Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
File:                     MWxm5C6ILUAfr6K_pCru56dEZ3c.mft (raw, json)
Hash identifier:          jDTv+31kvROkTNRPkg00g1M3+armpH6PsZtaB3hPVYI=
Subject key identifier:   32:B7:39:BB:20:91:2F:9C:9A:C0:77:15:F6:BA:50:0D:3C:9F:8D:8C
Authority key identifier: 31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77
Certificate issuer:       /CN=316c66e42e882d401fafa2bfa42aeee7a7446777
Certificate serial:       0198D473375C4EE1A74FB785C1E24713F3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
Manifest number:          15A9
Signing time:             Sat 23 Aug 2025 01:02:57 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:57 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:57 +0000
Files and hashes:         1: MWxm5C6ILUAfr6K_pCru56dEZ3c.crl (hash: 5uU/QhqHu/hYTvk93ATdXzGZpocW291uRhcvqgCtTtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:37:5c:4e:e1:a7:4f:b7:85:c1:e2:47:13:f3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316c66e42e882d401fafa2bfa42aeee7a7446777
        Validity
            Not Before: Aug 23 01:02:57 2025 GMT
            Not After : Aug 24 01:02:57 2025 GMT
        Subject: CN=32b739bb20912f9c9ac07715f6ba500d3c9f8d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:32:d6:57:3b:1c:6b:14:4d:de:0b:56:22:5c:
                    09:b0:a7:99:e4:a5:de:e3:0c:23:44:e2:fe:c9:01:
                    e1:1f:71:ba:67:01:d9:62:78:fa:96:0d:5c:4f:fb:
                    f5:0d:07:ca:43:f1:dd:00:9d:f8:d2:d2:e1:e8:be:
                    2f:d7:ff:f7:1f:1d:dd:8a:7d:9f:37:c4:23:93:58:
                    35:4b:48:14:53:93:32:b9:05:c6:c7:9a:82:b6:4a:
                    3e:eb:f8:a5:b4:0b:80:e6:64:aa:b9:60:b4:57:e1:
                    5b:3e:35:7a:b6:76:32:2f:c9:5f:39:12:98:08:3c:
                    ef:f9:ac:9b:5c:2b:a2:f2:97:a5:64:6f:f5:e5:0a:
                    62:9d:63:3f:a4:56:74:88:04:c6:01:40:2e:53:07:
                    21:3a:09:30:12:9a:66:26:b3:a6:26:c5:1c:7f:f6:
                    b3:be:bb:6e:8d:56:78:fe:d7:97:4a:0f:2d:13:5c:
                    bb:69:15:3c:fb:07:b6:19:a8:29:37:62:35:d0:d4:
                    86:78:31:fe:14:16:a0:13:7d:21:eb:f1:20:8c:20:
                    b7:f8:55:2e:35:16:9e:30:f8:30:c9:e6:0d:bf:77:
                    9a:5f:e2:5f:c9:81:6f:90:d8:19:ff:0d:b0:ba:ee:
                    6a:0e:1c:eb:06:cb:d5:d9:d3:5a:9d:94:69:e5:de:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B7:39:BB:20:91:2F:9C:9A:C0:77:15:F6:BA:50:0D:3C:9F:8D:8C
            X509v3 Authority Key Identifier:
                keyid:31:6C:66:E4:2E:88:2D:40:1F:AF:A2:BF:A4:2A:EE:E7:A7:44:67:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWxm5C6ILUAfr6K_pCru56dEZ3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c0f652-5c1c-4afa-86f7-98d613b8ddbd/1/MWxm5C6ILUAfr6K_pCru56dEZ3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:93:2a:c2:8f:38:3e:79:9e:90:98:c6:93:c1:b5:85:54:1c:
         ed:c3:81:0e:8f:7e:f9:b3:6c:bf:6c:12:e7:80:92:af:87:71:
         1b:17:46:f8:3a:2b:84:d6:62:6a:80:9e:21:0e:bf:2f:3b:d1:
         60:99:73:93:4f:46:5c:bc:17:7e:a8:f8:71:14:5e:c1:b5:11:
         04:9f:4c:8c:66:c2:a1:9f:e0:b9:73:c1:63:f6:fb:9a:03:dd:
         f0:f9:48:e2:06:9c:e1:f8:12:ff:9c:a8:3f:1f:f4:14:50:c8:
         6a:b4:c0:43:2b:0e:ff:c2:38:24:a8:5c:48:41:f4:6b:af:fb:
         58:df:07:9c:26:05:a3:5c:ba:c7:f9:02:81:99:d1:e6:56:4f:
         38:7c:3b:32:3f:99:c6:26:51:b8:54:8d:df:51:9f:44:59:0e:
         a3:f7:cf:ca:86:82:66:e0:4b:91:4c:7d:e0:35:3d:55:3f:51:
         55:9d:19:1a:43:0a:eb:dc:93:79:9b:3d:e5:70:4c:60:1f:b0:
         3b:4e:cf:f7:17:ed:45:ca:b8:c7:36:0c:01:4a:f4:79:46:ed:
         dd:e0:a7:cd:4b:d3:10:7c:50:2f:f0:c3:f4:71:21:f1:8c:57:
         84:dc:f8:ee:3f:f4:90:48:9a:dc:33:46:1a:9c:59:a8:29:68:
         1d:8f:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:21:53 2025 by rpki-client