Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
File:                     MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json)
Hash identifier:          USJ/1pqPcRsHcqCwu9zP/ocWKZK69dgTDt0gxp7Z7QM=
Subject key identifier:   15:1F:D3:C4:08:0C:94:C2:DD:8C:72:74:89:73:42:F8:57:A5:3F:DE
Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F
Certificate issuer:       /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
Certificate serial:       01984776B01FA17F4376AFA40A8D8B0A1296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
Manifest number:          0987
Signing time:             Sat 26 Jul 2025 16:00:17 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:17 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:17 +0000
Files and hashes:         1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: pXQC1T5dGszP3wy9DtHNA/Jn1Y4PUcXJwrpDa/brNhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 15:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:b0:1f:a1:7f:43:76:af:a4:0a:8d:8b:0a:12:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f
        Validity
            Not Before: Jul 26 16:00:17 2025 GMT
            Not After : Jul 27 16:00:17 2025 GMT
        Subject: CN=151fd3c4080c94c2dd8c7274897342f857a53fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b5:cd:a4:23:24:f0:f9:fe:50:a1:8e:3d:8e:
                    0c:ea:07:9b:3b:e5:0f:1e:e1:55:3a:a9:f2:df:c4:
                    d9:a9:41:eb:ad:bc:b3:03:84:eb:c4:60:98:61:1c:
                    d0:41:3a:40:9e:c0:67:a9:2b:4d:e2:19:30:68:7b:
                    3d:0b:ab:f8:f5:4a:92:8f:7d:c0:d6:0b:30:b2:90:
                    69:1d:5f:0a:99:24:00:d8:c7:5c:c4:ab:68:ae:6d:
                    d7:18:23:7a:bc:1b:79:39:be:98:22:b7:da:b7:08:
                    44:22:a2:d8:69:49:95:ba:b7:71:1a:88:5f:d3:69:
                    6f:42:91:b4:38:ba:27:0d:ff:2c:9d:53:3d:e7:80:
                    45:6a:8d:b5:8d:b9:29:15:01:b5:b0:c0:43:6d:52:
                    7e:90:fd:38:71:cd:d6:fd:43:20:46:90:ff:41:eb:
                    23:af:b4:36:ba:62:40:8d:8f:67:4d:20:3b:05:1b:
                    cb:c1:50:0c:56:9d:5a:c3:ae:cb:b5:6c:f3:e2:c6:
                    61:79:62:3b:83:36:a2:22:b3:90:6a:75:ac:0e:c7:
                    a2:97:04:2f:a2:f0:a5:97:d9:01:73:42:9a:40:8c:
                    e5:ba:69:94:28:07:ed:6f:f9:fc:c0:7d:4a:6b:1b:
                    f2:d2:3b:37:79:b7:6b:1c:88:c8:8d:29:d5:a0:e1:
                    7f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1F:D3:C4:08:0C:94:C2:DD:8C:72:74:89:73:42:F8:57:A5:3F:DE
            X509v3 Authority Key Identifier:
                keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:25:22:3b:21:b3:7e:ca:b6:51:bf:28:d8:28:98:68:44:d7:
         f6:31:29:0a:88:35:04:03:6b:8d:b7:1a:94:cf:0e:24:87:a3:
         52:24:28:1c:a4:9c:3a:2e:49:05:c7:0c:d0:7b:bc:8e:b2:6b:
         b8:23:12:48:6e:9b:05:5d:c4:3d:de:0b:0a:f9:3d:dd:46:c0:
         9e:a5:8f:4c:2e:0f:10:aa:ef:5c:91:74:83:0c:9b:fe:39:e1:
         0f:9f:28:15:75:7c:27:64:89:c7:76:27:da:76:a6:56:28:11:
         c4:6b:d3:e1:94:33:32:4d:21:44:37:1f:ac:13:8c:90:d3:c3:
         6c:7c:83:fa:59:0c:4b:76:48:23:22:18:9f:fa:a0:a0:e6:87:
         c3:13:e4:84:07:6f:f4:fa:fc:f0:1a:6a:17:76:4e:90:43:fd:
         7b:3e:6e:37:8e:2b:b7:19:e3:67:29:47:df:e0:92:62:45:d7:
         e2:d5:43:e6:82:8e:0d:82:08:6d:c7:46:95:95:69:ae:16:d0:
         99:5d:62:2f:87:79:09:14:33:26:b8:d0:42:13:47:32:0f:51:
         3c:11:e2:42:5c:8c:96:af:31:4b:ba:08:2d:52:70:6b:b2:74:
         10:62:41:7a:dc:6e:d9:6f:3f:a0:6a:e3:88:88:30:88:cd:83:
         5d:5c:b2:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:02:59 2025 by rpki-client