Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          JJHy1O7jDIsdeYUjD0f8vjQuaILCowslngIJbqPbbMY=
Subject key identifier:   8E:F5:84:95:B2:0E:90:69:14:41:4A:14:A5:44:ED:61:03:87:9D:DB
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       01974742E2D487DD912490F8F3F91DC86DC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          099D
Signing time:             Fri 06 Jun 2025 22:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 22:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 22:00:55 +0000
Files and hashes:         1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: JQKUXuIECSczqXXA5rWpxEUN9nPD6CHIVQIRUCv2Lgw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:42:e2:d4:87:dd:91:24:90:f8:f3:f9:1d:c8:6d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Jun  6 22:00:55 2025 GMT
            Not After : Jun  7 22:00:55 2025 GMT
        Subject: CN=8ef58495b20e906914414a14a544ed6103879ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:0d:5b:d8:bd:8e:a9:8b:a1:50:e7:68:14:
                    e6:da:b8:10:7a:44:3a:68:05:f3:6c:7b:90:cd:09:
                    ea:dd:2e:f4:24:f1:1d:f2:45:15:f7:7d:13:e5:47:
                    da:d8:b5:68:ea:41:34:74:6d:2d:9e:0c:91:bf:c4:
                    97:ff:fc:f5:cc:f2:33:20:5e:07:6e:7d:14:a9:7f:
                    c6:b6:99:3e:9d:f9:67:49:3f:17:9e:5f:3c:91:dd:
                    6d:cf:46:38:2b:1e:ad:bb:bc:96:52:2c:be:31:78:
                    3c:e6:d9:7b:7f:16:99:91:14:de:d0:1f:ee:a0:9c:
                    fb:f9:70:9a:b5:6a:ad:9e:1a:22:ff:75:81:11:eb:
                    e3:6c:d4:8a:fa:d0:99:c5:a8:d2:9e:70:2f:34:b4:
                    37:18:e9:8a:e0:f1:6b:fa:c7:a6:6e:7f:6a:87:6d:
                    ce:af:76:3c:80:9e:5c:d7:06:e5:ec:bd:d8:5f:ff:
                    70:1f:af:f9:9a:b2:b6:7c:8f:93:c0:ac:bf:54:23:
                    45:08:51:7a:e4:74:25:d5:01:0a:37:ad:14:79:b6:
                    5e:6d:69:d2:c0:4d:bb:ec:5e:35:0f:b4:18:91:78:
                    99:1a:dc:88:9d:f1:b1:1e:aa:1a:74:cd:ff:93:f7:
                    7c:88:c1:b7:cc:fd:e4:45:13:a1:a6:92:d3:c7:d8:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F5:84:95:B2:0E:90:69:14:41:4A:14:A5:44:ED:61:03:87:9D:DB
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6b:dc:2d:71:49:dd:20:31:fd:da:b7:37:fc:a6:c6:81:b9:
         d1:b6:6b:3f:55:0e:46:53:18:d2:ce:75:3a:bd:25:fa:be:2b:
         25:a9:aa:7b:e0:d7:5c:f4:91:3a:0c:29:6a:f8:03:be:34:12:
         7d:ca:92:f9:cf:3c:31:b3:14:eb:d8:d2:c4:43:51:dc:e4:39:
         04:af:17:c3:e1:da:79:e9:1c:89:47:10:25:45:60:45:b1:6e:
         ea:9e:7a:4d:e7:28:55:fc:d7:7e:87:8c:3a:cc:ea:74:ed:6e:
         57:5c:f2:cc:0d:23:83:e6:73:c3:2e:ff:47:e6:f7:bc:23:b7:
         c6:20:c4:a8:5b:1a:0c:05:4a:6a:4c:70:dc:2c:18:e1:99:63:
         46:b4:30:5f:13:12:a6:90:55:b7:e4:58:10:03:2b:73:d7:72:
         b6:3a:43:ea:ac:68:1c:8d:8a:9b:92:27:af:8c:3b:2b:d4:fc:
         cc:c1:9e:ad:de:2f:20:ba:91:7a:21:4a:5a:ac:10:66:5b:b0:
         96:3d:1b:8e:7b:44:f1:cd:41:b8:60:44:6a:34:1a:85:c1:58:
         22:b9:9b:1f:21:fe:57:71:c7:34:7e:19:29:23:a9:d3:98:c0:
         bd:01:83:a4:e5:e4:a9:5b:ac:ef:5f:55:89:77:69:fd:0b:45:
         a1:54:4f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:45 2025 by rpki-client