Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File:                     MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier:          EujIvXlzrmovyro8Z3Sn2O6DGrrKrKupEGd4QYILHNY=
Subject key identifier:   06:9F:7E:22:95:C5:B7:1D:59:51:93:EB:50:74:FC:3B:14:2A:DB:69
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer:       /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial:       019827EC4E5312A4C8DDF240B91281465945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number:          0B
Signing time:             Sun 20 Jul 2025 13:00:54 +0000
Manifest this update:     Sun 20 Jul 2025 13:00:54 +0000
Manifest next update:     Mon 21 Jul 2025 13:00:54 +0000
Files and hashes:         1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: u7PTXeXZpwk6tbQHzp9tIWPxgX0AnMvAe2IgLJ22fDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:27:ec:4e:53:12:a4:c8:dd:f2:40:b9:12:81:46:59:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
        Validity
            Not Before: Jul 20 13:00:54 2025 GMT
            Not After : Jul 21 13:00:54 2025 GMT
        Subject: CN=069f7e2295c5b71d595193eb5074fc3b142adb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:75:f5:33:ab:d8:25:90:41:3c:cb:b9:26:
                    7f:36:31:46:dc:16:49:31:ba:6f:b4:f2:68:a3:e5:
                    66:4b:c5:b6:78:c0:bb:d2:ad:0b:6b:39:56:b5:51:
                    d7:f2:47:8a:53:00:37:65:c8:a3:83:96:57:89:fe:
                    80:25:59:75:a2:af:e0:e9:76:83:45:6d:ca:d2:e0:
                    c5:1a:55:60:a5:9c:09:19:ce:1f:63:01:07:97:ff:
                    bf:04:96:f1:63:25:67:95:eb:a0:d1:17:42:9e:d7:
                    88:22:ed:c4:d3:1a:7f:7c:9b:5c:91:a6:a9:5c:84:
                    00:90:7d:1a:32:60:3b:b0:c1:b4:fc:9d:83:6d:c0:
                    03:b4:f3:b7:d2:b5:50:6a:bd:64:26:b1:25:5f:1a:
                    17:4c:3b:fa:58:fd:c4:3e:3b:b6:68:ce:b2:67:ae:
                    3f:ac:5b:af:f5:b2:d0:7d:fb:cb:51:1c:b6:a4:f1:
                    e2:32:9c:77:62:70:4e:72:6f:f5:1b:35:fc:f5:f6:
                    94:08:75:cf:4e:e0:71:96:d2:8e:14:68:9b:41:4b:
                    42:87:1a:08:18:41:c2:78:3e:df:e4:49:9a:ee:6c:
                    82:6d:d4:56:e9:4b:fd:2f:0a:46:d4:91:8f:79:a6:
                    52:2a:20:3c:cb:22:d9:f1:7c:78:d3:21:26:a3:3e:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9F:7E:22:95:C5:B7:1D:59:51:93:EB:50:74:FC:3B:14:2A:DB:69
            X509v3 Authority Key Identifier:
                keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:73:96:c4:cb:34:b1:8f:92:05:2d:e5:53:ff:5c:20:cc:
         09:bd:ce:2b:9c:a8:69:a5:03:3e:57:a4:88:ab:55:e4:fc:ff:
         6d:e0:d2:5a:be:3d:5c:f6:fb:48:6c:b2:53:31:1a:af:7c:ce:
         82:97:c1:d2:97:70:ea:6e:c2:f5:43:04:68:09:1a:da:63:de:
         d7:c3:7c:47:37:2e:c0:a4:be:71:ad:a7:89:2b:99:43:f8:bd:
         c1:53:27:21:84:92:71:a8:f9:1b:68:d5:76:d7:b3:bf:90:64:
         12:b4:28:45:3f:e5:2d:59:7f:35:ae:9b:37:ef:de:58:3a:2d:
         74:5d:e5:3c:45:4d:68:71:1c:7f:8b:90:04:8d:6b:b8:d6:0b:
         7b:09:93:b6:3a:8a:28:01:9e:82:cd:78:77:a3:c1:fa:99:49:
         90:d4:e2:7d:09:8a:f7:50:e0:e8:9d:e4:9f:2e:c8:e8:75:7d:
         4e:b3:cf:35:62:7a:70:c6:80:d2:d6:01:88:ab:13:64:6d:8a:
         d1:df:32:ba:a2:e8:e3:06:98:f6:c5:3a:49:bc:dc:1c:6f:8a:
         d7:3e:3f:ef:8f:33:0a:46:12:de:e9:49:a3:25:d4:b7:29:bd:
         63:3e:82:3e:90:1a:cd:7d:14:aa:2d:35:56:2e:d3:7c:b0:1a:
         74:27:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:21:28 2025 by rpki-client