Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          oTfHF9rjPGEjK8QaFQtsmQPHctTw0BMHwPXtzXbUQDo=
Subject key identifier:   B2:34:22:CE:18:02:A6:23:CC:9B:DF:17:1C:F5:9F:01:85:26:61:DF
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       01974DB26EEDD53B9933B0E2EB5AED4ED3E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          115B
Signing time:             Sun 08 Jun 2025 04:00:28 +0000
Manifest this update:     Sun 08 Jun 2025 04:00:28 +0000
Manifest next update:     Mon 09 Jun 2025 04:00:28 +0000
Files and hashes:         1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: Z5mi42QpPkl7f9+7ncFN3nsxn8JXJ2taEtTu+e94um4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:b2:6e:ed:d5:3b:99:33:b0:e2:eb:5a:ed:4e:d3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Jun  8 04:00:28 2025 GMT
            Not After : Jun  9 04:00:28 2025 GMT
        Subject: CN=b23422ce1802a623cc9bdf171cf59f01852661df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fc:10:94:ae:2d:ba:7e:b2:92:51:21:95:ec:
                    8d:53:43:de:cf:5b:a2:b3:df:ac:c5:49:6d:f4:c5:
                    91:ac:22:bc:c1:bd:6b:16:59:fc:1d:6d:b4:f9:53:
                    63:a9:88:29:96:d7:98:44:74:91:58:ea:a7:cf:50:
                    96:61:5f:be:d8:b5:cc:f8:55:97:db:fb:b3:cb:51:
                    b1:ab:ce:b7:b6:78:d0:83:9b:d5:42:28:0b:50:be:
                    9c:78:5a:8e:3a:2f:fd:d7:7f:90:82:48:69:c5:74:
                    69:3a:98:54:32:73:60:b2:bb:8b:6a:64:81:a8:44:
                    37:6b:63:9d:ee:1f:aa:56:74:e1:fc:b5:03:29:60:
                    23:91:5b:15:93:19:6b:f2:ee:24:b5:7f:82:46:ca:
                    ed:8b:d7:59:88:d0:68:c2:3c:96:35:dc:76:66:96:
                    62:9b:ba:a3:8f:96:be:1a:cc:50:a8:19:74:96:3e:
                    23:2f:43:32:05:21:98:bc:74:c7:cc:1c:3e:f5:52:
                    5a:45:85:95:0d:4b:58:bb:9a:94:fc:99:fb:c1:aa:
                    85:81:8d:84:36:27:3d:84:32:d1:e3:7d:00:ec:c9:
                    cd:0c:94:4c:22:f4:76:99:32:f1:a2:b7:06:d5:d5:
                    e4:8a:90:0a:65:ef:f9:a1:08:d8:b0:e3:8a:a2:17:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:34:22:CE:18:02:A6:23:CC:9B:DF:17:1C:F5:9F:01:85:26:61:DF
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:93:88:b4:74:76:47:a8:25:91:29:0e:58:91:0f:71:e7:bf:
         de:25:9f:1e:50:92:89:4a:08:46:d1:b3:e1:94:7f:46:2e:f4:
         e4:2f:ef:e3:1b:bb:da:bd:ec:d1:4d:58:b8:cb:d2:ce:5d:d5:
         97:62:8d:3a:c1:37:ab:97:31:44:a5:da:53:01:de:28:b6:54:
         3d:1d:7c:fd:f0:67:92:ea:ab:8c:b4:17:5f:a5:74:d5:61:db:
         a0:78:a4:a5:dd:43:d1:a7:23:d2:67:76:49:ac:2d:1a:35:17:
         f5:7f:3f:9e:e1:a6:b4:54:84:c0:4f:d3:09:12:f6:b0:19:c7:
         00:ac:e0:d6:b5:71:43:86:15:df:a3:d5:e6:7d:8f:1d:60:3c:
         69:d3:8f:8b:df:65:bb:e1:38:1f:bd:13:cd:d2:7f:8a:4c:db:
         ac:f9:73:98:43:3f:0e:75:1a:23:08:9c:93:f3:5f:08:13:ed:
         48:63:06:69:09:f0:bc:fa:b1:7c:80:7a:f0:f3:ab:2d:bc:10:
         8b:2e:98:78:e0:17:db:45:a1:28:ac:79:82:c9:8c:a4:52:69:
         92:d4:4f:fe:aa:1f:8b:d4:87:c9:18:d2:bd:85:2a:48:0c:92:
         23:e8:b8:bf:3f:4f:b8:0d:07:14:4e:be:2d:d4:07:35:eb:02:
         10:e6:e5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:01:02 2025 by rpki-client