Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
File:                     _30XNGbvuybSoRkpi7l5mgk8MjA.mft (raw, json)
Hash identifier:          lp/0ZIwwu/b9j/WtYGXqsQmga7sEJ06os1F8WjTtU0c=
Subject key identifier:   54:D3:00:F1:88:2C:5B:00:FF:F7:71:EA:43:35:BD:34:58:56:3A:A0
Authority key identifier: FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30
Certificate issuer:       /CN=ff7d173466efbb26d2a119298bb9799a093c3230
Certificate serial:       019916BECF6CA38BAB80646919420EDF260E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
Manifest number:          12E5
Signing time:             Thu 04 Sep 2025 22:00:27 +0000
Manifest this update:     Thu 04 Sep 2025 22:00:27 +0000
Manifest next update:     Fri 05 Sep 2025 22:00:27 +0000
Files and hashes:         1: _30XNGbvuybSoRkpi7l5mgk8MjA.crl (hash: Yi+TTADib/x9D1Hnaztkq7bUAjTKpBjjy+YgUNoIGA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:be:cf:6c:a3:8b:ab:80:64:69:19:42:0e:df:26:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff7d173466efbb26d2a119298bb9799a093c3230
        Validity
            Not Before: Sep  4 22:00:27 2025 GMT
            Not After : Sep  5 22:00:27 2025 GMT
        Subject: CN=54d300f1882c5b00fff771ea4335bd3458563aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:52:ab:6e:10:a6:f1:53:9d:2b:12:19:6a:
                    04:46:8b:52:af:84:17:11:cd:d0:c3:76:7c:de:2e:
                    f2:ff:e7:02:78:1c:14:2a:db:48:c9:fd:7f:25:e2:
                    f5:ec:d1:c2:50:b3:2f:be:af:cf:26:3d:64:9b:a1:
                    59:8c:94:17:b1:69:8c:a6:56:9b:de:f3:23:48:42:
                    53:c9:13:c8:d7:b0:89:0d:2e:f0:e1:86:4a:54:5c:
                    b2:d5:d1:7c:c6:69:b5:d4:b5:27:bc:f1:88:a5:c7:
                    c1:4e:3f:ff:65:83:a7:61:4c:28:d0:33:23:1d:dd:
                    ee:28:c2:46:37:cc:7c:98:e8:3e:ae:f6:26:bf:aa:
                    0a:89:f8:91:a1:df:e6:46:3d:a0:de:ff:f7:80:01:
                    bc:4b:93:12:a3:e0:e3:b1:c9:83:0a:57:ad:d4:18:
                    1e:90:a5:4c:7b:64:9a:21:3a:75:25:63:69:82:d4:
                    08:1c:7d:e3:e3:ab:f5:b0:1e:8f:7a:65:d0:ad:84:
                    a2:16:16:85:2a:26:08:91:bc:fe:c8:35:d1:d2:28:
                    58:28:4c:c3:82:d9:64:37:31:d4:07:1a:a8:bf:3d:
                    5e:0a:27:70:a9:07:d7:b7:b9:c5:6a:7f:a8:82:f4:
                    67:dc:b6:9e:a1:f8:af:c6:00:6b:64:c5:86:52:ba:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D3:00:F1:88:2C:5B:00:FF:F7:71:EA:43:35:BD:34:58:56:3A:A0
            X509v3 Authority Key Identifier:
                keyid:FF:7D:17:34:66:EF:BB:26:D2:A1:19:29:8B:B9:79:9A:09:3C:32:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_30XNGbvuybSoRkpi7l5mgk8MjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/b13f00-ab71-4436-b6b9-bbadff8c059a/1/_30XNGbvuybSoRkpi7l5mgk8MjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:f0:e3:5a:92:b5:90:b4:e7:67:99:bf:f1:60:cb:05:fd:
         d3:99:1f:74:43:28:b4:c2:48:bd:2a:22:26:92:87:a7:ba:2e:
         06:f0:6e:ee:2e:a0:2c:3a:06:79:2f:23:0a:0f:db:b4:62:01:
         e4:ac:7a:ba:63:1c:4a:e1:c7:f6:61:a9:cc:53:fb:61:09:b7:
         8a:38:f6:7d:42:19:b6:39:d7:0a:d4:ad:ee:d8:81:31:1d:fd:
         ad:d4:8f:c4:b3:be:fb:88:3a:44:48:2c:1c:04:f8:2f:44:08:
         b3:3b:61:73:de:0c:8a:37:bf:54:b5:9f:80:aa:93:91:0b:8c:
         e8:f4:58:89:3f:ab:55:22:51:6a:1e:c8:b1:29:d8:9f:17:ec:
         4b:2c:79:61:42:9c:3b:d5:00:c7:e5:b2:1c:99:26:91:82:62:
         0e:78:b9:e3:37:ac:f6:0c:49:62:56:63:f8:b5:47:1a:2f:64:
         94:74:19:a3:fa:ca:eb:8d:2f:c2:41:eb:de:87:d5:0a:22:ea:
         dd:e4:19:ea:95:25:00:49:fd:9f:98:1e:80:4e:b9:7e:40:e1:
         83:6d:a9:e6:68:5a:06:46:66:62:c8:31:19:b7:ad:50:61:35:
         9d:9c:ac:f5:74:d5:3e:06:e2:7e:7a:1a:fa:16:b9:81:3e:c8:
         8a:7a:19:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:30:16 2025 by rpki-client