Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
File:                     MlNiVLPnSQBnW8br1QroJYKLmnY.mft (raw, json)
Hash identifier:          z5QTeCX8G7WiyhZh2wzJo2bDuj23KB7zCmfaOcFp2JU=
Subject key identifier:   33:7A:87:68:FB:8A:55:80:DB:82:25:21:03:1E:2E:FB:4B:78:10:90
Authority key identifier: 32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76
Certificate issuer:       /CN=32536254b3e74900675bc6ebd50ae825828b9a76
Certificate serial:       0198432BEC99AEBEE0E1DB83B464C0E71EE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
Manifest number:          15FD
Signing time:             Fri 25 Jul 2025 20:00:08 +0000
Manifest this update:     Fri 25 Jul 2025 20:00:08 +0000
Manifest next update:     Sat 26 Jul 2025 20:00:08 +0000
Files and hashes:         1: MlNiVLPnSQBnW8br1QroJYKLmnY.crl (hash: NOJrdkUDtsWqn6WL9CBOXEtu7xbcjxOWBbKPGaUxbKs=)
                          2: eUynvlBI4OuUX1kGjVQZhKaUnMw.roa (hash: VKfdvSp0tX2NjmjbmhxKu4y9+1s59i+sIHADFu4rJzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 17:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:2b:ec:99:ae:be:e0:e1:db:83:b4:64:c0:e7:1e:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32536254b3e74900675bc6ebd50ae825828b9a76
        Validity
            Not Before: Jul 25 20:00:08 2025 GMT
            Not After : Jul 26 20:00:08 2025 GMT
        Subject: CN=337a8768fb8a5580db822521031e2efb4b781090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8e:f4:97:15:cc:1b:a1:18:6f:47:96:f5:a8:
                    bb:68:e7:74:50:f8:73:87:d6:83:db:97:81:00:7d:
                    53:05:53:11:da:d0:21:44:94:f2:38:e9:92:a3:ef:
                    bb:fc:be:23:2a:00:ef:69:4c:3c:9b:3e:56:a5:e6:
                    f0:b9:bc:40:75:b1:00:87:bd:f5:27:b0:21:2d:8f:
                    eb:e2:49:96:3e:66:fe:7a:4b:a5:6a:7a:d3:f2:43:
                    5f:4a:1a:fb:4c:d9:59:d9:4b:0a:dd:b0:02:6e:6b:
                    8f:b1:a8:3a:c9:2f:94:81:f1:22:a9:36:a7:a8:89:
                    c6:2b:6d:42:56:3c:be:49:28:10:e7:7f:19:1f:ef:
                    57:f7:a1:42:4d:a4:19:08:58:21:85:96:b0:94:75:
                    0c:fa:3c:f2:f8:71:4a:28:ca:b7:0a:02:bb:d5:38:
                    c9:48:85:c4:76:df:c4:47:1a:4c:b0:4d:08:4e:62:
                    2a:b8:e4:5e:85:6a:45:b2:c0:b8:37:6c:51:ee:8c:
                    f0:55:54:e9:db:eb:a9:06:e5:11:c1:45:35:bd:a6:
                    75:38:f7:fa:9b:ea:d7:82:2d:39:0f:80:17:e4:81:
                    19:92:05:7a:de:b5:11:4f:ca:ec:5e:03:eb:6b:f2:
                    ee:a9:8f:63:ce:27:a8:11:fa:e6:08:11:f8:98:81:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7A:87:68:FB:8A:55:80:DB:82:25:21:03:1E:2E:FB:4B:78:10:90
            X509v3 Authority Key Identifier:
                keyid:32:53:62:54:B3:E7:49:00:67:5B:C6:EB:D5:0A:E8:25:82:8B:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlNiVLPnSQBnW8br1QroJYKLmnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/96d730-38ef-4b21-b1fe-a57d488744c2/1/MlNiVLPnSQBnW8br1QroJYKLmnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:23:26:f2:a2:15:90:bd:08:41:ba:2c:01:47:a3:08:ed:
         cd:b0:7d:87:1e:5c:af:be:26:a8:f1:5f:67:6e:1a:37:c7:ed:
         26:79:77:c6:f2:83:69:5c:4b:d6:5e:71:83:55:ad:cb:29:e0:
         1c:70:91:b0:a3:4b:b4:57:fe:66:c3:3b:25:cc:b0:63:cf:ad:
         82:74:98:09:e3:90:ad:9f:5e:16:57:49:7f:b9:23:1f:c4:5d:
         be:f7:62:e9:cd:87:3f:3f:b9:6a:57:66:ef:6a:89:b6:3a:8f:
         7d:39:b9:69:86:c3:ff:43:aa:c5:61:2b:33:32:c8:7a:ce:6b:
         30:d8:0b:6b:5a:3d:f1:ad:67:83:9f:c4:8a:89:ae:9b:53:45:
         37:5a:5f:45:58:68:e7:f6:91:62:2d:0c:31:75:15:01:5e:c9:
         36:86:63:f0:e9:80:38:83:4a:5b:8c:35:18:e0:35:1c:af:41:
         2e:93:cc:02:ed:6f:fd:1d:e7:dd:07:85:40:90:93:f3:e2:9a:
         cb:d7:dc:68:77:03:2b:2d:e4:0d:c0:65:8f:e2:25:3d:28:e7:
         25:dd:54:c8:79:d9:2a:f4:6e:94:c8:b6:96:9a:1b:3b:45:ae:
         ab:d8:8c:ec:3b:40:ec:cc:43:05:ee:36:cf:ed:07:7c:88:a2:
         87:08:20:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:26:34 2025 by rpki-client