Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File:                     MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier:          vl+kVxiQdMNXvgIPC2aCfuYJ53EBJsX8mjfI7gDfEeQ=
Subject key identifier:   80:85:E3:43:E0:A1:78:BD:6E:62:35:42:48:1C:F4:B4:AA:ED:F5:1C
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer:       /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial:       019922FAEF4F6DC931B4EB849050489D4B96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number:          8D
Signing time:             Sun 07 Sep 2025 07:01:34 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:34 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:34 +0000
Files and hashes:         1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: f9fwBazGawfHsJa2QMI7dpDhYDj5XfPS+O+gfpCXsYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:ef:4f:6d:c9:31:b4:eb:84:90:50:48:9d:4b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
        Validity
            Not Before: Sep  7 07:01:34 2025 GMT
            Not After : Sep  8 07:01:34 2025 GMT
        Subject: CN=8085e343e0a178bd6e623542481cf4b4aaedf51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:98:65:7e:a9:f7:c5:70:82:67:1f:72:9d:a8:
                    01:6a:94:f9:0a:20:44:8f:14:9a:90:fa:21:4b:7f:
                    38:c5:9c:65:0c:da:33:c5:46:14:ad:b0:ae:02:b4:
                    ef:05:fa:60:ce:e6:3d:e8:ea:fa:f4:4a:7d:0f:6a:
                    84:6f:79:75:ba:ba:5b:2a:ae:62:97:ea:3e:a0:97:
                    1e:10:da:40:17:13:1d:11:18:14:79:5e:41:66:9a:
                    2b:1f:1b:87:cf:e8:c3:84:2e:6a:3f:ab:9c:77:26:
                    39:55:fa:20:62:0d:94:23:36:5c:7f:e4:d5:93:96:
                    55:c8:8f:de:ff:f1:8d:e3:bd:c7:35:48:bd:56:49:
                    54:8a:12:fd:6f:ad:6f:56:7f:3e:66:a6:c8:85:57:
                    e4:7f:10:e3:00:3e:87:92:e3:f9:f3:45:ea:98:19:
                    74:96:c0:89:e1:b1:7b:10:b0:fa:7c:4d:fa:e7:90:
                    5f:27:3e:13:8e:14:52:8f:c6:64:e3:58:50:07:3d:
                    64:00:03:86:dc:c7:58:12:0e:50:55:20:01:1f:2d:
                    8f:3e:e0:84:14:4a:fe:17:c9:ca:37:08:f7:39:1c:
                    64:57:3c:db:d0:8a:cd:b5:e8:ab:52:55:56:6a:b6:
                    b6:ab:a6:27:33:05:ba:53:e8:a0:85:6e:73:ab:e0:
                    c4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:85:E3:43:E0:A1:78:BD:6E:62:35:42:48:1C:F4:B4:AA:ED:F5:1C
            X509v3 Authority Key Identifier:
                keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:86:96:de:3d:d2:05:74:5a:30:28:1c:13:da:a4:d9:3e:02:
         12:df:77:65:24:be:61:c0:70:55:7e:ee:27:ea:1d:98:76:ee:
         9d:d6:b9:3f:11:f1:b5:62:ca:c7:bf:3c:64:93:e8:f1:6f:03:
         f8:b7:6a:e1:7b:69:ef:85:82:89:cd:46:f2:21:97:34:44:7b:
         4f:da:2b:56:a0:6f:90:85:af:15:ec:9d:20:7b:d2:ed:ed:32:
         1a:33:02:0c:12:11:46:dd:06:5b:8e:bd:23:16:73:b9:2c:b7:
         20:6f:39:61:e6:70:5c:56:14:1d:c0:ae:1e:5b:b0:e1:1f:c8:
         07:b5:24:5b:c4:5c:35:5e:a1:cd:30:8e:b7:5e:22:d9:62:f4:
         33:9f:d4:70:8f:f9:f5:90:b7:aa:4e:5d:5a:94:94:31:3d:7a:
         73:77:ab:65:b4:93:94:84:d2:83:00:c7:e3:bc:6a:2b:35:2d:
         f2:59:11:95:c9:ed:15:d5:46:e3:c7:78:fb:9a:14:0e:f6:bc:
         1e:1f:8e:98:91:99:ad:b0:b8:64:ab:5e:3f:03:fc:3d:fa:b2:
         8a:6c:6c:bd:ac:e9:4f:e1:d2:c2:21:8c:0e:74:b5:86:f1:88:
         20:fb:6a:75:77:32:45:90:29:19:ae:6f:5b:b9:a4:4c:60:1e:
         03:76:d2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:13 2025 by rpki-client