Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
File:                     SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft (raw, json)
Hash identifier:          PZ9WhSrHfXgCMvLA/u83OBe82BuR/e8TkzxjcA+ntC8=
Subject key identifier:   8A:18:C1:4D:43:10:1E:AE:93:B2:4C:A7:A1:9F:0E:10:06:B4:BC:78
Authority key identifier: 48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34
Certificate issuer:       /CN=482e4160d9808f92ffef093e9b1b9a0421bada34
Certificate serial:       019923A00028329A9393474A3C7A2E5C2052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
Manifest number:          0599
Signing time:             Sun 07 Sep 2025 10:01:52 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:52 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:52 +0000
Files and hashes:         1: SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl (hash: zqc+XKC0ZxmrGbt39u9iPxgtZyGnWkpWgrcl/DV6aVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:00:28:32:9a:93:93:47:4a:3c:7a:2e:5c:20:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482e4160d9808f92ffef093e9b1b9a0421bada34
        Validity
            Not Before: Sep  7 10:01:52 2025 GMT
            Not After : Sep  8 10:01:52 2025 GMT
        Subject: CN=8a18c14d43101eae93b24ca7a19f0e1006b4bc78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:1b:e8:81:66:f6:ad:d6:59:ab:44:64:66:
                    2f:18:67:fc:4c:bf:ea:ab:74:3a:53:9d:68:26:51:
                    6f:5c:81:30:a6:a3:16:6b:bd:e3:b7:3a:e7:12:f4:
                    15:57:7b:0a:49:b1:d5:82:8e:72:2e:49:99:32:60:
                    00:0c:e9:fb:84:7f:3d:04:54:e9:cf:15:c4:ab:57:
                    66:cb:4a:98:41:d3:53:fc:03:94:07:c9:1e:1a:7e:
                    d8:69:fd:da:3e:f1:1f:d1:03:e4:94:9e:fc:0d:0d:
                    9c:c7:68:bb:4c:de:9b:84:30:5b:23:4f:3e:a1:a5:
                    3a:9d:76:14:a9:0f:72:2c:43:82:bb:6a:91:0a:93:
                    8f:43:a0:a0:45:37:55:17:d3:35:4e:7d:d1:69:cc:
                    17:64:25:f5:47:cd:d5:9a:4c:80:a6:d6:83:d6:40:
                    e2:4d:42:f4:2f:b5:83:34:26:4f:f6:74:36:92:84:
                    9c:13:ad:41:7b:58:39:91:a6:9f:c9:77:db:ab:0a:
                    68:61:0c:f9:44:d4:db:70:17:99:c8:8d:37:28:80:
                    a1:bb:f2:ae:73:ff:26:2e:e4:79:9f:76:08:4d:27:
                    31:0f:0a:f8:a6:a2:b7:ce:9a:a2:94:2c:35:bc:18:
                    d2:b2:36:21:f1:16:10:a8:67:1e:94:65:eb:54:52:
                    7a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:C1:4D:43:10:1E:AE:93:B2:4C:A7:A1:9F:0E:10:06:B4:BC:78
            X509v3 Authority Key Identifier:
                keyid:48:2E:41:60:D9:80:8F:92:FF:EF:09:3E:9B:1B:9A:04:21:BA:DA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SC5BYNmAj5L_7wk-mxuaBCG62jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/e25874-715c-497f-8ee5-d41335f80dc9/1/SC5BYNmAj5L_7wk-mxuaBCG62jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:37:24:d9:4b:f9:92:8f:3d:05:77:be:ac:16:9f:9c:f2:
         f9:a9:57:73:4b:fe:6f:15:a3:d0:4f:bb:63:f1:d1:33:a7:f1:
         05:03:2f:41:9a:f0:fd:de:17:00:80:cd:8e:7f:4d:5e:51:e0:
         1b:35:6e:17:6c:15:5c:45:fa:b1:1b:97:7d:dc:2d:d6:81:8f:
         cc:7a:6e:a2:01:37:d3:86:d2:44:c8:d2:88:f5:b3:b6:2b:57:
         e0:33:e6:4f:27:89:9f:56:6e:1f:02:02:a7:c2:e3:15:78:d2:
         db:25:16:1f:d6:20:ec:da:34:55:49:59:ce:cf:55:75:85:b7:
         43:71:9e:f0:4a:e9:f7:c5:09:8a:56:b4:59:36:ca:48:70:b8:
         14:6c:c7:e0:7a:43:01:3c:9f:7e:3e:ce:a3:ee:7f:64:19:4e:
         a7:72:66:bf:80:37:cc:d0:da:30:15:56:5d:3a:54:1e:2e:3b:
         da:05:fe:4c:dc:99:2f:8e:2e:96:ca:79:34:7d:df:40:45:cd:
         27:96:b7:aa:e9:23:f4:a1:3b:e1:d3:86:17:68:17:4f:f1:e9:
         89:94:65:8b:1b:14:2a:19:6c:0a:2f:20:d3:62:d9:d8:8c:15:
         50:d6:81:1e:91:07:04:b5:08:73:ed:83:2c:00:ff:4c:49:91:
         16:69:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:10 2025 by rpki-client