Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
File:                     rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft (raw, json)
Hash identifier:          S2hKlgkBOiVqD3V72z5kFQngv57XGYWEsU+f7FJnq/E=
Subject key identifier:   DD:24:EE:54:6B:1F:F9:32:F5:36:74:82:8A:34:BB:78:75:73:FF:F1
Authority key identifier: AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86
Certificate issuer:       /CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
Certificate serial:       0199FFC76C34B5DB5F9DCA7D23D529473E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
Manifest number:          05C8
Signing time:             Mon 20 Oct 2025 04:01:23 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:23 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:23 +0000
Files and hashes:         1: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl (hash: tX2KGnXb4EP5qLJhmo6K64L6gCu6e+C2ITbZHVFTTnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:6c:34:b5:db:5f:9d:ca:7d:23:d5:29:47:3e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
        Validity
            Not Before: Oct 20 04:01:23 2025 GMT
            Not After : Oct 21 04:01:23 2025 GMT
        Subject: CN=dd24ee546b1ff932f53674828a34bb787573fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1b:ed:c2:d8:2c:09:06:87:27:0a:91:0e:ad:
                    3e:7f:b9:ae:28:93:a4:6e:e3:f9:1e:3f:97:b3:8f:
                    d6:cb:d5:01:f5:c9:8e:c4:22:4e:b5:fa:43:43:4a:
                    8b:e3:8a:ec:1d:9f:79:6d:9b:71:d2:7e:6b:77:d1:
                    cb:6c:ba:a6:e8:29:e9:6e:3d:3a:00:21:c2:64:59:
                    42:87:f5:54:4f:8c:da:1c:7a:f5:74:ac:32:64:48:
                    3e:ec:32:9f:75:e5:cb:5d:0c:03:5a:fd:a8:47:13:
                    69:4e:76:b2:89:1e:56:8d:d1:f3:b5:71:9b:d8:bc:
                    dd:76:d1:84:60:b9:f1:65:be:24:ca:d5:25:86:ce:
                    10:00:75:e2:83:87:e7:7b:56:d9:15:52:c4:a8:ba:
                    8c:83:bf:c2:df:04:07:80:cf:0f:b7:bc:76:59:c7:
                    25:1d:a8:f3:86:e6:fe:18:81:4d:93:9f:00:60:8e:
                    02:49:b3:b4:04:88:ac:1c:b1:b9:13:71:7a:dc:24:
                    75:73:ab:73:8f:5f:3d:25:7e:16:f7:d7:d6:09:1b:
                    68:f3:e2:cf:c7:22:4a:58:41:9a:28:40:e0:4a:47:
                    24:98:87:f1:05:b0:69:21:d7:7d:c6:e9:f0:17:84:
                    0b:51:71:60:d4:11:01:3b:28:7b:8c:f7:4c:7a:b9:
                    3b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:24:EE:54:6B:1F:F9:32:F5:36:74:82:8A:34:BB:78:75:73:FF:F1
            X509v3 Authority Key Identifier:
                keyid:AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:14:a1:4b:47:83:66:b1:19:f9:00:2e:01:e4:50:40:75:
         68:b2:04:d5:aa:44:c6:85:2b:f7:46:3e:be:67:80:37:c6:44:
         87:b7:94:e4:1a:70:49:5e:2e:17:aa:3d:6b:9f:ee:bd:14:61:
         98:cf:64:b0:ba:7c:21:11:4c:8f:a0:ce:99:ce:d2:1c:a2:46:
         f8:13:6f:4a:98:e4:d0:f6:30:c0:db:92:08:c6:58:78:ec:0a:
         36:b0:9c:5c:78:7b:b4:ee:78:a3:ab:b0:f2:f8:55:fc:ac:61:
         64:cb:65:08:dc:46:22:88:b7:2e:c2:b1:99:6f:28:cf:fc:47:
         88:ec:58:ba:e0:8d:c4:ee:5d:d1:71:06:1e:d7:d4:3d:3c:8b:
         9e:53:ed:cc:7d:1c:d3:3f:29:71:e5:84:b6:44:5f:5e:8f:c5:
         ce:16:c7:b1:74:39:a4:86:72:e4:f8:44:49:ca:5d:af:b0:05:
         6c:81:cd:b4:93:d5:4e:bc:16:15:d2:04:c9:23:97:81:3a:eb:
         68:ec:ab:66:42:4c:e9:33:20:98:fd:03:28:e2:52:82:34:8b:
         35:5a:37:d8:ce:5e:bc:e1:ff:a7:38:62:42:dc:05:23:d5:ea:
         98:29:8e:f1:6a:b4:1f:2b:6a:da:67:31:44:56:18:0b:d0:ba:
         af:16:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:49 2025 by rpki-client