Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          ekoKti5u/zX1Cz8/bkp+QF2MawgAkJ3DW/sA8FrkeK0=
Subject key identifier:   03:DC:FF:B5:4E:A3:6A:E2:9A:87:4D:8B:7E:E8:67:3C:E3:82:52:0A
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       01987CE5437AB09967680EAC86A77146F3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          11F8
Signing time:             Wed 06 Aug 2025 01:00:56 +0000
Manifest this update:     Wed 06 Aug 2025 01:00:56 +0000
Manifest next update:     Thu 07 Aug 2025 01:00:56 +0000
Files and hashes:         1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: hppggv5DG6lmjS7HNAqRJSFJv1AcAESu/+5zQReZjDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:e5:43:7a:b0:99:67:68:0e:ac:86:a7:71:46:f3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Aug  6 01:00:56 2025 GMT
            Not After : Aug  7 01:00:56 2025 GMT
        Subject: CN=03dcffb54ea36ae29a874d8b7ee8673ce382520a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:14:a9:6f:d1:a6:3a:82:45:15:96:fd:d0:33:
                    0f:f8:c6:db:86:87:b0:df:1c:88:c6:db:b2:87:89:
                    a2:23:fa:08:82:d0:cd:27:07:49:ed:be:4a:14:b6:
                    5c:f3:32:5c:5c:36:3e:1d:74:08:9f:45:7b:8e:ac:
                    d1:42:43:ad:a5:01:01:72:97:9f:07:e6:04:46:2e:
                    ce:19:da:6c:33:5c:98:74:6a:c8:df:f3:7b:57:10:
                    28:a0:fc:85:aa:e7:06:7a:b7:9b:9d:2e:73:12:48:
                    71:5a:3b:8e:be:64:8a:15:cd:38:f2:62:b6:45:58:
                    84:a5:b2:5b:b4:67:6f:4e:92:12:f4:09:1f:89:a7:
                    64:df:c6:90:09:ce:e2:51:c1:73:bc:f0:8c:1a:58:
                    ec:20:85:d2:57:a2:d9:40:47:42:e5:a4:e5:50:dc:
                    73:cd:a1:22:c6:f6:e5:e5:67:e8:5f:39:c9:4e:28:
                    74:e8:22:42:6f:ff:c8:b5:36:27:84:29:ac:e9:95:
                    cf:f4:6d:52:d5:c4:05:3d:07:07:d0:c0:d0:06:a0:
                    5a:df:8e:36:17:78:80:0f:04:c8:f4:6b:ea:c1:8a:
                    de:be:8f:82:e0:3f:cf:02:8c:75:83:54:9e:a9:89:
                    57:25:60:75:55:ca:00:b0:de:56:a4:55:c8:58:1d:
                    e9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DC:FF:B5:4E:A3:6A:E2:9A:87:4D:8B:7E:E8:67:3C:E3:82:52:0A
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:8a:23:72:d1:5b:48:69:8d:99:04:f3:f2:81:84:29:2b:
         a4:d6:f9:6c:73:7f:59:e2:f2:5c:ff:1b:ee:0a:f0:67:40:92:
         12:85:93:56:d7:a5:32:54:9c:7e:0b:0e:64:1c:0c:b9:ec:ba:
         8a:be:53:90:c1:d4:f5:6b:f7:21:be:3e:7e:3c:e6:33:69:1a:
         fb:8e:49:44:7f:57:89:11:b0:26:14:4d:e7:79:62:9c:ac:68:
         65:b6:b6:cc:6a:e7:ca:e5:57:eb:1f:d3:fc:d0:65:9d:5f:0e:
         84:11:f8:a7:07:d5:cc:72:10:1c:d0:ee:44:87:e6:d3:d9:e4:
         e8:be:2a:0c:88:fb:3d:69:52:61:0a:e2:cd:08:02:53:52:1c:
         11:40:3c:6f:a6:0c:79:17:9a:ad:5d:4d:cb:75:a6:34:56:d8:
         dc:ae:6d:bd:62:ba:d8:53:cc:24:d9:82:36:e4:4a:12:6e:cd:
         1d:8b:14:08:52:e0:32:b9:af:cf:2e:8e:d6:72:96:b6:08:86:
         6f:5f:bd:21:22:d7:c9:b9:fd:60:da:6f:13:03:51:ba:69:10:
         22:b5:ff:3c:ae:08:27:f9:8d:c4:cc:78:16:57:ca:5e:b9:89:
         2f:c7:c6:fd:e4:a9:23:57:d2:d3:ba:59:a6:0c:ce:43:c9:0e:
         11:07:41:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh85UN6sJlnaA6shqdxRvOgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjYzUwYTJiOTc0MzQ5OTQ4YjA0ZWUzODliMmE5OWQxNzU0
ZmI0NjQwHhcNMjUwODA2MDEwMDU2WhcNMjUwODA3MDEwMDU2WjAzMTEwLwYDVQQD
EygwM2RjZmZiNTRlYTM2YWUyOWE4NzRkOGI3ZWU4NjczY2UzODI1MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBSpb9GmOoJFFZb90DMP+Mbbhoew
3xyIxtuyh4miI/oIgtDNJwdJ7b5KFLZc8zJcXDY+HXQIn0V7jqzRQkOtpQEBcpef
B+YERi7OGdpsM1yYdGrI3/N7VxAooPyFqucGerebnS5zEkhxWjuOvmSKFc048mK2
RViEpbJbtGdvTpIS9Akfiadk38aQCc7iUcFzvPCMGljsIIXSV6LZQEdC5aTlUNxz
zaEixvbl5WfoXznJTih06CJCb//ItTYnhCms6ZXP9G1S1cQFPQcH0MDQBqBa3442
F3iADwTI9GvqwYrevo+C4D/PAox1g1SeqYlXJWB1VcoAsN5WpFXIWB3ppwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPc/7VOo2rimodNi37oZzzjglIKMB8GA1UdIwQY
MBaAFNzFCiuXQ0mUiwTuOJsqmdF1T7RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2It
NTk3OWQwMDQ4NmZlLzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi83MDcxNTgtZDFlMi00ZmNiLTgxY2ItNTk3OWQwMDQ4NmZl
LzEvM01VS0s1ZERTWlNMQk80NG15cVowWFZQdEdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeK6KI3LR
W0hpjZkE8/KBhCkrpNb5bHN/WeLyXP8b7grwZ0CSEoWTVtelMlScfgsOZBwMuey6
ir5TkMHU9Wv3Ib4+fjzmM2ka+45JRH9XiRGwJhRN53linKxoZba2zGrnyuVX6x/T
/NBlnV8OhBH4pwfVzHIQHNDuRIfm09nk6L4qDIj7PWlSYQrizQgCU1IcEUA8b6YM
eRearV1Ny3WmNFbY3K5tvWK62FPMJNmCNuRKEm7NHYsUCFLgMrmvzy6O1nKWtgiG
b1+9ISLXybn9YNpvEwNRumkQIrX/PK4IJ/mNxMx4FlfKXrmJL8fG/eSpI1fS07pZ
pgzOQ8kOEQdB3Q==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:03:22 2025 by rpki-client