Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
File:                     mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft (raw, json)
Hash identifier:          sM68r9K6+zJlddvJPCXP8veNxE8aUw5+LGTK92x7Tpk=
Subject key identifier:   55:44:37:77:08:CC:2C:4C:24:9B:2B:05:94:91:D6:A0:9B:B4:A2:BF
Authority key identifier: 9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF
Certificate issuer:       /CN=9a961a121c520054df4ce59e5592ac68b0506bef
Certificate serial:       0198744FE2374B8CAB8F6DFBDA4AC4D869AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
Manifest number:          060C
Signing time:             Mon 04 Aug 2025 09:00:48 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:48 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:48 +0000
Files and hashes:         1: mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl (hash: csyu7qImOUByUFqBv1OKCvAkjcXTlAeEA3VoqigQqGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:e2:37:4b:8c:ab:8f:6d:fb:da:4a:c4:d8:69:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a961a121c520054df4ce59e5592ac68b0506bef
        Validity
            Not Before: Aug  4 09:00:48 2025 GMT
            Not After : Aug  5 09:00:48 2025 GMT
        Subject: CN=5544377708cc2c4c249b2b059491d6a09bb4a2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d9:18:50:ed:0b:63:4a:13:77:8a:3f:1d:d8:
                    24:73:29:34:02:7e:33:1c:b2:82:dd:47:02:7f:45:
                    1e:3a:82:10:0f:1d:52:88:5f:9d:f5:8b:33:b5:ed:
                    0e:70:49:a9:4e:b1:81:a4:6a:85:b3:fa:1a:4c:de:
                    c5:03:60:8e:66:c4:00:e0:e5:3d:9a:76:80:ae:20:
                    7e:03:ec:5d:56:1a:ab:8a:2a:63:a0:36:48:72:4e:
                    d4:84:69:7b:a6:a1:6e:31:ff:eb:02:ee:5a:5f:ec:
                    29:50:8a:5d:1f:12:16:c0:b8:f9:9e:19:e1:c6:f5:
                    e8:57:c3:70:da:f7:5c:c5:a7:33:3e:d1:f3:95:6f:
                    a4:ac:57:b3:ea:de:df:c3:ca:e6:bd:23:34:9c:57:
                    49:a0:f2:cd:de:27:b6:69:b7:dd:86:e8:d0:72:7d:
                    2b:59:89:2a:5d:64:8e:a3:15:e0:0d:64:d2:63:37:
                    98:ed:01:8e:a5:9d:8e:05:fe:c9:04:77:7e:92:82:
                    22:b7:06:18:fd:9b:df:b9:05:0f:d6:e4:0b:da:bf:
                    cb:cf:24:03:4f:c8:14:6f:87:94:44:34:11:a5:93:
                    55:0c:b8:36:3a:06:53:d9:03:f8:79:c5:25:37:1d:
                    47:14:58:9d:51:2e:e6:0f:7b:77:61:37:88:d1:29:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:44:37:77:08:CC:2C:4C:24:9B:2B:05:94:91:D6:A0:9B:B4:A2:BF
            X509v3 Authority Key Identifier:
                keyid:9A:96:1A:12:1C:52:00:54:DF:4C:E5:9E:55:92:AC:68:B0:50:6B:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpYaEhxSAFTfTOWeVZKsaLBQa-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c5c233-b478-44bc-ae9e-48bc8cb3cdaa/1/mpYaEhxSAFTfTOWeVZKsaLBQa-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:20:5f:12:59:aa:c5:30:c8:44:dc:da:a4:6f:4e:47:92:d1:
         32:b9:05:2c:c6:1d:54:f4:a3:45:3e:04:a7:cf:1d:eb:04:1e:
         e1:03:d5:c6:ae:77:5e:46:7d:6c:65:15:20:8e:82:03:37:c4:
         88:51:6b:3c:f0:23:e6:03:97:63:79:3d:6e:24:92:cf:2f:92:
         39:d2:19:b5:2d:69:38:d1:19:ab:16:65:05:35:12:e4:05:7b:
         e5:ba:6e:70:10:14:5f:71:31:b0:3a:16:69:c3:7f:56:8c:8f:
         b4:3c:05:8a:c9:46:44:ee:86:a4:36:f2:8e:93:91:a3:e2:6b:
         e7:a1:01:6d:ef:cc:b4:a4:69:23:bb:d3:e9:90:4b:51:2c:60:
         43:1e:c4:a8:37:9e:6b:da:ac:77:ad:c9:28:3b:79:9d:00:9b:
         6d:63:b4:84:0f:a2:f7:94:37:5b:45:f4:e4:c5:d6:fb:70:86:
         0d:e7:ad:20:1b:87:a1:3b:74:2c:0f:f2:29:01:0f:34:d9:4e:
         c4:f9:53:d4:fc:3a:97:b4:43:33:f4:2a:6e:a3:f7:e3:2f:a7:
         46:61:db:20:f2:65:58:ee:ee:66:64:12:ed:88:98:e5:98:a9:
         1e:2a:bf:49:3a:1d:0d:0e:54:4e:60:ef:1d:8c:b7:af:32:5a:
         a4:a9:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:14:39 2025 by rpki-client