:
                    ac:fe:ab:f6:17:55:f3:3e:8f:6f:f1:9f:27:84:08:
                    40:72:a9:ce:7b:af:7c:64:33:74:a0:a3:7b:19:fa:
                    0b:f0:98:c2:32:24:41:08:32:a6:64:13:a2:4c:2c:
                    49:78:39:38:47:ca:b6:0f:71:06:81:47:90:61:cb:
                    15:5d:6c:39:d3:8e:78:d1:84:7d:6b:bd:ba:62:35:
                    25:51:a5:93:6c:ce:f7:60:01:70:10:0d:fa:79:7e:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:5E:E5:52:67:A7:54:1F:B7:C8:B4:A6:82:60:81:88:57:92:67:33
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:04:70:e0:50:65:e6:a2:da:c7:b8:76:10:43:b6:f8:22:25:
         c2:9b:13:13:e8:e7:87:f4:49:ac:31:1a:bf:69:ca:23:b1:95:
         23:e8:2c:94:9e:32:ba:e2:b2:7b:e8:e8:fc:2f:3a:02:08:6a:
         08:3d:71:58:71:9f:53:c1:b3:a8:19:93:12:12:c4:bd:47:db:
         1e:41:ce:d8:a2:ae:b4:d0:58:2d:52:ac:a0:f3:2b:96:a9:5f:
         83:c8:40:33:fe:9b:84:bf:85:92:dd:61:9d:71:24:03:5b:a6:
         57:fe:ac:24:70:9a:be:ca:e3:7b:5d:6a:bf:b1:48:9b:cd:d6:
         81:22:da:f7:ac:f3:2d:be:65:0c:8a:1b:07:5b:cc:dc:58:b4:
         c1:eb:98:82:a2:38:e2:23:d3:13:a0:08:c9:05:79:3d:2e:ac:
         ba:ed:13:80:14:17:87:e6:ae:42:93:24:c8:24:df:52:53:f1:
         fc:ac:62:0d:af:f4:b9:98:0d:28:84:74:32:c7:85:43:f9:a0:
         23:57:a3:e9:4d:05:0f:c0:62:9b:ad:0c:c7:da:d6:24:86:09:
         43:4e:1a:62:d8:4b:dc:6f:89:49:ef:9a:ec:58:02:ba:20:c3:
         6d:71:d5:e9:89:84:7d:0d:d1:5a:cf:61:27:f2:cb:68:61:e1:
         e1:0c:62:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:42 2025 by rpki-client