Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          Ol1JKI4qxhvkPqBo88EEzm/cXX88MU6qe5wSb6iDj3U=
Subject key identifier:   CF:23:62:43:E7:2A:DC:83:4E:CF:5E:32:FE:5E:ED:47:BC:D1:1A:93
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       01988167037D5E47EE21695A34BD5B00613E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          161D
Signing time:             Wed 06 Aug 2025 22:01:08 +0000
Manifest this update:     Wed 06 Aug 2025 22:01:08 +0000
Manifest next update:     Thu 07 Aug 2025 22:01:08 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: Zyg4Vx+PrMjLyRVvvferFlF2ckFf30i3yvDm+16L/xY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:03:7d:5e:47:ee:21:69:5a:34:bd:5b:00:61:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Aug  6 22:01:08 2025 GMT
            Not After : Aug  7 22:01:08 2025 GMT
        Subject: CN=cf236243e72adc834ecf5e32fe5eed47bcd11a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:81:b5:5c:5a:90:8a:95:7d:de:4d:ba:92:af:
                    95:f4:17:f6:08:30:da:6d:7e:f6:44:16:ad:db:5e:
                    37:6a:ce:88:b7:a8:43:d5:7b:ac:e3:be:1b:63:98:
                    8a:00:82:34:2b:e9:b2:da:b5:ab:c4:6c:79:47:1a:
                    b3:54:94:79:3a:ac:69:4d:5e:ad:fd:4d:6d:35:54:
                    b7:5b:89:72:96:cf:cb:b6:61:c3:c1:7f:3c:08:93:
                    48:59:be:b5:d7:4c:a8:dd:88:40:df:9e:d9:e0:d1:
                    94:8c:a7:54:9c:96:6d:fc:df:b3:b3:ab:ef:f5:f9:
                    df:db:79:b1:fc:4e:20:a6:0e:79:37:8b:9a:ad:27:
                    16:ec:5b:9d:17:92:ae:02:db:8e:ce:c2:ad:1d:0c:
                    00:af:33:a7:92:54:31:43:b7:75:58:2f:9f:72:d3:
                    ee:32:ed:2b:73:b5:64:d6:16:9f:a9:6b:f8:30:46:
                    bf:fe:a5:6a:7b:fe:80:d5:40:ab:43:52:b2:9c:de:
                    68:29:bd:19:ac:6d:50:c3:8e:16:92:2c:23:39:4a:
                    61:95:9c:22:4c:3f:13:d6:8d:d2:38:ca:e1:b5:a8:
                    c1:02:6f:32:4e:9c:6b:89:3f:16:53:0b:74:bd:09:
                    00:cf:e1:c3:af:27:81:2e:80:32:9d:a1:49:d1:04:
                    ec:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:23:62:43:E7:2A:DC:83:4E:CF:5E:32:FE:5E:ED:47:BC:D1:1A:93
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c8:34:5c:1a:e7:01:a3:2a:86:92:9d:52:5a:99:fb:d0:a8:
         be:7b:f9:9c:71:01:4d:5a:d6:df:83:2d:48:a7:0c:12:21:aa:
         30:02:3e:c4:7e:1b:52:b6:cc:b4:e1:81:c4:da:92:6e:16:e0:
         e1:a7:87:e0:2c:2c:de:ba:24:e0:dd:12:c7:02:41:b8:30:67:
         80:f9:dc:48:b3:d0:47:c2:47:64:90:4f:fd:3e:1e:6f:32:c1:
         03:fc:a1:41:7a:0c:c0:f1:21:b9:67:a7:bf:fe:dd:04:1a:85:
         88:24:33:37:d8:80:05:bd:64:2f:d6:d0:27:78:91:e5:fc:f9:
         30:29:15:cf:68:43:44:af:3d:9c:6d:b3:0b:3e:99:48:75:a5:
         16:56:d6:ad:c2:7d:58:38:43:4b:76:cf:7c:1d:0d:28:fd:83:
         7d:41:5c:68:0d:4d:8a:3c:a0:f6:57:ab:9b:e9:6c:07:91:6e:
         89:f5:b2:35:92:0e:5e:2a:4c:b4:9a:56:c1:03:36:4d:b6:19:
         06:76:4f:86:6b:cc:20:b0:0a:d3:67:50:68:00:76:29:31:ed:
         61:c7:b6:05:7a:23:25:d5:a3:4c:b8:8b:89:09:34:a1:78:52:
         31:9b:a3:81:df:cc:74:0b:94:db:41:cd:14:fb:f9:3f:0f:ad:
         1f:4d:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:55 2025 by rpki-client