Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
File:                     01MMFE9ZLPqJG6vxlagXkAzW2RY.mft (raw, json)
Hash identifier:          M3ILDVcx9/U1nmsOEqOksZN7j4TrV3Ca7hgSrsC95xM=
Subject key identifier:   BB:BC:BC:A1:25:96:47:CC:34:80:84:03:48:5E:CE:65:DF:AF:DA:21
Authority key identifier: D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16
Certificate issuer:       /CN=d3530c144f592cfa891babf195a817900cd6d916
Certificate serial:       019873E384FA746B824967D412AEBDFBCE6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
Manifest number:          CC
Signing time:             Mon 04 Aug 2025 07:02:27 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:27 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:27 +0000
Files and hashes:         1: 01MMFE9ZLPqJG6vxlagXkAzW2RY.crl (hash: ds7SKezdKDm/22Tr42cNxFefmPGzngD/LamSRJeafHw=)
                          2: r_GfDo9ZWQ7myQ0iViJXzfWcph4.roa (hash: x8B6QTHVzWahPni+0i08daL7qF7EoN+d+/45THjKk0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:84:fa:74:6b:82:49:67:d4:12:ae:bd:fb:ce:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3530c144f592cfa891babf195a817900cd6d916
        Validity
            Not Before: Aug  4 07:02:27 2025 GMT
            Not After : Aug  5 07:02:27 2025 GMT
        Subject: CN=bbbcbca1259647cc34808403485ece65dfafda21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:06:36:ce:87:70:12:1e:47:f9:39:38:d8:4b:
                    a5:1a:ed:35:99:d9:8f:50:9b:e6:ab:61:24:8a:ca:
                    2b:01:b1:f7:53:87:c0:d9:3d:76:ee:dd:39:fd:4b:
                    d2:3a:58:0a:57:46:06:c0:84:25:cd:3f:7f:82:ac:
                    13:73:ad:2b:5e:b3:d7:2a:04:5d:ae:ca:62:a3:3c:
                    75:fd:b3:24:ab:a4:28:ac:bc:0f:59:00:4d:64:cd:
                    e7:e5:48:3a:c7:08:fd:ae:da:5e:27:9d:f2:34:41:
                    c9:0c:f7:e8:a2:4d:0a:e4:63:e0:0b:c1:cb:b2:5d:
                    52:8f:53:c6:16:db:22:e2:20:28:49:3e:9f:98:97:
                    3b:f9:f6:ce:27:04:6d:3e:60:50:56:3c:3b:2e:9d:
                    56:f4:de:0d:20:11:57:32:7a:90:72:83:5b:51:22:
                    04:71:ab:27:c7:7e:45:aa:29:e3:6a:2b:17:82:87:
                    a7:df:63:c2:c1:dc:77:4a:4d:77:73:3b:14:18:8c:
                    d7:75:e6:d3:f5:5c:03:75:07:f8:ca:9b:45:6b:bc:
                    6a:c2:d2:16:60:61:3c:f1:3c:06:38:db:fd:32:42:
                    c5:b7:1c:d1:6e:5b:d9:4d:e3:60:2d:70:70:4c:84:
                    19:1b:7b:a8:47:f6:da:11:7e:7b:4c:42:ea:c4:54:
                    49:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BC:BC:A1:25:96:47:CC:34:80:84:03:48:5E:CE:65:DF:AF:DA:21
            X509v3 Authority Key Identifier:
                keyid:D3:53:0C:14:4F:59:2C:FA:89:1B:AB:F1:95:A8:17:90:0C:D6:D9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01MMFE9ZLPqJG6vxlagXkAzW2RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d3cc80-c1de-498f-88ef-6ba79957e862/1/01MMFE9ZLPqJG6vxlagXkAzW2RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:be:ca:a4:fc:39:de:6f:58:4a:af:77:d4:26:f0:72:3e:a7:
         6d:93:e9:bd:17:08:f0:2c:06:87:07:19:33:26:2c:03:6b:36:
         2f:98:73:77:c3:ce:9e:10:f2:1c:be:74:51:4a:d9:51:a7:92:
         35:fd:0f:73:2f:ce:ec:c5:8f:1f:91:5e:6a:d3:95:b4:5f:36:
         f6:e7:af:46:d0:c7:41:ac:5e:20:39:74:fb:b1:af:ee:13:43:
         43:ab:2c:6a:a8:0f:d9:61:2a:1f:52:61:3f:89:4c:47:97:3c:
         b3:73:13:0c:ca:45:e4:20:5b:7b:35:c6:af:34:30:bf:10:48:
         e6:ea:75:3a:4e:34:e4:bc:01:a9:11:15:55:73:80:78:30:4e:
         0b:5b:d8:99:33:19:8b:c5:8e:72:c1:22:f1:4c:07:c8:e5:91:
         27:c6:1b:38:bb:d9:14:d0:3f:71:2d:10:53:f6:42:e8:44:ea:
         49:eb:75:68:53:ef:f3:f4:ea:5d:8e:71:89:0b:13:f7:96:67:
         de:2d:5e:b2:fc:bb:a0:38:ad:b7:9f:aa:e0:b2:00:3d:e8:c4:
         70:56:ae:50:fc:f5:2d:22:7c:6f:6c:f7:7d:44:28:74:6e:19:
         63:83:11:5e:6c:85:b6:e6:ae:3e:25:c7:94:03:a4:f5:ea:68:
         d0:25:aa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:41 2025 by rpki-client