Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
File:                     RMrauRpreaMhYYgHxnibKxyYI3g.mft (raw, json)
Hash identifier:          s7qM6gVd4DQLYrg8Yxc66n3bEpEgo+QwHOlUG7hqjsw=
Subject key identifier:   AD:9F:9D:98:28:AA:BA:3B:EE:7A:C5:E7:A4:42:23:14:08:CB:59:2F
Authority key identifier: 44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78
Certificate issuer:       /CN=44cadab91a6b79a321618807c6789b2b1c982378
Certificate serial:       01987E2EA087D24B90935F7B0281FE8F1FAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
Manifest number:          10CC
Signing time:             Wed 06 Aug 2025 07:00:41 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:41 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:41 +0000
Files and hashes:         1: RMrauRpreaMhYYgHxnibKxyYI3g.crl (hash: CvUS3HURAU5Ut92sdgJptjP/DxZvbbkEu7mDCKIf/Z8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:a0:87:d2:4b:90:93:5f:7b:02:81:fe:8f:1f:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44cadab91a6b79a321618807c6789b2b1c982378
        Validity
            Not Before: Aug  6 07:00:41 2025 GMT
            Not After : Aug  7 07:00:41 2025 GMT
        Subject: CN=ad9f9d9828aaba3bee7ac5e7a442231408cb592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:59:ad:aa:43:a7:f1:61:7b:b5:c4:da:c7:35:
                    4f:5c:5f:61:25:23:71:8c:7c:bd:bf:16:3d:0c:07:
                    7c:f0:5a:07:5d:c0:18:79:0e:2b:30:ca:55:62:7b:
                    20:b4:8a:72:4b:c9:9f:02:7f:50:aa:f6:36:4b:a1:
                    34:59:00:d4:e1:f8:72:e8:71:f0:93:ee:ec:a8:c3:
                    dc:27:01:e4:db:2d:64:c7:56:15:f8:c3:c2:36:8f:
                    6a:6b:05:79:ae:3b:f3:01:e3:96:b5:e5:91:29:a3:
                    84:b4:80:17:33:6e:0f:53:67:b2:be:15:39:64:dc:
                    3f:3a:f8:fc:0e:42:26:62:81:d0:f2:bb:26:a4:a9:
                    af:4a:60:4e:93:b7:bc:b0:ae:a7:74:a0:a0:91:c8:
                    dd:7d:d0:9a:f3:99:8c:f8:ba:57:96:a8:01:4d:2b:
                    7f:89:9c:9b:89:72:90:18:96:b2:7b:02:20:cf:26:
                    de:f9:a5:d5:5d:8d:50:b6:01:42:8c:94:99:49:94:
                    c1:01:54:33:e6:69:ed:21:f7:a8:ea:70:d6:dc:c7:
                    82:39:0d:18:09:f2:19:01:98:cd:14:da:eb:1f:af:
                    47:e1:e6:9a:73:7f:06:46:c8:6c:87:5e:8e:73:3f:
                    b0:74:6b:0b:73:df:6d:94:59:96:67:f3:5b:82:5b:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9F:9D:98:28:AA:BA:3B:EE:7A:C5:E7:A4:42:23:14:08:CB:59:2F
            X509v3 Authority Key Identifier:
                keyid:44:CA:DA:B9:1A:6B:79:A3:21:61:88:07:C6:78:9B:2B:1C:98:23:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMrauRpreaMhYYgHxnibKxyYI3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/d5e350-c9a0-4634-8c9b-b8d9e9b4074e/1/RMrauRpreaMhYYgHxnibKxyYI3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:84:6d:f1:5a:ff:8e:10:33:ed:98:cb:18:cc:67:39:a1:15:
         c4:c7:b0:5d:99:d5:da:32:eb:cc:22:4e:ce:98:a3:01:94:9f:
         a7:0c:c6:f5:76:a5:0b:89:f3:24:d1:f9:3b:7d:9b:72:fe:05:
         2a:f9:03:1d:11:8d:8f:b7:12:a0:25:47:4f:59:1b:0e:88:10:
         1a:23:56:c6:69:be:ee:d6:18:18:7b:43:5a:65:ed:11:bc:4b:
         37:3d:3d:83:7f:4c:5d:06:d3:d6:97:6f:f1:4e:0b:c1:de:eb:
         4a:01:66:74:d5:9f:0a:2d:61:15:c3:0d:fd:df:12:0e:62:9a:
         b5:29:a7:85:6b:82:cc:4f:b8:10:67:00:19:de:2a:dc:76:f4:
         3e:36:64:8d:5b:d4:9c:09:5c:82:94:df:76:18:d1:3e:41:fe:
         a8:25:fa:72:e9:43:81:7d:43:2e:11:83:a6:8d:92:99:d6:77:
         42:27:fd:46:58:a6:a7:6d:52:0f:d0:62:81:c0:7c:6f:87:0e:
         b1:22:81:a4:5e:fb:d3:78:29:4a:b1:44:b9:b9:9e:d7:60:92:
         2a:e7:af:36:40:ca:e7:0e:79:df:94:7f:4e:1f:fa:96:65:ee:
         eb:fd:01:be:e6:ec:1d:eb:07:0f:ae:29:1a:12:9f:58:bc:8e:
         88:80:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:25:05 2025 by rpki-client