Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
File:                     muJTTfUJyW7LgRvIXXbWK6rfPSk.mft (raw, json)
Hash identifier:          oUIxHltoc8Pv+OS0xDq29Z3mVNK197Caix+zgh3JQKE=
Subject key identifier:   3F:51:02:D3:37:16:4F:5D:13:D4:64:56:D9:60:7F:79:D9:8E:B5:2D
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Certificate issuer:       /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial:       01987298D27A5393656A8558D828035EBDB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
Manifest number:          0A38
Signing time:             Mon 04 Aug 2025 01:01:14 +0000
Manifest this update:     Mon 04 Aug 2025 01:01:14 +0000
Manifest next update:     Tue 05 Aug 2025 01:01:14 +0000
Files and hashes:         1: SkEoFqWz8Nesa-6bLQGwcsWuCyc.roa (hash: YBTkqmp/iQfLCssDb/tS/QsoGIchXV4bMdX9APnUYwY=)
                          2: muJTTfUJyW7LgRvIXXbWK6rfPSk.crl (hash: z8zEYhTG6Owt7VsCIpGF9/jAvQW/G04VuhRCXd0xEHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:d2:7a:53:93:65:6a:85:58:d8:28:03:5e:bd:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
        Validity
            Not Before: Aug  4 01:01:14 2025 GMT
            Not After : Aug  5 01:01:14 2025 GMT
        Subject: CN=3f5102d337164f5d13d46456d9607f79d98eb52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:41:f2:53:66:07:28:e8:52:7a:ac:4b:b9:
                    2d:1c:fa:7e:32:ff:b8:79:91:8a:f5:f6:cb:d3:75:
                    d5:eb:e4:10:1f:63:9c:f5:6b:81:26:a9:36:1e:81:
                    a5:69:ed:86:96:df:58:63:a6:09:da:07:69:1c:27:
                    5b:74:94:a0:5d:ce:ef:26:cc:e6:ab:35:b2:9b:ae:
                    13:50:d9:ef:cd:31:4c:09:25:2a:54:a4:26:69:72:
                    2b:7b:e2:04:27:c5:cb:81:d5:36:87:7e:1f:24:6d:
                    bc:76:b2:30:85:5e:25:1b:c7:a5:0d:cf:b0:aa:14:
                    cd:3e:9f:df:ee:fd:e6:24:6b:00:12:6d:41:c5:82:
                    af:c3:2f:d0:60:20:67:6c:0e:a2:a8:f6:e0:e5:52:
                    31:a6:7c:92:3c:70:06:dd:00:14:34:a5:5e:69:01:
                    03:b7:a5:f0:c2:bf:12:73:14:e7:00:e4:c3:c1:03:
                    8a:be:35:55:ac:52:4c:86:10:a4:1b:bb:ee:1e:c7:
                    b8:85:8e:94:be:ae:cf:35:ae:e3:33:56:66:02:dd:
                    0b:50:5a:e8:4f:ec:10:8a:f0:90:d5:89:6d:75:ba:
                    3b:ea:cb:6b:c0:9d:5d:55:f0:27:2f:14:30:8f:1a:
                    19:8f:86:c0:a9:dd:32:b1:71:47:56:15:b5:f1:ef:
                    2c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:02:D3:37:16:4F:5D:13:D4:64:56:D9:60:7F:79:D9:8E:B5:2D
            X509v3 Authority Key Identifier:
                keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:f4:ea:d4:b7:d3:8e:55:46:b2:60:2c:c3:ac:c4:b1:c5:
         51:77:19:0c:41:7d:ac:69:cd:da:78:98:06:cd:a1:c0:e7:d0:
         4c:da:dd:e9:f9:37:64:37:5f:e7:9a:04:bc:59:54:d0:66:48:
         fb:f8:c3:a2:0e:a7:24:24:b5:e7:fe:c8:fc:8f:cf:a4:2c:65:
         c6:9d:f6:b8:36:ec:a8:38:28:54:61:71:a1:0a:53:37:a9:1e:
         a3:c5:21:e1:77:0c:47:37:b1:dc:38:1a:80:5f:48:5a:de:50:
         3f:6b:81:ab:db:38:fe:3d:c2:1d:dc:45:fb:3f:df:ad:4e:c3:
         76:75:8f:9b:ac:4d:8c:52:e4:c6:75:ee:e8:c7:a1:72:2d:ae:
         4f:f2:22:ae:07:09:f7:9a:05:1a:f1:73:c0:c9:ab:3a:b8:1e:
         e9:04:d8:18:7a:69:e9:ba:ea:15:b2:95:da:5d:7f:ad:47:75:
         c4:27:83:ba:83:eb:83:95:af:4e:fc:fb:10:e4:8c:0b:cd:20:
         e9:e5:b8:8e:81:81:3a:f2:eb:01:67:70:7c:ab:b3:60:e9:bf:
         06:f7:59:0d:7a:bb:b2:c9:30:9a:2e:10:0e:ea:c6:e1:d0:5f:
         e3:f7:0c:ed:db:19:f3:32:17:ae:25:21:81:ac:8f:3c:0e:79:
         54:20:01:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:36 2025 by rpki-client