Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File:                     01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier:          1FzM6zoTX/LFL8dAL/qTNWwMyu/jJ1JcN/wxPMNCa14=
Subject key identifier:   70:2E:6C:3E:61:B0:23:16:A9:4F:C1:AB:1C:D1:09:C3:85:5A:95:8D
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer:       /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial:       0198D85061A4A7D76B83CE476C5D5A051F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number:          0100
Signing time:             Sat 23 Aug 2025 19:03:23 +0000
Manifest this update:     Sat 23 Aug 2025 19:03:23 +0000
Manifest next update:     Sun 24 Aug 2025 19:03:23 +0000
Files and hashes:         1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: u8pGwJoQ5Ga1etBLPUYAlTCK59LVDlGCUKRGCZIcuv4=)
                          2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 19:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:61:a4:a7:d7:6b:83:ce:47:6c:5d:5a:05:1f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
        Validity
            Not Before: Aug 23 19:03:23 2025 GMT
            Not After : Aug 24 19:03:23 2025 GMT
        Subject: CN=702e6c3e61b02316a94fc1ab1cd109c3855a958d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:30:c7:d3:2d:7c:50:02:6b:00:34:63:0c:00:
                    2a:8e:5f:53:5f:a2:02:db:75:c6:76:2b:3f:7d:94:
                    b3:b6:71:d2:db:f0:2b:0d:79:2a:73:f1:f4:c7:9c:
                    99:34:2a:62:a1:10:38:ee:1e:21:d4:eb:cc:aa:58:
                    7f:2d:fd:ad:2b:5b:06:7f:40:3a:f5:65:55:a4:a3:
                    d0:06:64:07:a8:ae:2a:39:68:e3:a0:be:89:0d:6f:
                    f1:c7:16:b6:e9:92:39:44:6e:a3:8f:f1:60:42:32:
                    1d:00:78:23:f8:c0:1a:91:fe:97:61:03:dd:84:19:
                    48:82:e7:05:64:29:80:5c:3f:71:69:8f:61:2a:e9:
                    fb:b1:ae:e3:21:d5:e3:3c:71:65:73:a0:a4:93:2e:
                    d4:0a:f4:19:f9:71:ea:61:d6:c4:2a:ab:86:df:96:
                    3c:b1:e0:74:2f:16:1e:ed:68:85:13:13:97:e5:c0:
                    80:e4:2b:6b:7b:07:6c:ff:94:43:8e:e4:11:d6:2f:
                    15:5f:7d:7e:19:d4:69:37:8c:9c:77:61:65:81:a2:
                    99:a4:8b:0b:8a:8f:f0:e5:de:84:a3:6d:1b:a3:ff:
                    cb:e7:0f:7d:0a:8d:43:61:db:26:ab:6c:0a:f1:a0:
                    21:3c:90:eb:52:6f:cd:97:10:d8:05:b3:c1:e6:91:
                    f1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2E:6C:3E:61:B0:23:16:A9:4F:C1:AB:1C:D1:09:C3:85:5A:95:8D
            X509v3 Authority Key Identifier:
                keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b3:18:bd:9b:94:50:13:44:80:cc:96:9a:d9:8f:a0:12:32:
         a6:e4:15:ef:ee:4e:b2:89:83:c5:e7:7b:d2:81:ef:70:b9:0f:
         52:ef:80:6f:1c:00:08:f5:f5:1b:13:44:55:99:44:c8:d4:31:
         39:1c:0d:73:82:b6:1c:dc:df:21:2e:bd:79:c7:49:4c:d2:08:
         9d:ba:45:08:ea:b8:84:a4:93:e0:eb:6c:fd:9a:3a:af:bf:59:
         f1:75:f2:7b:0f:d4:1e:48:74:8c:82:8f:9e:b3:29:e1:b9:f1:
         e2:68:18:2a:71:0b:a9:cd:ae:49:9d:b1:ca:52:e3:07:13:11:
         c5:28:e5:33:1e:88:6c:e9:fd:c9:0a:e7:6b:33:4a:49:57:c1:
         6f:7d:c4:b6:22:55:ed:74:b6:db:04:6d:3e:69:e9:0d:96:95:
         a4:97:b1:c4:ba:6d:cf:96:30:39:e5:5f:fe:ae:68:8c:44:68:
         22:2f:c1:be:cc:1e:26:fc:34:87:b3:16:49:97:2e:35:66:d3:
         5c:33:f4:63:a6:fc:7e:cc:31:c6:6b:09:b8:eb:97:b8:54:0c:
         87:5b:86:0c:51:4d:e1:84:fd:50:5a:95:8a:18:e5:c4:f0:b1:
         aa:09:3d:5c:c0:25:b6:e8:a8:e1:2d:c6:56:fb:0b:8e:d7:53:
         c6:4d:b0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:37:36 2025 by rpki-client