Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
File:                     MOEXssTnX9dTA9FNsD6eL0tyK4g.mft (raw, json)
Hash identifier:          8rjCMaJ8eaQP5aT8zyXvY3hAK0edlMYJlE1DDcVYGsM=
Subject key identifier:   08:5C:39:28:92:11:BD:4E:57:82:F3:DE:2D:28:45:9E:80:FD:7B:E2
Authority key identifier: 30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88
Certificate issuer:       /CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
Certificate serial:       019769CE90A2D6EF96316E8909CF0E2EC8BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
Manifest number:          0101
Signing time:             Fri 13 Jun 2025 15:00:34 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:34 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:34 +0000
Files and hashes:         1: MOEXssTnX9dTA9FNsD6eL0tyK4g.crl (hash: R0IqQomR+oYdl6nQmGyoOcMykC12i1T3bI2K8tytJns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:90:a2:d6:ef:96:31:6e:89:09:cf:0e:2e:c8:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30e117b2c4e75fd75303d14db03e9e2f4b722b88
        Validity
            Not Before: Jun 13 15:00:34 2025 GMT
            Not After : Jun 14 15:00:34 2025 GMT
        Subject: CN=085c39289211bd4e5782f3de2d28459e80fd7be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:e3:0e:41:d2:53:bd:a6:ab:26:a6:ba:83:
                    1d:ae:e8:2f:7f:88:38:29:05:4c:7d:b6:55:53:3d:
                    05:e3:e0:fa:82:30:1d:02:d0:14:31:d2:39:7e:dc:
                    11:11:f3:f2:eb:70:3c:da:b5:21:cc:aa:68:63:31:
                    19:05:e1:b1:4e:ed:41:66:23:e2:c6:35:cd:2f:ed:
                    09:e1:0f:21:e5:db:f7:9c:ae:50:8f:f1:d2:c6:40:
                    a3:3b:eb:c5:55:77:ff:ab:f3:f1:4c:45:1d:2a:3b:
                    a8:fa:3b:dd:7d:1b:37:5a:b1:23:0b:41:3a:00:36:
                    ed:1e:e6:49:fe:64:71:c9:b8:79:46:a1:1c:1b:48:
                    17:b6:6a:6b:6e:3a:9e:7c:10:12:86:f9:54:94:91:
                    9b:82:6a:59:44:f2:1d:c8:22:70:c4:dc:1a:66:96:
                    19:9e:f4:9a:d3:d3:7c:5c:33:b3:15:82:57:9b:72:
                    94:09:85:1e:c5:bf:87:a8:dd:e3:ea:59:46:d2:b6:
                    cf:2a:98:e0:a7:b8:27:02:53:ac:43:9f:ec:56:f1:
                    7f:91:98:f7:34:f2:2b:2c:f7:39:b0:e4:8c:64:22:
                    13:6f:ed:5a:73:15:54:75:0c:33:fe:89:84:49:07:
                    2f:29:71:5f:f1:83:1d:f6:54:ea:17:35:72:fd:f3:
                    3b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5C:39:28:92:11:BD:4E:57:82:F3:DE:2D:28:45:9E:80:FD:7B:E2
            X509v3 Authority Key Identifier:
                keyid:30:E1:17:B2:C4:E7:5F:D7:53:03:D1:4D:B0:3E:9E:2F:4B:72:2B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MOEXssTnX9dTA9FNsD6eL0tyK4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/b507d6-8ccd-47a4-990d-002ce0c7f70f/1/MOEXssTnX9dTA9FNsD6eL0tyK4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:b6:4c:8c:7c:3f:77:fe:58:5c:13:1c:12:56:58:da:bd:
         e6:ff:21:bf:74:e7:2d:21:9a:8d:01:cd:85:59:95:a7:a3:19:
         79:c1:91:b4:34:c4:e2:30:99:58:f6:fa:e4:ec:c8:64:b8:e7:
         ea:71:32:f8:c8:d7:c8:11:1f:2b:58:43:59:94:b1:95:ef:32:
         69:41:13:24:e7:18:eb:33:53:d0:1b:5b:2f:c6:a0:c8:a4:65:
         13:32:94:27:48:16:69:2a:dc:33:a9:91:2b:5c:6b:2d:10:dd:
         b1:45:54:02:cb:6e:f4:1b:55:6b:84:d7:50:46:56:4a:27:5f:
         dd:9f:5d:c8:d3:cb:9b:d9:2f:76:04:a6:a2:73:2d:97:15:28:
         90:78:8e:ec:bc:e4:56:7b:55:fb:79:51:83:8d:f4:2e:df:82:
         dd:df:e4:8a:ee:ba:eb:7c:a3:66:63:cb:47:5f:a2:b2:9e:ef:
         d6:bd:83:8b:80:58:48:5f:c2:22:10:df:dd:cd:46:61:1c:33:
         67:55:b3:4a:52:34:37:f8:39:4e:0e:a9:d1:d6:47:77:b9:10:
         4d:18:27:ae:c8:62:f4:bb:07:86:c4:cb:b9:3a:19:13:41:e8:
         b5:34:89:be:f4:68:4c:9d:e0:60:99:17:9b:06:1f:09:3e:6a:
         29:99:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:45 2025 by rpki-client