Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
File:                     rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft (raw, json)
Hash identifier:          ZrWTXHJWcPYIx4WlUdqe8hOPFK+WqQrMIPHMmnaKeE0=
Subject key identifier:   C1:72:EC:C2:F8:3D:C2:94:5C:39:79:B8:5A:83:05:51:A7:7A:2E:D8
Authority key identifier: AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86
Certificate issuer:       /CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
Certificate serial:       0198D65F23618B2C7ACB8DE1F500CEDB6248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
Manifest number:          052E
Signing time:             Sat 23 Aug 2025 10:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:15 +0000
Files and hashes:         1: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl (hash: COYApHCCkCJgELcIi+8ldit8CdUjOZx2WEdmVn54YEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:23:61:8b:2c:7a:cb:8d:e1:f5:00:ce:db:62:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
        Validity
            Not Before: Aug 23 10:00:15 2025 GMT
            Not After : Aug 24 10:00:15 2025 GMT
        Subject: CN=c172ecc2f83dc2945c3979b85a830551a77a2ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:39:c2:92:17:ce:fe:71:e3:48:c3:c2:18:
                    ad:f4:a2:d9:e1:e6:73:d2:41:29:ea:06:45:85:ba:
                    67:e9:38:c6:6b:be:6a:69:f0:df:79:4d:bd:66:af:
                    24:7e:5a:1a:33:52:7e:45:66:d0:2a:6c:f8:ba:26:
                    85:fa:7c:2b:e8:f2:55:cc:58:29:5e:77:2e:ea:ad:
                    3e:de:fc:ac:c1:b4:74:92:0d:59:68:0d:f3:57:12:
                    0e:e2:90:b8:e1:6c:c9:62:26:b8:d4:fa:3c:51:a5:
                    83:a3:d6:76:f3:ce:61:c9:a8:2d:14:2b:6d:7a:7e:
                    51:c5:7b:14:63:a0:5f:6a:1c:29:78:8b:64:00:c2:
                    01:55:31:b8:40:06:ea:ad:19:49:61:a0:39:9e:c0:
                    f9:a8:23:6b:0f:b0:f2:00:4f:89:c7:2e:de:32:1b:
                    10:7e:f4:ec:25:a9:9a:da:93:1a:e6:b9:13:a7:a0:
                    10:d2:0f:bc:6b:de:8f:17:2a:da:56:e6:ef:38:b2:
                    47:af:9e:81:0e:85:06:3b:cf:6e:ea:16:87:e0:d0:
                    73:4e:f6:6c:45:8d:25:fc:ad:f0:ab:72:9e:86:29:
                    69:b6:52:77:11:8b:40:b9:aa:55:c5:1c:eb:0d:a6:
                    24:4e:52:06:a8:b5:dc:ea:a2:01:80:41:ad:81:29:
                    b7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:72:EC:C2:F8:3D:C2:94:5C:39:79:B8:5A:83:05:51:A7:7A:2E:D8
            X509v3 Authority Key Identifier:
                keyid:AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5d:af:22:00:55:43:8c:ea:d5:b3:87:3b:9d:28:18:39:2d:
         a3:f4:4b:22:0e:6e:65:27:27:e4:b6:f7:d1:10:31:0d:b2:93:
         a9:8f:a8:86:8c:71:24:8f:07:82:e0:e9:55:5d:a2:d2:8b:92:
         07:9e:82:95:bc:2a:4d:07:2b:48:4f:30:3c:eb:8f:6a:ca:87:
         78:3c:66:4a:bc:0d:e6:bc:92:14:f7:03:bd:14:d2:d5:62:a7:
         6a:56:57:e2:20:4e:13:64:50:63:6a:53:dd:37:97:56:75:81:
         8f:fd:cc:d2:5e:1c:be:be:4d:a9:e7:f4:fc:cf:1e:bd:ef:75:
         8f:42:a5:b4:04:a8:37:3d:92:0e:ad:6b:cf:27:26:61:ed:fe:
         21:cd:e9:d0:1d:83:4b:04:a4:5c:a2:df:52:d9:0b:82:79:73:
         ab:28:f0:45:0b:39:b7:c4:a8:06:e9:99:8d:81:a0:29:33:e8:
         65:aa:2f:1f:3f:1b:99:9a:7f:4c:3d:5f:92:23:6b:e2:d4:97:
         e7:f4:e0:d6:d0:d5:54:e5:0e:f0:8d:36:7d:2d:9e:36:c1:8f:
         46:ea:14:bb:dd:f3:2d:bc:ac:5b:ca:8c:c7:9c:94:47:67:fa:
         38:0e:9d:a4:5d:e4:e2:84:17:0d:7d:52:40:2d:47:0a:ff:28:
         8e:aa:20:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:26 2025 by rpki-client