Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File:                     MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier:          er4/zJhh33ZCoYdc3c9NP+J8TtPfpWwDrjf/Ql9wjUk=
Subject key identifier:   95:C1:EE:F8:D7:A5:F8:E3:E8:66:D8:04:77:FA:5C:B0:48:0C:DC:44
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer:       /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial:       0198D5BBF6987BE11658582820AFB1561BC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number:          65
Signing time:             Sat 23 Aug 2025 07:02:01 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:01 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:01 +0000
Files and hashes:         1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: ttMe0iwl8C5ANtDmqGrg7xJU+72VuxINwWvh6dTaxhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:f6:98:7b:e1:16:58:58:28:20:af:b1:56:1b:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
        Validity
            Not Before: Aug 23 07:02:01 2025 GMT
            Not After : Aug 24 07:02:01 2025 GMT
        Subject: CN=95c1eef8d7a5f8e3e866d80477fa5cb0480cdc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0e:71:71:74:f6:a2:51:fc:98:db:3a:74:a6:
                    a7:15:9d:83:5c:f6:7e:af:46:c6:53:d1:7e:e1:fa:
                    a3:ab:43:23:42:39:fa:7e:bb:f7:56:f5:5a:1e:d0:
                    13:5d:d6:0d:a9:af:c1:1c:de:0b:ea:e4:6c:de:d7:
                    68:4a:4b:31:9a:dd:5f:78:35:ab:69:8b:4c:a0:98:
                    7d:79:72:69:a9:ec:0c:0f:07:1d:bd:d7:77:cc:d7:
                    3f:2b:a8:ac:ba:4f:f9:96:c1:cd:6a:19:8a:ce:e5:
                    4d:ff:cc:79:6d:0e:b0:c5:d8:6a:40:7f:e0:da:b5:
                    26:cc:09:0e:97:f6:98:09:15:73:c0:3d:1d:25:8e:
                    b0:98:4e:86:63:55:6f:63:8e:4a:43:f2:a2:f1:91:
                    a5:ae:fe:1c:7f:20:bb:ef:60:94:45:68:2a:b6:bb:
                    00:c9:da:6a:2b:47:b0:60:e9:71:2f:eb:2c:ee:1c:
                    d5:3b:92:b3:fc:b7:9c:ae:64:d9:9e:1c:fb:c4:14:
                    8e:84:28:07:77:91:98:da:db:97:2e:04:ba:76:68:
                    59:1b:71:29:73:1e:ed:3d:78:6e:44:52:71:d1:fe:
                    02:2a:62:0c:6a:bd:19:47:3e:8b:06:a7:3a:4c:5e:
                    1c:8f:e7:a0:ec:6d:12:ac:d7:cf:cf:7d:65:9d:7a:
                    b7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C1:EE:F8:D7:A5:F8:E3:E8:66:D8:04:77:FA:5C:B0:48:0C:DC:44
            X509v3 Authority Key Identifier:
                keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:44:21:7e:82:17:ba:57:bc:79:5c:2b:f6:7d:9e:d8:65:37:
         c8:1f:3b:d8:ee:78:b9:c3:d5:72:20:5f:fa:27:9e:e5:f4:5a:
         66:1b:94:06:8c:3d:09:77:bd:9f:61:38:65:bc:04:e8:a2:2e:
         11:5a:d2:f6:9b:1b:5c:01:55:4e:d4:2c:54:0c:05:50:03:9f:
         d5:84:c8:18:0b:cf:10:a3:6e:99:8f:4d:a0:32:d3:df:01:b0:
         0d:e2:23:3d:c1:a7:04:f5:32:aa:7b:d5:af:dc:fd:92:ad:2e:
         1b:3b:bc:19:a6:f0:46:46:6f:1a:ff:11:08:76:f7:9f:8e:36:
         f9:98:bb:cf:c7:7b:b0:74:22:f6:dc:2c:a8:2e:73:c8:d5:57:
         52:af:b1:dc:9f:ba:1c:65:80:43:e5:fd:4f:58:db:e6:ca:e5:
         4d:2e:58:99:58:95:cf:0c:de:84:47:82:52:43:1f:e3:25:cc:
         4b:14:73:28:c5:34:68:a3:9b:81:77:e3:7b:48:4c:6a:94:d9:
         13:4c:bd:f7:7f:74:c3:58:26:56:e4:65:9a:a8:84:48:6d:a4:
         2d:04:3a:01:4f:38:01:c8:ff:a2:c7:16:57:b9:0f:13:04:8c:
         44:6f:8f:5f:41:0c:3a:2d:28:ea:6f:3c:10:92:c5:77:0a:59:
         18:6f:d6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:21 2025 by rpki-client