Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File:                     mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier:          Vqt41Tt8Nxcl55k1BMjQ+oiqtLdcis84cG14jotOZto=
Subject key identifier:   9B:AA:36:EF:CC:52:08:DE:84:F9:21:54:BE:C4:DC:60:3A:85:90:8C
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer:       /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial:       0199239EC545F4BA8D0D0B232AAA5FFE4F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number:          0846
Signing time:             Sun 07 Sep 2025 10:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:31 +0000
Files and hashes:         1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: ryIEwvlKmF7FzgpiNGOtcL5QcV+Ezobu/r8QODIPTN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:c5:45:f4:ba:8d:0d:0b:23:2a:aa:5f:fe:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
        Validity
            Not Before: Sep  7 10:00:31 2025 GMT
            Not After : Sep  8 10:00:31 2025 GMT
        Subject: CN=9baa36efcc5208de84f92154bec4dc603a85908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:25:9d:6e:41:e9:d9:7b:bf:27:f6:ab:94:b8:
                    48:80:f2:85:3a:2e:32:c8:77:25:33:42:8d:f6:fd:
                    ad:3f:e4:82:60:7c:c2:ee:7b:74:04:17:f6:33:32:
                    83:ba:ad:d3:85:5c:6e:5f:46:55:b7:06:54:e0:7b:
                    46:ec:b6:b1:a7:5d:20:08:cc:1a:25:39:ac:f5:a4:
                    8b:4a:1f:ec:84:55:7a:e5:d1:b2:40:12:05:1f:6c:
                    51:b2:e0:b8:93:ea:66:41:96:2a:ee:59:90:39:15:
                    50:e6:3b:17:ba:60:4a:e1:95:ad:3a:40:2b:cd:01:
                    55:e1:15:50:a7:96:f6:4c:2d:d0:ca:bd:39:b2:1b:
                    ea:ab:ea:d4:77:6f:c9:7a:60:f3:b4:3f:9b:53:66:
                    66:f6:1c:7e:4f:9b:53:93:ea:da:e6:a2:1c:02:5d:
                    c1:e5:d3:db:9d:b1:9e:a9:c1:db:c0:6f:b6:7a:26:
                    cc:af:6d:a4:1f:f1:9f:05:42:a2:6c:50:4f:b0:29:
                    63:d9:f2:6f:3a:09:6a:19:7f:d7:25:5f:ec:4f:93:
                    3d:8d:26:04:35:44:c9:57:d3:b5:e9:b8:77:03:62:
                    63:bd:6c:f5:c1:c5:aa:70:57:2f:8f:50:5f:28:f0:
                    da:45:4b:c9:fe:82:e3:40:3a:c6:5c:84:64:1a:29:
                    c7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AA:36:EF:CC:52:08:DE:84:F9:21:54:BE:C4:DC:60:3A:85:90:8C
            X509v3 Authority Key Identifier:
                keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:61:d6:7d:09:ea:00:82:9c:f6:87:38:c0:c8:ff:8b:7f:cf:
         39:d0:cd:ff:e0:d5:4b:14:11:ad:4b:26:f3:83:a7:01:61:f3:
         c0:a0:77:8b:77:86:42:d6:f5:81:76:31:5a:bb:2b:a2:29:ca:
         87:d8:76:d5:ff:61:da:e3:20:58:16:30:31:c9:fb:0d:cc:37:
         dc:ab:91:63:57:59:90:41:62:11:1b:33:e3:d8:25:b3:e8:40:
         fc:8b:9d:ca:2d:35:7f:3d:9f:b0:83:2d:dd:16:df:e2:98:64:
         5c:2e:a4:36:17:53:02:ef:3c:96:f2:a5:81:12:a7:6c:fc:4d:
         36:34:18:ba:c4:eb:e2:26:dd:6a:02:b2:66:24:88:20:63:27:
         9e:c6:b9:e8:35:5b:20:a2:43:f6:c0:b0:64:59:d4:39:fa:ca:
         19:3d:0d:03:f7:fd:58:34:fc:df:8a:39:f3:39:c7:e4:f4:61:
         2e:0c:01:aa:9e:c2:65:c7:08:68:f6:22:84:7b:7f:ad:bb:cb:
         e1:d9:11:9b:20:22:9b:96:82:7d:fc:26:83:be:ea:3a:2f:d4:
         dc:7e:5f:0d:b4:15:60:a9:d4:63:5b:0c:8c:54:4a:a6:15:63:
         32:f1:1d:30:a0:c1:76:ce:79:ff:f1:40:d8:1f:7e:1e:46:59:
         3b:0c:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:38 2025 by rpki-client