Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
File:                     MMu06oV_eyolkC7geq4ucSLc1cw.mft (raw, json)
Hash identifier:          UsSoUQDXr/fIXY617gMoElRPvWXKw43hat4QAg9FOmk=
Subject key identifier:   20:C0:8C:A0:4A:8E:69:89:26:4D:91:72:73:E3:0E:24:05:00:DB:BB
Authority key identifier: 30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC
Certificate issuer:       /CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
Certificate serial:       0197711A9EBDF1233F352D2D3F7381975943
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
Manifest number:          1590
Signing time:             Sun 15 Jun 2025 01:00:59 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:59 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:59 +0000
Files and hashes:         1: MMu06oV_eyolkC7geq4ucSLc1cw.crl (hash: IlYM9xGGE9pBRMEmOx+Xp5Oe2ZDtPmHLzs1pZbnYfeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:9e:bd:f1:23:3f:35:2d:2d:3f:73:81:97:59:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30cbb4ea857f7b2a25902ee07aae2e7122dcd5cc
        Validity
            Not Before: Jun 15 01:00:59 2025 GMT
            Not After : Jun 16 01:00:59 2025 GMT
        Subject: CN=20c08ca04a8e6989264d917273e30e240500dbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:e2:0d:ea:56:76:e6:8c:03:fe:fd:b9:a3:
                    f1:c6:e3:e1:36:62:ec:7a:94:dc:e3:09:5b:4d:1f:
                    31:36:b9:00:5d:3d:45:f4:88:d1:a1:a1:ab:3f:91:
                    62:cc:f1:dd:b8:69:4b:51:ef:97:8a:d3:41:c0:06:
                    8a:37:bd:1a:cf:08:e5:15:8c:df:9a:9f:b6:6a:fc:
                    d9:1d:38:6f:d4:3e:9f:eb:e8:d4:8a:46:bb:8b:4d:
                    85:ca:fe:69:52:65:1f:36:da:bb:08:a2:3c:c6:29:
                    cb:b6:da:27:85:ee:99:c0:30:5b:d2:ff:a7:f9:f8:
                    ac:5f:a7:80:55:d0:71:e1:68:7b:2d:8b:f2:f8:a1:
                    4f:1f:bd:43:77:d6:bb:30:84:d9:fa:91:e1:34:64:
                    00:c9:6e:d7:b2:cc:e8:ef:ab:f9:d5:76:8c:5a:41:
                    96:07:46:bf:1e:a3:22:0c:f4:54:02:5b:16:75:28:
                    14:f7:ac:d0:62:af:db:c0:4a:ef:3b:9f:d2:e3:02:
                    55:b1:65:17:28:7e:c6:2d:8c:57:21:fd:32:40:cb:
                    ca:6f:04:92:f2:55:83:45:8a:8e:73:5c:06:d6:0b:
                    42:a3:b5:59:e5:ab:18:cc:58:9f:35:f8:cc:f0:24:
                    d8:be:c5:01:f0:52:94:2e:7e:9b:01:52:31:58:a1:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C0:8C:A0:4A:8E:69:89:26:4D:91:72:73:E3:0E:24:05:00:DB:BB
            X509v3 Authority Key Identifier:
                keyid:30:CB:B4:EA:85:7F:7B:2A:25:90:2E:E0:7A:AE:2E:71:22:DC:D5:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMu06oV_eyolkC7geq4ucSLc1cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/00ab67-32c4-472d-9268-cfcd766283a7/1/MMu06oV_eyolkC7geq4ucSLc1cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4f:9e:56:0d:91:ff:d6:28:8a:cf:ce:56:37:03:d8:fb:8b:
         18:0f:9c:f9:5d:53:0c:94:97:e4:cb:bc:2e:36:98:10:5b:3a:
         ab:48:dd:ed:d1:75:92:cc:9f:87:20:6e:b3:4d:d6:b7:58:95:
         6b:46:91:d6:ee:f5:a4:a3:3a:67:82:06:1e:28:c5:d5:8e:29:
         8b:ba:86:66:00:05:e2:d4:f4:b5:c1:71:47:da:c5:8c:95:ec:
         9b:77:ee:7e:5c:f7:e1:1a:bb:c6:67:7e:b7:65:3a:4b:bd:12:
         69:68:70:16:d6:73:d8:ee:b2:46:eb:b4:f2:55:8c:13:cb:2e:
         9e:c1:7a:42:3f:6a:08:1d:73:9f:3b:cc:02:1a:28:be:1c:16:
         aa:ee:2b:5d:85:4c:de:37:70:05:c5:89:e8:43:6c:69:09:6f:
         40:bc:04:d5:5f:19:ca:73:12:4c:7e:4c:47:db:4a:6e:fe:3d:
         43:05:59:47:b4:51:ee:9f:9e:9f:c0:83:6f:98:04:04:d8:0f:
         80:0e:72:03:2b:6d:c3:b1:40:85:58:16:10:34:96:bd:71:e6:
         f4:44:48:20:66:4a:cd:63:2e:dd:71:8e:ef:61:b1:64:57:3e:
         5c:d8:7e:75:c8:1a:44:39:1f:72:ae:d3:70:6f:94:a5:c4:bc:
         20:f1:26:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:27 2025 by rpki-client