Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File:                     MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier:          ExFbZmoV7cQFD0O7LCbULAmLL+T9H6gplnlTvW8QvRw=
Subject key identifier:   91:BE:49:D5:96:7D:82:2E:D8:52:13:F2:47:FC:8D:56:C3:F4:4D:15
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer:       /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial:       019885B1B6723C2A0753B2828456A3B3080C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number:          0194
Signing time:             Thu 07 Aug 2025 18:01:12 +0000
Manifest this update:     Thu 07 Aug 2025 18:01:12 +0000
Manifest next update:     Fri 08 Aug 2025 18:01:12 +0000
Files and hashes:         1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: n0UuURXmFx4xj5q6pjV35L8cQaGSdyr2aeYzBsEpekU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 16:13:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:85:b1:b6:72:3c:2a:07:53:b2:82:84:56:a3:b3:08:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
        Validity
            Not Before: Aug  7 18:01:12 2025 GMT
            Not After : Aug  8 18:01:12 2025 GMT
        Subject: CN=91be49d5967d822ed85213f247fc8d56c3f44d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:46:2b:12:ab:97:62:53:d8:47:31:2f:2c:
                    42:0d:95:1c:ba:bd:e5:de:c1:f7:a3:b5:ad:56:58:
                    8c:70:ef:15:10:ff:96:a7:4c:e8:e9:b0:9d:6d:69:
                    57:96:36:ea:75:8f:4c:3f:d6:53:16:de:16:8a:9f:
                    92:41:9c:a9:07:d9:81:92:5d:d4:68:24:89:be:ed:
                    ca:01:3d:f7:00:5e:3e:29:f4:14:d8:d7:ad:4d:e6:
                    27:2b:bf:3c:05:8f:b5:50:b4:cb:ae:9c:dc:eb:df:
                    8e:1b:ba:c4:d9:45:0a:f7:01:02:36:c3:5e:0d:66:
                    e4:6b:66:24:d8:23:ab:4e:49:32:95:ff:3e:d9:12:
                    0f:28:e8:6a:e5:20:c4:b7:07:d8:6d:41:e4:03:11:
                    19:f7:ac:bf:24:b4:65:1b:b2:4f:96:ec:cc:ed:71:
                    17:41:93:5d:c1:09:b6:25:a9:6c:04:be:1e:34:81:
                    85:5f:52:6e:09:aa:2e:33:6c:d8:d8:28:48:ed:ae:
                    65:88:bc:06:d9:20:8a:7a:c9:cd:c3:57:89:1c:9e:
                    d2:6e:73:a2:3f:7b:4e:e0:b5:e3:7c:5d:e2:c6:30:
                    ab:7e:bf:2d:57:46:23:18:1a:80:fc:e5:17:6d:d7:
                    d1:5a:8b:a4:65:99:74:a5:24:59:db:05:72:e8:fc:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:49:D5:96:7D:82:2E:D8:52:13:F2:47:FC:8D:56:C3:F4:4D:15
            X509v3 Authority Key Identifier:
                keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:d7:64:07:59:d1:82:d1:c9:40:73:67:09:0d:42:b9:b0:
         06:ab:04:8d:31:84:41:26:9c:ea:db:8d:3c:d1:10:14:1c:96:
         1b:36:35:ca:cc:89:09:91:72:ee:6e:66:4e:1e:b1:d5:7f:9c:
         18:d4:3e:ca:9d:38:ab:23:a6:53:cb:0c:e2:ab:32:f8:67:f1:
         c8:36:27:ff:a6:c0:fc:3a:20:5e:78:92:22:41:c3:85:72:45:
         b4:98:2a:17:11:b2:7a:2a:e7:07:6a:63:16:11:49:2e:1a:79:
         7e:f6:d7:e4:e9:5f:90:e4:9e:4d:93:84:41:c7:81:0c:c9:64:
         21:0e:34:d0:ed:54:42:42:c2:7b:cc:fa:1c:a5:eb:45:a5:0a:
         95:79:dc:69:3b:f1:77:92:81:4e:12:5a:cc:c4:cd:ab:0f:72:
         e4:9c:01:84:32:af:24:81:af:ad:a3:b7:11:de:91:5e:f3:2f:
         7a:91:29:83:74:ac:bf:18:6a:d8:37:bb:69:8e:ec:07:ff:64:
         73:f8:47:57:44:6a:46:a3:f2:64:92:76:ad:b7:80:cc:7d:5e:
         b8:ed:ae:8f:f4:0d:b2:9b:79:fd:ed:fd:44:42:d8:55:80:ea:
         a4:c3:ab:ea:8b:c3:84:59:bd:06:4e:63:1e:63:12:07:48:18:
         0e:d4:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:10:55 2025 by rpki-client