Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
File:                     MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft (raw, json)
Hash identifier:          8SjohBGkw7oPL+aHj0aYij0udBlW+qzpFks0GUa0ZTs=
Subject key identifier:   3B:CB:8B:4F:8F:A5:8C:FF:95:06:31:DD:CF:89:B9:9C:2C:D3:06:F7
Authority key identifier: 30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91
Certificate issuer:       /CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
Certificate serial:       0198733D9DF654AC301872B419831E9B8F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
Manifest number:          32
Signing time:             Mon 04 Aug 2025 04:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 04:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 04:01:14 +0000
Files and hashes:         1: MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl (hash: +yMjJIMfJLCk2jrm5Dn/yoePg7dIVHtKlkXkKwzhe+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:9d:f6:54:ac:30:18:72:b4:19:83:1e:9b:8f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=309e48b82831ff9cbbc0bf7dafd7d464b312c191
        Validity
            Not Before: Aug  4 04:01:14 2025 GMT
            Not After : Aug  5 04:01:14 2025 GMT
        Subject: CN=3bcb8b4f8fa58cff950631ddcf89b99c2cd306f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9e:7e:bf:94:70:1f:76:da:d8:4f:04:c4:8f:
                    e2:e2:b9:e7:e5:66:63:53:0e:2e:76:de:c4:25:55:
                    92:f5:b3:cd:db:be:61:a7:b2:6d:12:76:49:7f:1b:
                    e2:7f:85:14:9f:c6:70:42:f9:55:42:6e:3c:f5:50:
                    dc:a1:20:75:9e:47:6d:d0:b2:a4:6d:e8:81:5f:df:
                    2a:cb:bd:91:2c:92:bd:d4:13:92:6c:81:2c:ed:c5:
                    e7:4d:b0:c5:99:eb:92:e0:20:7c:11:7b:f8:d9:fb:
                    ea:7d:95:09:1c:ac:f8:c3:6a:5e:1a:3e:e2:6d:e5:
                    55:b2:10:bf:f1:d3:67:a9:2f:88:13:d6:c2:c2:a2:
                    a6:7d:eb:12:96:f0:53:1e:98:82:a8:c3:ff:b2:64:
                    fc:b0:bd:ef:2f:d0:39:9b:1d:7b:6f:ca:e0:1c:e9:
                    49:70:63:0f:1a:34:2d:ae:f1:3f:2e:af:ca:0e:97:
                    90:a0:cf:b5:0a:ae:ce:78:59:28:1f:97:4a:88:e4:
                    ab:b6:04:96:79:c8:0d:98:b2:41:60:ad:61:81:e7:
                    f6:2c:bb:9b:30:f9:1a:91:1f:dd:b9:8e:b9:b5:8d:
                    30:35:c2:7e:43:56:7c:4c:f1:7b:ff:e3:69:09:30:
                    98:c1:40:93:85:cd:23:33:e4:b0:5f:da:47:ec:52:
                    53:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CB:8B:4F:8F:A5:8C:FF:95:06:31:DD:CF:89:B9:9C:2C:D3:06:F7
            X509v3 Authority Key Identifier:
                keyid:30:9E:48:B8:28:31:FF:9C:BB:C0:BF:7D:AF:D7:D4:64:B3:12:C1:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJ5IuCgx_5y7wL99r9fUZLMSwZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9622a3-94f1-4fbc-a46b-2b248f2f12a7/1/MJ5IuCgx_5y7wL99r9fUZLMSwZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7a:aa:61:14:89:80:3b:de:ff:99:57:c7:03:d2:3d:40:7b:
         a3:b0:44:61:b2:7f:d0:33:3d:97:5e:53:29:f7:94:38:7a:5e:
         38:11:a7:1a:53:52:c5:b4:6c:ec:1a:a6:c6:d3:2f:9a:4a:7e:
         73:1f:68:48:7e:ba:9f:0e:54:ef:f6:f7:54:ef:ef:48:f6:a5:
         92:f4:cb:8d:3f:c2:3e:8b:46:c7:0c:f5:80:73:31:4c:21:a3:
         39:57:c2:5f:fe:86:b5:a5:a4:ac:7f:21:2f:a6:c5:51:81:3f:
         89:9e:68:4d:c3:a0:34:f4:96:64:0c:b9:bd:c9:2b:07:86:fe:
         b1:67:6b:fc:13:87:f0:48:30:5a:db:9e:08:b5:eb:59:4e:33:
         1d:f3:7d:65:77:02:8d:29:59:03:7b:ca:f4:79:0d:ee:ab:52:
         a6:94:33:ab:e6:9a:cc:1b:11:f3:c5:ef:9b:cd:85:ed:b8:30:
         d6:2d:cf:ac:48:a6:83:84:10:90:dd:48:e9:ad:16:24:53:de:
         2d:0e:75:5c:7e:38:6b:09:dd:65:68:5c:a1:91:08:5b:e7:aa:
         cc:17:8b:4b:6b:ce:4f:dd:cb:bd:72:33:18:c2:b8:0c:42:34:
         c7:34:e7:e9:f0:ab:ca:fa:8f:7d:77:bd:db:24:76:0b:72:cf:
         87:c3:6b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:16:37 2025 by rpki-client