Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
File:                     mu2VdsknICkWjE0aQXXRp8ocUe4.mft (raw, json)
Hash identifier:          YFy9XvFNeSWTQz+WdyHLU9aBnFRREOIlzvm8WeBAppc=
Subject key identifier:   54:C8:1B:7D:87:9C:00:D3:4B:68:29:03:19:8D:05:02:66:FE:73:99
Authority key identifier: 9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE
Certificate issuer:       /CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
Certificate serial:       0198A15F6BCBE5123631DEA69F80BFB2CF8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
Manifest number:          0F50
Signing time:             Wed 13 Aug 2025 03:00:41 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:41 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:41 +0000
Files and hashes:         1: MiKRdbGABW7H7vIb5R-saUTi7Ps.roa (hash: IcsqNxh/vQa5gPXIyGMaar+4UAAjRSfgokvENVkA4RM=)
                          2: mu2VdsknICkWjE0aQXXRp8ocUe4.crl (hash: x9DaY+3IDstPXBbkZngGyh7knJSPhIr1orsSSUqCaDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:6b:cb:e5:12:36:31:de:a6:9f:80:bf:b2:cf:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aed9576c9272029168c4d1a4175d1a7ca1c51ee
        Validity
            Not Before: Aug 13 03:00:41 2025 GMT
            Not After : Aug 14 03:00:41 2025 GMT
        Subject: CN=54c81b7d879c00d34b682903198d050266fe7399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b1:bf:0a:71:58:bc:75:1c:e2:5f:59:69:96:
                    e1:4f:e1:df:fb:79:d0:ab:68:03:6e:2c:02:de:35:
                    48:c0:b6:f4:69:e0:82:58:73:28:ff:ff:5c:dd:49:
                    6c:06:aa:4e:7d:da:49:75:60:de:e6:a3:2a:38:97:
                    e8:ce:d4:0e:6d:72:11:f1:47:5b:30:18:2b:aa:c6:
                    af:fc:7d:ff:ae:98:65:7a:96:3a:ef:10:a9:ce:c3:
                    33:17:6e:b4:3c:89:48:d5:34:4a:2d:02:be:8c:25:
                    4e:74:4f:53:eb:4a:4b:95:05:ac:c0:f4:df:ee:9b:
                    6b:1c:5d:91:f2:ec:91:5b:0d:0f:90:ae:29:f3:05:
                    cc:f7:89:61:5c:e3:a1:b7:96:81:3f:48:0b:73:65:
                    b9:df:30:d6:cf:5e:48:63:0f:26:6e:0c:52:90:a7:
                    5b:0c:f6:8f:2c:73:de:03:d4:45:5e:ff:32:23:ba:
                    23:80:e8:3d:79:35:59:4e:42:5c:c6:09:5a:2f:a4:
                    e5:01:96:93:5e:e5:c7:a6:76:d7:cf:f8:d8:63:e2:
                    2a:9c:8e:13:55:a4:5e:6d:6d:f1:d9:06:fd:c9:8d:
                    16:11:73:80:6e:ad:43:f9:47:6c:d4:ae:7d:b0:ee:
                    74:29:dc:1e:06:dc:fa:99:e8:e8:ed:c7:00:83:bc:
                    4d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C8:1B:7D:87:9C:00:D3:4B:68:29:03:19:8D:05:02:66:FE:73:99
            X509v3 Authority Key Identifier:
                keyid:9A:ED:95:76:C9:27:20:29:16:8C:4D:1A:41:75:D1:A7:CA:1C:51:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu2VdsknICkWjE0aQXXRp8ocUe4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e525df-4c6e-4099-814d-f148f4c9d39a/1/mu2VdsknICkWjE0aQXXRp8ocUe4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:02:08:16:03:e9:cf:21:fb:ed:ec:e9:b2:96:9a:48:d5:d0:
         d7:23:02:22:aa:f7:42:c6:94:59:bc:16:2c:7f:ef:44:ee:b1:
         70:c1:f0:10:89:96:62:17:58:b8:b2:ec:74:06:ae:3e:ce:dd:
         fb:61:72:9b:12:a7:e8:86:10:e8:0f:11:22:97:84:6c:d5:b7:
         04:03:fb:5f:94:b4:c9:15:01:15:99:4c:b4:69:be:c0:16:05:
         2d:74:29:df:7a:e6:98:4c:a0:20:82:ae:ef:5c:d1:0a:e1:9c:
         d7:b0:3a:af:ee:be:01:bf:55:d8:76:ea:02:b1:aa:c0:d9:d6:
         3e:b6:fe:26:84:dc:fb:2d:97:ae:b3:ac:22:09:82:72:65:3c:
         52:b2:7b:1d:f5:7b:0a:0d:79:a8:ac:ed:9f:a1:4e:c7:69:a0:
         67:17:cf:c3:e5:80:ab:3e:86:99:c9:38:47:6e:45:3c:c0:ad:
         1a:b6:fb:03:46:a2:7e:b2:bd:b7:c1:97:2a:fd:0b:d8:74:b3:
         08:69:ef:ec:bd:80:78:f5:33:96:90:2c:d5:78:74:2b:1f:db:
         11:05:a5:48:5c:76:84:47:85:d2:22:8e:9b:cd:8a:dd:d2:fd:
         47:75:52:cc:36:40:6e:d0:b2:8e:c2:76:7c:dc:5b:78:7c:81:
         1b:ab:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:27 2025 by rpki-client