Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File:                     MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier:          w2wTxFaKJIa5ZeWrGM6f9wYtHRIJEU4fUsah5sxYveI=
Subject key identifier:   81:58:CD:CE:F8:A9:86:62:22:5A:E8:89:D6:BD:94:B4:ED:01:B3:30
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer:       /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial:       01974B56A24A9680EA65AA3C63559FB87062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number:          0C8F
Signing time:             Sat 07 Jun 2025 17:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:58 +0000
Files and hashes:         1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: 78q2UBPD5e2qrNRHT9DkEjRKJMstQg7z1ZkP+FhR6/I=)
                          2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:a2:4a:96:80:ea:65:aa:3c:63:55:9f:b8:70:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
        Validity
            Not Before: Jun  7 17:00:58 2025 GMT
            Not After : Jun  8 17:00:58 2025 GMT
        Subject: CN=8158cdcef8a98662225ae889d6bd94b4ed01b330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:d3:2c:16:2b:f9:33:d2:c0:02:3b:05:27:
                    9f:3d:1b:ef:03:0f:de:61:6b:d3:7a:04:6c:ae:93:
                    e1:33:9c:31:ee:4d:73:bf:0b:4e:c2:57:23:10:25:
                    09:2c:52:b6:c2:d2:e2:37:f9:e8:3b:19:9f:e2:b8:
                    29:75:93:97:ba:2a:24:ce:ed:b7:93:66:e2:1d:4b:
                    67:62:d2:63:d7:4d:db:4f:04:e6:c3:52:81:df:53:
                    8b:2f:75:ea:b1:59:0c:dc:a3:41:de:13:bb:b8:c9:
                    db:d2:53:23:69:44:48:36:9a:48:c0:f2:fa:09:73:
                    38:cd:32:ba:04:bd:07:47:c0:5c:63:81:17:12:da:
                    93:c0:75:a9:9a:0e:57:12:f8:12:6a:b3:82:5c:73:
                    2e:9d:2a:f8:28:a2:3f:52:4a:f3:c7:08:9a:f7:6a:
                    c3:e6:85:ba:c3:67:e9:d7:6c:77:68:f6:d4:a3:08:
                    13:42:1f:48:85:40:e4:3c:e0:21:9e:6d:3c:79:59:
                    2b:23:40:1c:04:71:e3:4e:d6:d3:67:43:bc:ae:9c:
                    20:f3:b0:8f:7c:d6:31:dc:c4:96:b7:3e:84:16:77:
                    65:6a:88:42:5a:bf:71:73:90:ea:13:d8:77:96:ab:
                    9a:be:3a:fc:31:bf:97:76:1c:9b:ff:85:8c:83:49:
                    8e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:58:CD:CE:F8:A9:86:62:22:5A:E8:89:D6:BD:94:B4:ED:01:B3:30
            X509v3 Authority Key Identifier:
                keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fe:cf:b7:a4:90:04:01:90:72:b4:4e:e3:ef:7d:b6:16:70:
         f8:78:06:c9:7b:30:b3:d4:72:36:ee:24:62:05:0b:87:1e:ce:
         6f:18:5d:ec:ed:8f:28:91:72:48:cc:2b:95:a6:a7:b7:b9:0e:
         6e:51:18:0d:b7:55:76:30:76:6a:5c:06:bc:96:7f:3a:b2:98:
         e4:f9:d6:ec:1b:b2:aa:59:aa:7d:93:ca:2a:af:af:0a:65:42:
         78:9d:2a:5a:76:d4:3c:a7:2f:fe:e7:12:96:71:f7:bc:19:86:
         3b:bc:72:92:16:5e:d2:1e:46:59:76:60:da:df:0d:e4:8b:b3:
         af:50:5b:7c:36:2f:65:e8:c4:00:66:58:8a:00:1f:2b:3c:10:
         51:c2:64:77:be:56:ca:0e:d1:26:90:15:7e:1c:2c:16:9d:5a:
         98:e1:5e:e9:8d:e9:bd:12:8a:a2:d3:72:e2:9e:6b:8c:82:82:
         58:6e:7f:14:4e:cb:89:28:4d:0c:ba:3e:c6:83:c1:f8:28:0c:
         96:0f:8b:e3:7f:ae:59:fd:38:a4:fe:74:df:26:14:9a:f7:07:
         ae:00:b2:4c:61:6a:3a:73:9b:2a:79:e2:fd:b5:d0:2d:0e:c0:
         35:f7:fc:5a:b7:51:eb:48:5a:c4:d2:d4:55:c6:52:e6:a3:5e:
         77:2b:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:07:14 2025 by rpki-client