Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File:                     MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier:          fufu+yHJnhafARupuT2Fac3/oGnr6wCmznInBY2j9cM=
Subject key identifier:   15:CC:C2:2E:46:AE:8B:E4:9D:28:F3:79:A7:19:53:29:CA:B2:B3:2C
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer:       /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial:       0199FDDA4FA9F0C99336ACC810AFCF825B65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number:          0A6A
Signing time:             Sun 19 Oct 2025 19:02:46 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:46 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:46 +0000
Files and hashes:         1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: ZMhd0UokyrSp5o9zunypOBuXDGn6JSYkSRhFxGssWOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:4f:a9:f0:c9:93:36:ac:c8:10:af:cf:82:5b:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
        Validity
            Not Before: Oct 19 19:02:46 2025 GMT
            Not After : Oct 20 19:02:46 2025 GMT
        Subject: CN=15ccc22e46ae8be49d28f379a7195329cab2b32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3f:c6:71:fa:10:81:9b:77:52:ca:63:13:91:
                    3d:47:b1:55:3c:f1:81:e7:52:af:90:ae:1d:95:d4:
                    78:fa:2b:9e:fd:9e:bb:86:7a:5a:49:30:71:0e:9a:
                    f2:b7:13:a3:d9:1c:33:f7:0b:35:a8:77:15:97:64:
                    67:1c:a3:a8:66:be:35:db:2c:b9:e7:ef:9d:28:51:
                    6f:5c:76:28:e1:1e:34:27:2e:6a:07:31:f8:f0:37:
                    85:1a:7a:83:a4:26:60:98:a6:5b:4c:3e:c3:19:90:
                    62:a1:6b:c0:1e:25:a1:5d:00:e5:f5:87:b3:cb:35:
                    c4:1d:c6:84:4f:98:2a:3a:e0:6c:f8:d2:bb:fb:1d:
                    8d:01:ee:4c:18:71:9d:98:7f:41:f7:12:f6:9a:52:
                    b1:57:6a:3f:14:b9:f6:b5:fe:46:ab:f4:b8:b5:3a:
                    23:45:30:b9:9c:8b:64:73:d4:d8:11:90:59:10:7c:
                    b5:f4:b1:85:9b:ab:e7:76:78:d7:7c:9e:66:28:e4:
                    a1:3a:7b:80:16:02:0c:57:19:0d:fb:80:68:1f:d1:
                    b9:37:11:67:31:6a:ed:d0:c2:2b:04:f7:8b:17:26:
                    39:9d:59:9a:ba:96:2b:8c:72:d8:fc:dd:0e:a1:05:
                    b2:9d:56:0d:8c:f8:c2:df:8d:ad:a1:b4:d2:73:70:
                    a0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:CC:C2:2E:46:AE:8B:E4:9D:28:F3:79:A7:19:53:29:CA:B2:B3:2C
            X509v3 Authority Key Identifier:
                keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:65:d4:81:b3:ea:e5:0e:c7:04:a4:9c:34:2c:94:de:ff:ae:
         e5:e9:72:b3:e3:3c:f1:cc:80:5f:e0:3b:ca:db:7d:f3:66:55:
         21:32:bb:6d:47:46:16:a2:da:f0:1e:20:99:07:ee:20:e7:78:
         8c:a7:c8:c4:7f:29:c2:f4:0f:cc:c6:85:4b:8b:c6:9a:39:c8:
         fb:bb:f9:22:02:d3:94:9e:df:ff:2e:fd:f9:fd:09:51:5e:1a:
         17:b7:3a:4b:7c:04:51:2c:29:24:98:6e:c2:4e:79:4e:ed:a9:
         b9:61:bd:88:50:85:62:25:6f:ef:f6:3a:b6:df:19:c4:56:2a:
         16:82:db:fb:72:9c:a9:70:3b:59:f0:e1:2b:db:a0:e0:13:a7:
         97:74:4a:c8:c8:b9:fb:be:f1:42:e4:7f:60:c5:51:32:86:c1:
         e9:3e:7b:8e:75:9d:f6:1f:80:19:19:e4:51:ab:e7:1c:53:d9:
         1b:72:fc:aa:c7:ee:63:7c:1c:28:85:8a:1a:49:a6:1c:cb:70:
         3b:90:3c:35:9f:f1:a5:29:c0:4c:a3:b1:c8:10:47:92:7f:e0:
         16:35:3f:86:04:ff:14:93:76:41:e9:a4:3c:3c:20:ed:7c:e9:
         82:0c:4f:92:1b:6e:26:1b:99:36:28:a6:b2:e0:ee:19:26:8a:
         f5:87:23:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:36 2025 by rpki-client