Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
File:                     RMmsJXmD7SmqZgqd1TEiTwmsS10.mft (raw, json)
Hash identifier:          sf2VzdUrwNbch/t4koeEPAL8xu5LZorV2dD9PB/34g4=
Subject key identifier:   32:28:9F:E4:A0:19:E1:BF:8B:CA:10:24:28:18:E4:D3:6F:60:5C:6D
Authority key identifier: 44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D
Certificate issuer:       /CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
Certificate serial:       019852313605F41D64D83558BE78EEB68626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
Manifest number:          03DF
Signing time:             Mon 28 Jul 2025 18:00:13 +0000
Manifest this update:     Mon 28 Jul 2025 18:00:13 +0000
Manifest next update:     Tue 29 Jul 2025 18:00:13 +0000
Files and hashes:         1: RMmsJXmD7SmqZgqd1TEiTwmsS10.crl (hash: 5vOLhnzjJEBk+v9M4KU0PWTM/RSyOYuU3vSIE7rqNh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 18:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:31:36:05:f4:1d:64:d8:35:58:be:78:ee:b6:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44c9ac257983ed29aa660a9dd531224f09ac4b5d
        Validity
            Not Before: Jul 28 18:00:13 2025 GMT
            Not After : Jul 29 18:00:13 2025 GMT
        Subject: CN=32289fe4a019e1bf8bca10242818e4d36f605c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:17:2e:f1:2f:57:a6:25:00:25:83:c1:63:
                    ea:18:b1:28:13:a8:49:e3:a0:5a:7a:85:cd:62:92:
                    b0:28:7e:96:e7:4f:00:4e:1a:bc:2c:b1:9d:3f:d9:
                    ef:e6:7b:0d:3c:80:80:67:c2:41:1e:4a:e1:76:54:
                    34:08:ea:1b:36:24:7b:02:32:0e:fd:af:93:ad:47:
                    11:58:a5:ca:cc:f8:da:c7:eb:70:32:95:f7:d4:00:
                    c7:7f:e4:cf:4e:99:5f:1b:3d:63:51:c5:86:2b:19:
                    74:75:e1:9b:ef:6f:99:ed:f0:66:9e:f3:5a:a3:1f:
                    ef:ea:d8:41:df:07:c8:06:61:ee:9f:84:d2:d8:75:
                    df:75:1e:98:73:7e:b0:13:e0:07:ce:48:ff:e5:d7:
                    b1:15:51:ff:86:c6:ab:98:b5:0b:5b:d8:b3:71:8f:
                    ef:9e:69:47:7c:fc:86:da:cc:e8:1c:80:88:7a:77:
                    30:70:96:39:00:7c:bd:4d:ca:91:35:fa:81:4f:23:
                    d0:61:b3:ba:51:c0:0a:ac:12:38:23:26:3d:f6:22:
                    1b:ba:c6:14:16:79:9b:16:1a:fc:f7:66:27:57:a9:
                    53:fc:d8:bd:4c:8c:c5:5a:de:d9:d1:2d:ba:26:a5:
                    b3:53:a1:97:36:d6:16:10:9b:f4:7a:03:ec:75:35:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:28:9F:E4:A0:19:E1:BF:8B:CA:10:24:28:18:E4:D3:6F:60:5C:6D
            X509v3 Authority Key Identifier:
                keyid:44:C9:AC:25:79:83:ED:29:AA:66:0A:9D:D5:31:22:4F:09:AC:4B:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMmsJXmD7SmqZgqd1TEiTwmsS10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/7d1887-e9f7-4015-a345-47f23d7af3df/1/RMmsJXmD7SmqZgqd1TEiTwmsS10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:4b:e0:de:22:e0:7d:0c:91:5d:64:99:6a:0f:54:b3:7d:ae:
         37:9b:d7:38:99:40:dd:d2:2e:9a:2a:62:8c:bc:f6:8a:f0:2b:
         84:11:bb:c7:68:ff:d6:be:d8:db:73:d8:76:59:64:34:45:83:
         fd:4d:2c:f3:e2:66:c2:8a:28:58:a8:9c:d4:06:5d:86:1a:af:
         81:89:2e:0d:10:15:8b:91:e2:f7:7d:63:73:f6:a6:71:ec:b1:
         42:1c:49:b0:90:c1:c8:05:f7:e5:81:12:f2:f5:da:da:bf:8a:
         b2:2e:e2:a1:3e:88:0f:1f:38:68:12:af:e9:18:6d:3f:92:60:
         a0:1f:aa:cb:ee:fb:53:f8:a2:98:17:bf:36:9f:8d:7c:44:2b:
         25:ef:21:85:4d:7b:fa:f0:c1:a0:d9:f7:97:c6:7e:94:8d:ec:
         1c:3e:ad:e3:aa:99:40:c7:46:8d:27:45:39:b2:91:3e:41:f2:
         08:1b:01:84:99:46:80:f8:9d:f7:65:03:ce:04:a0:0d:62:7d:
         3d:33:70:d5:4c:ea:f3:8d:61:dd:7b:a6:8a:a6:1f:71:29:c2:
         12:2b:b3:92:0d:25:b8:9b:63:25:de:bf:38:ea:37:4b:00:01:
         13:30:9b:7b:b8:06:1b:3b:ae:4e:21:b6:f0:f6:bb:07:6c:a1:
         75:0a:93:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:21 2025 by rpki-client