Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
File:                     MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft (raw, json)
Hash identifier:          ypBuu87teWMvAucxwSHPS+k7tUn6t1XK3GOr69xTFtE=
Subject key identifier:   73:C5:51:8D:D7:9C:47:FB:6E:2D:FD:6B:A1:62:96:4B:CA:44:C2:3E
Authority key identifier: 30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57
Certificate issuer:       /CN=30f08f840e317e95205ba13497d9dbc7377b9e57
Certificate serial:       0198D65FB781B1F0E617339994C206A3DA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
Manifest number:          06C5
Signing time:             Sat 23 Aug 2025 10:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:53 +0000
Files and hashes:         1: MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl (hash: +8SCiq5UQ+icaFGBg4aDtitCuKeLXU803R2Y2PacQ8o=)
                          2: w63CtVkaTB-I3bLthiRIKcHJ1z0.roa (hash: PphDOFm6VhjC/oLMpXqjasemzNyOPtAOJruxm2WGQGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:b7:81:b1:f0:e6:17:33:99:94:c2:06:a3:da:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f08f840e317e95205ba13497d9dbc7377b9e57
        Validity
            Not Before: Aug 23 10:00:53 2025 GMT
            Not After : Aug 24 10:00:53 2025 GMT
        Subject: CN=73c5518dd79c47fb6e2dfd6ba162964bca44c23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:a3:7a:86:19:6f:61:0e:02:1c:36:03:89:
                    2c:b5:cb:e2:66:43:c8:9d:e3:68:94:b7:fe:f8:a7:
                    39:8d:0b:dc:8b:61:f9:31:39:c6:6f:11:60:03:13:
                    03:5e:b0:c9:4d:c1:af:b0:20:8a:93:ad:de:f7:52:
                    d2:3a:08:ae:02:e3:28:4f:68:06:bb:12:d9:2a:12:
                    f8:8b:b3:02:aa:54:3f:74:73:ad:dc:0c:8b:e6:91:
                    2c:ce:e9:4a:ee:6d:51:a7:56:5e:42:41:7b:07:57:
                    9f:a4:39:61:ea:23:bd:48:69:30:80:c5:bf:05:2f:
                    e7:5d:51:ec:c5:c2:76:6b:b7:84:f1:ad:cc:59:fa:
                    9a:2a:67:6f:b7:95:89:1a:43:30:22:a2:08:10:e0:
                    1d:c4:6d:e7:49:7d:1f:c1:a1:15:28:fc:f9:b6:94:
                    5b:a6:4b:25:83:4c:c9:a2:40:9d:a3:62:01:62:59:
                    72:06:83:07:c8:65:64:80:fb:5d:d3:e8:f8:73:07:
                    ae:b9:a9:7c:c4:a5:65:a6:b4:8f:06:07:88:39:52:
                    89:9a:e8:f0:7b:64:54:26:04:d4:d6:08:fc:2a:03:
                    c4:4f:20:b8:c5:1d:b6:19:56:df:cc:16:8b:6b:e7:
                    a6:54:c7:4b:14:6b:73:57:dc:b7:36:13:a1:d2:af:
                    fe:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:51:8D:D7:9C:47:FB:6E:2D:FD:6B:A1:62:96:4B:CA:44:C2:3E
            X509v3 Authority Key Identifier:
                keyid:30:F0:8F:84:0E:31:7E:95:20:5B:A1:34:97:D9:DB:C7:37:7B:9E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPCPhA4xfpUgW6E0l9nbxzd7nlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/adc0fe-a24f-4736-afb8-796b38796f69/1/MPCPhA4xfpUgW6E0l9nbxzd7nlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6b:ab:bf:68:6e:46:dc:4c:3d:2f:7b:1f:fa:0f:37:4c:5a:
         05:b0:a2:cb:20:c2:44:25:78:60:71:64:9d:d3:93:75:3c:0b:
         8e:ce:e5:7a:6f:40:a6:4b:ec:21:2e:88:84:53:8a:ba:ad:14:
         b3:4d:a3:7c:67:9c:d7:96:63:89:fb:0f:da:20:13:09:50:b3:
         9e:74:ba:a8:69:eb:87:52:a8:34:c9:8e:c4:90:28:70:0c:83:
         b4:46:35:c6:ac:64:1e:39:e4:b7:ba:4f:66:3e:98:94:04:64:
         50:a8:86:3a:c6:a7:94:7a:43:e8:54:42:92:53:56:57:2b:f8:
         81:15:2a:e3:81:9c:69:1b:50:97:5c:33:9c:32:34:df:e3:a1:
         28:11:39:72:fa:ab:55:dc:39:63:12:dd:f3:f2:7a:92:aa:96:
         86:41:1b:b6:43:0e:c6:5e:11:3f:95:38:a7:25:d8:12:fe:18:
         83:51:9e:f1:1e:55:c7:8a:dd:42:27:57:f8:3b:e5:20:20:85:
         30:d5:13:a5:c8:97:bb:5c:c1:e8:25:c9:b2:f9:f1:00:f9:3e:
         a7:bb:74:0f:dc:43:d3:20:6a:08:89:97:22:cc:38:39:bd:3a:
         3b:3e:1e:46:d0:49:df:43:33:66:96:41:3d:bd:e5:c9:c5:9c:
         40:4f:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:06:35 2025 by rpki-client