Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File:                     muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier:          A+y6FauIBYg72YU8fbFxG4Tm4HLNYe20Vst7sWdl8UM=
Subject key identifier:   47:63:09:50:E1:32:4B:79:58:CD:A3:1C:2C:1E:11:43:48:11:D6:10
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer:       /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial:       0198499C5834E72BFC72098CB6AF1124674A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number:          D3
Signing time:             Sun 27 Jul 2025 02:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 02:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 02:00:39 +0000
Files and hashes:         1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: iqaGhBc8/nz2LkxFVdmuTzuLBwRUBkXdDK+6nW/2UzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:9c:58:34:e7:2b:fc:72:09:8c:b6:af:11:24:67:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
        Validity
            Not Before: Jul 27 02:00:39 2025 GMT
            Not After : Jul 28 02:00:39 2025 GMT
        Subject: CN=47630950e1324b7958cda31c2c1e11434811d610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0d:ef:c8:5b:25:f1:ba:9e:ad:e7:b7:fa:b3:
                    a7:e4:2f:1c:55:f7:df:e8:b6:eb:a0:e2:71:ef:9a:
                    9e:42:65:e6:07:4d:96:13:37:0e:c2:36:38:65:5e:
                    7d:b7:93:d0:51:ed:09:1a:eb:aa:e3:55:66:3f:1b:
                    5d:4c:8c:03:be:9a:1b:3d:0f:75:e8:10:e3:6b:0b:
                    7f:68:e5:88:f6:c2:c5:11:48:5f:4b:0b:f1:0e:10:
                    46:89:1e:e0:fa:b9:f7:09:14:e5:e1:6a:ab:7f:a0:
                    04:8d:32:71:29:55:3f:3a:66:9a:c3:b0:d5:8d:c3:
                    ee:b7:22:be:99:09:cd:75:40:49:74:2f:d0:53:39:
                    2a:80:bf:4f:fe:44:5d:f8:9e:7d:60:e0:90:2f:ad:
                    56:09:e9:a3:12:16:ae:7f:bd:4d:71:30:cf:67:bc:
                    f8:23:7c:e4:74:1c:27:77:1e:4b:33:c2:0b:fa:75:
                    07:74:f1:a1:98:85:12:22:83:bf:f0:80:9a:1d:70:
                    69:b1:7e:ff:81:07:ec:c1:67:6e:49:fd:dd:67:96:
                    52:28:b2:ff:df:c8:7a:82:24:a1:bc:c6:be:f5:32:
                    f4:2d:2b:86:75:2c:ba:8c:f0:4d:42:37:e0:b1:85:
                    70:60:52:4e:11:e2:5b:39:06:35:de:9d:c2:15:23:
                    c2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:63:09:50:E1:32:4B:79:58:CD:A3:1C:2C:1E:11:43:48:11:D6:10
            X509v3 Authority Key Identifier:
                keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:08:32:44:8b:80:4b:78:f6:69:57:f1:26:2a:16:d6:80:4d:
         2e:dd:4e:fd:cd:a2:f8:58:d8:7a:dc:5f:98:7b:32:09:63:ba:
         c3:70:0a:1f:fa:7c:44:67:b1:96:09:84:39:a4:1b:4b:1d:95:
         2c:95:ca:5b:2a:22:98:11:b2:df:3b:0b:cd:ec:bd:61:72:f3:
         21:69:f0:0b:4f:88:46:78:f0:f1:66:ee:cc:bc:9a:11:cd:ff:
         69:ff:c9:cd:89:33:f7:55:4f:86:8d:fe:9c:91:ba:1c:f3:50:
         0f:58:6f:64:22:ba:b1:15:23:03:8b:e5:56:a1:12:38:f4:57:
         7b:5c:89:7b:3e:d1:d3:6a:da:24:bd:70:24:f8:76:a4:a5:53:
         c7:90:70:84:19:c3:0b:4f:85:bc:24:b9:5b:1a:3e:2a:2f:f0:
         f8:e0:95:26:b6:97:d4:dc:b0:9b:a8:87:cb:77:6f:fa:5c:12:
         f2:63:8d:71:c6:7a:9b:1a:dd:9d:06:be:d8:64:05:3a:fa:4f:
         f7:36:c7:6e:06:9b:6a:56:ee:4e:39:4a:b2:6e:73:e4:bd:47:
         c5:6a:b3:d7:0c:79:7e:d2:02:93:ac:ac:bb:07:0d:19:0b:66:
         36:bf:bb:3e:a8:4b:68:73:a0:c6:fc:ac:5c:51:49:c2:10:e7:
         4b:35:21:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:35:15 2025 by rpki-client