Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
File:                     MmHv5idxJgTzW5rZzL8DaGlfUBM.mft (raw, json)
Hash identifier:          /LU+afcA4nMULfv2l9MAsfr5gDr4cnTkwo3mRhJi1WM=
Subject key identifier:   90:BC:9D:E4:41:4C:7C:50:6B:00:BD:A1:08:E4:B9:71:AF:54:FD:26
Authority key identifier: 32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13
Certificate issuer:       /CN=3261efe627712604f35b9ad9ccbf0368695f5013
Certificate serial:       019882E7BB6A2EAE6E955756747FD0FA979F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
Manifest number:          67
Signing time:             Thu 07 Aug 2025 05:01:21 +0000
Manifest this update:     Thu 07 Aug 2025 05:01:21 +0000
Manifest next update:     Fri 08 Aug 2025 05:01:21 +0000
Files and hashes:         1: MmHv5idxJgTzW5rZzL8DaGlfUBM.crl (hash: ao4xdY8Z4A2BGksvk4+Co3xZ6M5cjAzesyIHFJbettk=)
                          2: YGuDE3vatbpuiraxDUsEQP0I-8M.roa (hash: oWCmcqNYGbhIxxvnhOzPFCagvtC48p+eG4AMg8r9Xn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 05:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:e7:bb:6a:2e:ae:6e:95:57:56:74:7f:d0:fa:97:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3261efe627712604f35b9ad9ccbf0368695f5013
        Validity
            Not Before: Aug  7 05:01:21 2025 GMT
            Not After : Aug  8 05:01:21 2025 GMT
        Subject: CN=90bc9de4414c7c506b00bda108e4b971af54fd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:73:41:98:61:fd:ee:56:cd:44:e5:1c:78:
                    89:09:2e:a7:4a:4a:b8:bc:f2:d2:1c:80:bb:8f:96:
                    7f:05:37:d5:fe:cc:e6:ca:a7:30:ca:85:33:99:7f:
                    e9:f4:c3:3d:be:58:2e:db:a1:51:2c:17:08:5a:7e:
                    f3:08:39:94:af:25:7b:99:96:54:cd:e2:44:b0:6b:
                    2a:da:e0:e0:71:95:18:4d:99:aa:0f:38:37:07:d4:
                    b7:32:8d:a3:7d:8f:4d:d0:a9:3e:72:60:e8:c6:ce:
                    2e:d5:94:14:55:67:1b:a9:f2:c9:3c:43:b4:1e:24:
                    c7:c4:db:e4:81:38:60:93:8c:6f:c6:cd:d0:07:36:
                    c6:c8:2c:aa:d1:09:ba:bc:34:ac:1f:ce:ef:5a:33:
                    66:f9:a6:5b:b8:10:12:ee:5d:49:dc:47:ff:3e:17:
                    57:8b:47:24:10:92:49:cf:82:64:1a:dc:e3:a3:de:
                    d7:ce:94:37:d4:de:5e:64:16:71:6c:62:fb:30:46:
                    cc:23:ee:7e:2d:15:c4:21:e0:01:38:d2:a9:4e:00:
                    e9:2f:33:67:7a:14:42:e5:43:21:cb:55:f7:a7:63:
                    75:31:bd:b7:b1:bb:00:8d:50:f6:05:c3:89:b1:68:
                    9b:8f:f8:aa:93:07:b1:c4:dc:85:9b:38:5a:83:dd:
                    b7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:9D:E4:41:4C:7C:50:6B:00:BD:A1:08:E4:B9:71:AF:54:FD:26
            X509v3 Authority Key Identifier:
                keyid:32:61:EF:E6:27:71:26:04:F3:5B:9A:D9:CC:BF:03:68:69:5F:50:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmHv5idxJgTzW5rZzL8DaGlfUBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/0de38c-baa9-4087-9bd5-757cb270d4c2/1/MmHv5idxJgTzW5rZzL8DaGlfUBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3f:5e:03:37:60:ee:08:20:b2:29:24:11:da:b5:6d:ac:93:
         32:af:7d:85:1d:b8:4a:f0:85:93:8b:75:6e:c6:8f:7a:20:d4:
         d8:eb:d6:7a:00:05:2d:93:7d:00:2d:2b:f2:40:ce:f2:c3:83:
         0f:f1:17:49:30:ef:08:8a:13:b5:11:ca:dd:9f:a2:41:b9:60:
         88:66:3d:4e:32:a8:02:ab:7e:dc:1f:49:9d:ad:af:f1:ce:53:
         b4:92:ca:34:3e:38:01:70:70:27:10:31:67:eb:69:de:53:d2:
         92:f4:6b:f5:bb:19:06:68:bf:33:fa:57:62:61:eb:e5:62:f3:
         2a:b6:52:36:cc:23:be:16:86:1b:05:58:7a:11:3b:2c:80:af:
         3e:96:f0:43:19:19:e2:fb:52:51:8b:ba:10:ac:cf:9c:f5:c0:
         e0:00:78:e4:23:87:cf:00:d7:fb:7d:9c:ae:9a:7f:ff:9f:9d:
         8f:db:08:c5:11:0a:43:df:8b:e7:f9:0b:20:3e:e8:c1:d3:b7:
         c1:d1:99:64:41:03:55:ef:0b:51:20:b1:6b:11:5a:6a:7e:76:
         2d:1a:a9:f8:5f:36:5d:51:4c:53:c8:bd:3a:20:5b:f4:e1:04:
         fb:6d:2b:10:3d:dd:d6:da:5b:78:6b:a0:16:91:72:f8:c7:49:
         40:09:57:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:21:56 2025 by rpki-client