Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          TZ+3fm5xxkZgl8xL0g/j9IpWtBHfROZ0koSta8F22f4=
Subject key identifier:   F6:74:B9:5D:10:39:12:4C:C2:6D:40:BA:58:B0:8B:15:00:6B:E9:BA
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       0198D65F194FE4E8AD1C4CACA814C0898514
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          081E
Signing time:             Sat 23 Aug 2025 10:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:13 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: qaN7Q12KVeNmRM3LpX4cpTTEUfgxIC9dr8gMGT4s+w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:19:4f:e4:e8:ad:1c:4c:ac:a8:14:c0:89:85:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Aug 23 10:00:13 2025 GMT
            Not After : Aug 24 10:00:13 2025 GMT
        Subject: CN=f674b95d1039124cc26d40ba58b08b15006be9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:16:0f:e1:67:b7:0c:a8:a8:01:0e:98:59:
                    ee:a7:0c:82:1f:43:93:b7:85:39:eb:58:79:5d:cc:
                    8e:71:99:67:8c:84:89:6d:16:c2:9c:14:d4:59:ab:
                    7d:57:ff:cb:f4:43:ef:9d:22:16:31:cc:3e:3e:e3:
                    42:8b:bc:4a:5c:e3:07:c7:8d:1d:85:5b:cb:4a:7e:
                    58:10:52:ff:9b:c7:1b:75:5b:a9:bc:23:8c:db:80:
                    7f:5f:7d:9b:5c:79:5f:b6:d2:c3:ed:b0:8e:26:af:
                    3c:26:9b:c6:b7:fe:bb:45:f1:52:e0:64:0f:15:9c:
                    ed:ee:4b:a3:71:f8:a3:4b:b1:4c:84:a1:7e:e4:ee:
                    16:93:3b:53:4f:7c:57:c8:79:4e:de:85:42:1d:4f:
                    1c:ea:b1:23:55:1c:0a:d2:c1:5a:bf:93:f9:61:05:
                    15:67:ff:a8:68:0d:9f:3a:db:aa:11:95:a5:50:ef:
                    b9:ab:75:51:53:45:06:73:ed:3a:e6:f6:e5:b5:59:
                    7b:50:32:09:b6:1c:c3:34:42:9a:ee:30:5a:dc:94:
                    ac:7d:54:75:73:41:1a:30:61:2d:ba:70:c1:d9:17:
                    a6:a1:ff:b1:85:4c:fb:4b:f1:20:ba:f3:62:89:e8:
                    2c:07:3f:1a:df:4f:b1:99:8a:74:bf:0e:7b:5e:f2:
                    cd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:74:B9:5D:10:39:12:4C:C2:6D:40:BA:58:B0:8B:15:00:6B:E9:BA
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f0:3a:00:97:9f:14:da:fb:c6:c0:85:f3:b6:6d:18:28:78:
         25:c4:8b:bb:13:d7:8b:4d:6d:df:2c:5c:c4:6c:0d:5a:80:39:
         45:f7:6d:3f:61:8d:0c:8e:6e:c3:93:77:d1:c0:bd:0b:c0:50:
         88:d3:8b:41:76:c8:4b:e1:c9:35:2b:2c:34:5f:6f:14:71:d7:
         0f:8d:42:78:73:cb:c7:63:cd:30:45:3d:1c:65:9c:b6:e6:1b:
         c4:93:37:1e:b2:49:6d:6c:42:30:b3:6f:9d:b5:2b:d3:0c:20:
         03:49:71:2e:f4:07:66:f2:aa:b8:7e:f6:f0:51:9f:64:2e:5d:
         c3:1a:81:e5:88:cd:aa:60:2a:b1:16:93:d4:a4:10:39:2d:1d:
         71:1d:24:10:c7:4e:bb:92:3e:35:38:5b:b3:7b:10:bd:bd:48:
         17:33:fa:67:f1:6a:6b:f9:29:fb:f7:d7:6e:5a:f7:f3:88:6f:
         a0:22:2c:73:a6:9f:96:47:10:ee:48:c6:96:c9:d1:06:58:a1:
         3b:97:0c:88:e4:40:5e:e4:e9:aa:6a:a6:ff:66:12:22:e9:25:
         95:3f:71:c6:19:ee:5a:e9:98:12:23:c7:86:1c:8b:8a:32:a5:
         22:2a:2c:e5:f7:f7:b6:ee:fc:b4:0f:4f:95:08:4c:9d:d0:b0:
         27:96:22:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:34 2025 by rpki-client