Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          UyI1BENQHqKr5+jRnF3L7C3692lo29ABFJsVN1L3F1E=
Subject key identifier:   89:F0:21:3F:20:28:12:75:FF:66:3A:5B:3C:F0:EC:5E:18:54:7B:62
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       0199233137242B22F18F644A7211AB2DA23D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          05D1
Signing time:             Sun 07 Sep 2025 08:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:51 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: uw5yvLSdgY6KO2co5jjgsMm8BWAEpwPRGhEWnoQKTAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:37:24:2b:22:f1:8f:64:4a:72:11:ab:2d:a2:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Sep  7 08:00:51 2025 GMT
            Not After : Sep  8 08:00:51 2025 GMT
        Subject: CN=89f0213f20281275ff663a5b3cf0ec5e18547b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:fb:28:aa:d1:0b:f4:15:69:c9:ed:27:b7:
                    97:06:6f:6e:20:a0:04:d4:a8:1d:ca:bb:ff:ce:e5:
                    ca:15:1e:15:aa:8a:f7:67:d5:76:4f:06:89:f1:7f:
                    d6:89:2f:00:e8:a7:26:05:df:33:4e:bc:97:f1:03:
                    c4:e0:2c:d0:78:0b:8a:15:a9:a7:d5:fa:a8:2d:b8:
                    f3:25:e7:5e:9a:9d:33:97:09:6d:33:27:4f:d1:23:
                    18:da:7c:30:24:4c:35:7e:c6:f5:88:3d:15:af:f0:
                    6e:50:7e:7c:51:61:71:ef:ba:02:fa:20:1a:22:1d:
                    5a:48:13:86:3a:f3:d6:4a:a1:1a:c6:db:20:7a:6e:
                    4c:6a:45:ed:3a:a0:a9:9d:89:a0:b6:39:eb:8e:0f:
                    ad:b3:78:77:da:4e:69:8e:a4:b1:d2:ce:d0:15:7e:
                    40:b7:f0:5f:8d:83:d6:7f:9b:bb:43:d2:a6:bf:6c:
                    bb:cf:e5:8b:bc:69:9b:ee:b0:3f:32:b8:49:0e:67:
                    62:93:53:1c:7d:ca:4b:43:3c:52:d8:da:71:7d:d4:
                    b9:1f:b5:16:ed:fc:ac:0b:d7:c3:9d:bf:4f:7f:d9:
                    f3:8f:3a:b8:e6:98:aa:75:d2:3f:f0:92:32:0b:5e:
                    c5:96:07:b4:1c:6f:1f:a6:6c:b2:ef:9e:27:2e:4e:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F0:21:3F:20:28:12:75:FF:66:3A:5B:3C:F0:EC:5E:18:54:7B:62
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:86:da:f2:b1:d9:ec:4b:b5:6b:cf:13:8f:21:46:24:8a:d8:
         3b:01:5e:63:f1:46:9b:93:e8:17:22:80:b2:ae:ec:4b:4f:de:
         a1:1b:5f:ec:19:d9:bf:5f:15:6b:1d:2f:2b:28:5f:28:c0:bd:
         ca:76:e4:ac:ff:5e:b3:d9:eb:08:01:3e:bb:34:46:27:64:f5:
         31:47:8c:9b:81:c9:15:b3:e3:26:44:13:9d:cb:c8:30:eb:e5:
         bc:f6:46:b1:da:21:72:69:46:20:52:c6:d5:ca:83:67:44:c6:
         b8:68:b1:92:41:29:45:24:af:16:9c:f4:91:97:f0:42:20:a5:
         c1:8d:13:d1:2e:18:b3:6e:b0:8e:c6:91:0a:bd:01:e1:a6:2c:
         4f:4f:ec:b0:33:f7:88:d1:98:3b:3c:d4:25:5a:ae:db:fe:9b:
         be:5b:d4:a4:68:4c:42:a1:80:08:a3:fe:78:80:04:54:15:9e:
         d3:14:81:1f:99:fe:62:fe:73:b1:91:69:0d:c8:b7:8a:b1:a4:
         ed:f6:af:96:10:fa:07:37:8f:79:82:54:bb:5a:73:78:86:ea:
         a1:4b:97:2f:47:26:e2:78:e6:87:da:35:d5:aa:78:56:fb:d7:
         95:4a:e9:94:c4:2c:c8:74:70:cc:dc:15:a0:05:67:60:5f:d5:
         56:11:6e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:42 2025 by rpki-client