Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
File:                     rmmejy1W6TrqTaYW2HK2VX1w35c.mft (raw, json)
Hash identifier:          J9u2yYXSGdhHn50MQ63+6eY2VeEJfGf2dUTnTTCKCHg=
Subject key identifier:   E4:BB:E4:06:76:C9:C5:A2:2D:93:2E:69:93:68:89:85:BB:A8:90:55
Authority key identifier: AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97
Certificate issuer:       /CN=ae699e8f2d56e93aea4da616d872b6557d70df97
Certificate serial:       01987D89EA4E2E3F33FE13467BECB530239F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
Manifest number:          0600
Signing time:             Wed 06 Aug 2025 04:00:47 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:47 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:47 +0000
Files and hashes:         1: rmmejy1W6TrqTaYW2HK2VX1w35c.crl (hash: Gc3oAz4EH87IF5KZJVyKDTyBJ0wgy2/mIfzleGYyOjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:89:ea:4e:2e:3f:33:fe:13:46:7b:ec:b5:30:23:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae699e8f2d56e93aea4da616d872b6557d70df97
        Validity
            Not Before: Aug  6 04:00:47 2025 GMT
            Not After : Aug  7 04:00:47 2025 GMT
        Subject: CN=e4bbe40676c9c5a22d932e6993688985bba89055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:46:61:78:bb:b4:e8:87:ba:1e:c4:b8:83:
                    f4:54:cc:1b:ab:d4:0e:d2:ae:08:b5:e2:4d:5e:c0:
                    8f:41:c3:43:b5:ce:5d:3d:c5:28:7d:ab:f3:ee:ab:
                    27:3f:72:b1:dc:95:30:65:58:7b:34:6f:d4:44:c7:
                    1d:63:bd:0c:35:49:a6:d5:8b:c3:1a:77:18:de:62:
                    71:17:a6:f6:aa:c2:b2:12:1e:c9:d7:f5:39:e8:54:
                    92:4b:f4:a0:04:d0:72:d5:4f:a3:f7:c5:93:21:26:
                    b8:b3:ca:bd:59:ec:8e:b2:0f:25:e0:dc:f5:62:1a:
                    f2:93:97:f2:9e:4c:57:29:fa:22:c4:e6:78:77:2a:
                    b4:f0:3f:3b:55:49:da:2b:09:e1:47:f0:8b:94:36:
                    39:e7:ef:59:bb:ef:94:8c:49:af:37:ca:e8:3a:42:
                    57:68:81:c2:d9:5d:14:2f:b9:b4:bf:26:94:57:32:
                    6c:8b:83:c5:b0:fd:4c:99:c1:0c:4c:78:92:a9:97:
                    ca:9b:5e:13:6e:00:6d:c3:d6:87:6c:fe:59:b8:a7:
                    e0:5e:6a:bc:40:9b:ec:64:f4:23:ce:ca:b8:2b:e8:
                    e2:47:93:33:42:9c:e9:37:a7:fc:eb:bf:98:58:a1:
                    58:dd:bb:0d:39:02:ee:69:7f:73:9f:99:70:d6:24:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BB:E4:06:76:C9:C5:A2:2D:93:2E:69:93:68:89:85:BB:A8:90:55
            X509v3 Authority Key Identifier:
                keyid:AE:69:9E:8F:2D:56:E9:3A:EA:4D:A6:16:D8:72:B6:55:7D:70:DF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmmejy1W6TrqTaYW2HK2VX1w35c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/774248-0165-4ac3-8258-af84cdb14089/1/rmmejy1W6TrqTaYW2HK2VX1w35c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:77:8b:2f:02:54:c0:38:cf:1a:49:25:26:65:09:60:0d:
         bc:f9:e5:e1:3b:cb:77:05:a4:88:81:33:b3:ca:49:a4:a6:d2:
         f5:30:25:f4:db:96:fd:33:d0:22:3d:17:83:4b:69:2b:7f:f4:
         d4:7d:f8:94:df:35:d7:5a:ea:90:68:f9:7d:7d:31:9c:ea:cc:
         12:ef:95:05:29:67:3a:1e:6e:88:a8:8b:4c:59:28:36:30:1a:
         cc:31:19:70:5c:68:99:8d:23:aa:3b:36:cb:db:26:f2:39:8d:
         c0:85:55:7e:8e:1d:db:7d:5c:66:76:83:80:59:02:2f:31:12:
         24:aa:ee:4b:36:34:f7:79:46:af:9b:cf:8b:ee:06:21:68:89:
         02:23:86:30:3e:97:cf:5c:61:64:8b:9f:de:db:55:e1:dc:f3:
         2f:35:d9:71:42:5b:d7:80:9a:e4:7d:4a:d3:91:bc:e9:d7:10:
         b8:d7:01:2e:ff:56:eb:7a:15:59:2e:6c:3d:7d:3f:ec:0c:ec:
         d7:37:93:1f:95:8f:75:b6:5e:5e:7d:3c:a0:25:f6:c4:0c:aa:
         f8:0b:00:42:da:f5:c5:63:16:ee:5b:c7:af:3b:f5:dd:7a:41:
         a9:bc:fe:5d:2b:1b:d5:20:80:b0:22:78:33:d9:f0:5e:e4:75:
         24:39:3f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:18:24 2025 by rpki-client