Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
File:                     FMuhsMMFzGL5KXwtmRiZRbl3leE.mft (raw, json)
Hash identifier:          gcNRvhstKlyGyQ1AZ4/5bRHaRvoqop12kpiDNK4ANEg=
Subject key identifier:   E5:E2:C4:20:4C:E8:97:BB:60:60:7A:31:99:4B:B8:3C:6E:A2:3F:A1
Authority key identifier: 14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1
Certificate issuer:       /CN=14cba1b0c305cc62f9297c2d99189945b97795e1
Certificate serial:       019848C0BD041880B70BB42259758687A625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
Manifest number:          15FF
Signing time:             Sat 26 Jul 2025 22:00:47 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:47 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:47 +0000
Files and hashes:         1: FMuhsMMFzGL5KXwtmRiZRbl3leE.crl (hash: gN23GRRZ1EIiBQQt/cdREz+dhlj1n+qSF0KaII5W7BQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:bd:04:18:80:b7:0b:b4:22:59:75:86:87:a6:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14cba1b0c305cc62f9297c2d99189945b97795e1
        Validity
            Not Before: Jul 26 22:00:47 2025 GMT
            Not After : Jul 27 22:00:47 2025 GMT
        Subject: CN=e5e2c4204ce897bb60607a31994bb83c6ea23fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:c1:60:ea:59:b5:a6:6c:24:37:7f:1c:73:
                    55:18:fd:9c:ee:4d:5a:6c:a2:f2:38:06:37:04:71:
                    d7:fd:51:24:40:f3:ed:5d:30:8c:52:bf:9d:84:e8:
                    eb:b7:e2:88:50:4d:93:94:2c:84:74:19:e8:e9:33:
                    75:48:86:64:3b:d5:33:e9:a8:07:f0:06:6a:b8:45:
                    48:41:17:be:52:dd:2f:ca:aa:67:90:44:01:b2:81:
                    48:6e:0d:0c:6a:d1:3b:9f:1d:90:87:16:b9:f9:8b:
                    06:94:0f:9a:bd:90:2e:db:07:59:bb:1b:f0:48:33:
                    54:69:67:ed:b1:4b:ae:02:3f:8a:37:4e:66:31:40:
                    95:8e:af:21:90:29:bc:58:01:60:1c:ef:00:a8:7b:
                    1a:94:1d:e4:b7:7c:58:7d:92:20:ad:d5:00:7b:44:
                    e6:8d:23:a5:e0:78:89:ca:b1:56:fd:00:2e:f4:73:
                    9c:70:ae:39:5f:b0:b5:c3:23:c0:44:a8:f4:cc:9f:
                    3a:39:4f:d5:75:b7:3e:b5:42:2f:1c:57:07:ac:e7:
                    de:7c:d1:43:fd:ac:41:aa:2f:8d:a5:6f:a8:53:9a:
                    67:7c:e8:30:fb:55:c8:94:73:ef:19:f4:f3:d5:df:
                    96:50:91:e1:2d:37:79:df:bd:e4:50:0a:c4:53:bc:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:C4:20:4C:E8:97:BB:60:60:7A:31:99:4B:B8:3C:6E:A2:3F:A1
            X509v3 Authority Key Identifier:
                keyid:14:CB:A1:B0:C3:05:CC:62:F9:29:7C:2D:99:18:99:45:B9:77:95:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMuhsMMFzGL5KXwtmRiZRbl3leE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e4a167-66a7-4fe7-bc46-2311ff877722/1/FMuhsMMFzGL5KXwtmRiZRbl3leE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f7:76:45:74:fc:82:7e:77:b8:30:e9:99:0d:90:4d:5e:69:
         de:61:c4:33:da:f4:1b:a4:1d:f9:6b:2a:85:42:e9:dd:ce:0f:
         ea:4b:e6:f0:79:36:1b:aa:98:dd:77:85:9d:96:07:a8:c3:c6:
         ab:3e:c4:97:00:5f:5d:a2:95:7b:33:6d:e5:52:e4:46:ae:24:
         a4:10:ca:ad:61:94:79:13:2e:9b:e5:9c:5c:ef:bd:eb:3f:2a:
         21:76:c3:76:d2:ed:ab:6b:c9:9d:94:ee:4f:af:e4:c6:e6:51:
         0f:11:a4:32:74:a3:f0:db:c3:75:6e:e1:e4:d4:ac:b7:36:10:
         f9:89:1b:6b:58:76:12:e3:0c:48:38:e1:37:11:89:df:90:63:
         b3:f1:c8:75:15:cd:da:1c:46:c1:1a:29:9e:26:4e:d4:5f:3e:
         7b:21:77:48:68:24:32:12:82:c1:3e:3e:e0:d7:1d:01:be:49:
         9c:fd:e4:95:ee:18:5c:65:9d:df:3c:68:9a:ae:72:78:b6:4e:
         64:7c:a5:32:a1:ce:d9:97:5a:1c:0a:a2:07:07:db:79:1b:2e:
         9d:93:40:23:fb:6e:62:63:ff:86:2f:6c:9c:2a:3b:cb:03:ce:
         b8:91:40:e6:0c:f1:e0:58:cd:51:bd:86:fb:f2:cb:29:30:35:
         34:e3:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:14:43 2025 by rpki-client