Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
File:                     muVOVVW5meWct0g6YG1rJMv2GYw.mft (raw, json)
Hash identifier:          U3tyrpUJ18CF1C72okRs5KijNZGssVNNKX+klWW5eJA=
Subject key identifier:   06:FF:3B:81:7E:D4:A5:FF:9F:E2:5F:AB:25:90:2D:76:FE:51:60:BC
Authority key identifier: 9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C
Certificate issuer:       /CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
Certificate serial:       019892FF1FEEDD1ADAEFE2D823C6D1FCEEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
Manifest number:          F9
Signing time:             Sun 10 Aug 2025 08:00:50 +0000
Manifest this update:     Sun 10 Aug 2025 08:00:50 +0000
Manifest next update:     Mon 11 Aug 2025 08:00:50 +0000
Files and hashes:         1: muVOVVW5meWct0g6YG1rJMv2GYw.crl (hash: J8zu0kcEaZ8ayeWTa+JcKKxK30h8KC3LPpa8zVh8zjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:ff:1f:ee:dd:1a:da:ef:e2:d8:23:c6:d1:fc:ee:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae54e5555b999e59cb7483a606d6b24cbf6198c
        Validity
            Not Before: Aug 10 08:00:50 2025 GMT
            Not After : Aug 11 08:00:50 2025 GMT
        Subject: CN=06ff3b817ed4a5ff9fe25fab25902d76fe5160bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4f:7b:a4:40:6e:5a:f4:7e:b0:76:35:c2:f2:
                    85:8a:14:a0:01:e1:ec:14:3d:69:df:73:94:4f:48:
                    0c:e8:3c:22:5b:5b:59:70:72:31:cd:63:4d:03:30:
                    05:3f:be:10:e5:a6:a2:f1:a7:c5:75:24:78:c3:cf:
                    32:8c:76:f1:e2:b2:a3:6c:03:33:84:32:2e:84:38:
                    ee:5d:84:4b:f3:1e:b1:cf:2c:87:cb:a8:27:8b:2e:
                    ae:15:e7:74:74:c7:a7:64:65:a4:21:3f:fb:57:65:
                    d9:ad:0f:c7:5b:0d:ab:a2:55:7f:72:4c:0d:02:ca:
                    6d:d8:fa:9a:1f:ab:08:19:8d:dc:56:9d:67:cd:e0:
                    a9:c5:ff:27:0e:e8:e4:c7:7a:03:1b:32:b9:0a:ec:
                    03:87:d1:1a:80:c0:b3:9c:12:a1:b0:5a:84:be:ca:
                    5c:3f:38:b8:ae:88:17:03:a9:5e:fe:70:b2:a5:fa:
                    78:8e:20:4b:ba:8e:6e:bc:0c:27:36:e2:f9:ca:f6:
                    11:04:ee:f7:31:ab:61:4e:76:d7:3c:7d:70:e3:17:
                    58:1c:d9:c7:4f:f8:21:00:69:64:6e:ad:14:54:52:
                    d3:7e:cd:c3:7a:33:d8:a7:e2:b2:92:1b:31:3d:75:
                    73:25:e3:d3:f4:0e:b8:0b:5f:af:68:0c:69:2b:f4:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FF:3B:81:7E:D4:A5:FF:9F:E2:5F:AB:25:90:2D:76:FE:51:60:BC
            X509v3 Authority Key Identifier:
                keyid:9A:E5:4E:55:55:B9:99:E5:9C:B7:48:3A:60:6D:6B:24:CB:F6:19:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muVOVVW5meWct0g6YG1rJMv2GYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a6a-ea82-4f43-9786-3a4d44956dd4/1/muVOVVW5meWct0g6YG1rJMv2GYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c8:46:7e:e8:d1:0d:d7:8a:f7:cc:68:02:25:16:1b:b2:4a:
         db:da:a7:a3:f0:ef:93:03:5b:7f:d0:eb:dc:e6:72:d3:09:4c:
         f9:42:22:af:4b:8e:09:e7:1f:2e:06:1d:79:08:18:ef:d9:fb:
         c2:6d:ec:02:f9:e6:16:ac:6e:17:79:88:bb:25:d4:76:66:bf:
         eb:0f:6a:1e:29:46:fb:3d:95:7b:e9:f3:91:f9:8a:ab:27:f9:
         25:64:4a:90:bb:6b:60:7c:5f:27:5c:4d:97:3e:20:41:5a:05:
         ff:87:fb:33:88:ed:a2:f9:05:67:19:92:3f:09:1d:ad:6c:ca:
         3d:3c:38:e8:4e:a6:78:35:de:c1:3d:96:f2:d9:b1:fb:f2:78:
         ba:69:ab:19:7c:f5:e0:86:51:ea:22:01:1d:a2:07:c7:8b:1f:
         be:24:60:23:ba:c9:62:a6:44:cf:0d:52:6e:14:5e:34:3e:56:
         98:11:df:73:f7:53:d8:7e:91:6e:42:36:c7:b1:15:2c:d9:e7:
         50:52:35:95:6f:83:82:c2:4c:d4:65:b3:09:15:11:cf:d2:4b:
         c6:0d:93:a9:c9:f1:1e:b8:d9:fe:6a:81:8c:a7:e0:68:6d:e0:
         a5:66:18:a6:e7:07:46:a9:92:5f:0d:5d:2d:4e:73:fe:55:9f:
         6d:56:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:24 2025 by rpki-client