Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
File:                     MMT0sd5MMeVhW_0LPMstgX6DuTM.mft (raw, json)
Hash identifier:          /I7SurLtwXsIRNOB+BZuGupd+177q8xgxTuhWJ8wJ8w=
Subject key identifier:   D4:35:56:D0:D9:C0:AD:38:77:5A:63:E7:C7:AF:C4:88:3D:31:D3:3B
Authority key identifier: 30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33
Certificate issuer:       /CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
Certificate serial:       01988CFE2D4DA6D93B555E6E2CB936E69EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
Manifest number:          06E5
Signing time:             Sat 09 Aug 2025 04:02:04 +0000
Manifest this update:     Sat 09 Aug 2025 04:02:04 +0000
Manifest next update:     Sun 10 Aug 2025 04:02:04 +0000
Files and hashes:         1: MMT0sd5MMeVhW_0LPMstgX6DuTM.crl (hash: NtG+R0gQJelte96z/IU/OloTGzWKvHir2gJBgSIADyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 04:02:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8c:fe:2d:4d:a6:d9:3b:55:5e:6e:2c:b9:36:e6:9e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c4f4b1de4c31e5615bfd0b3ccb2d817e83b933
        Validity
            Not Before: Aug  9 04:02:04 2025 GMT
            Not After : Aug 10 04:02:04 2025 GMT
        Subject: CN=d43556d0d9c0ad38775a63e7c7afc4883d31d33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:2a:58:b7:15:13:fa:06:4c:de:8a:77:da:
                    3b:a0:1d:cc:e2:a3:c7:a0:ce:a8:b2:6a:af:b5:20:
                    3f:96:88:ee:51:7e:1e:58:10:72:bc:3c:15:45:91:
                    00:c0:10:3a:55:07:b5:88:75:2b:e4:00:65:39:cc:
                    83:a0:48:37:c1:26:ca:bf:db:67:6f:e0:fd:0f:fc:
                    d4:de:93:7e:f0:70:6d:f3:b4:ab:9a:d5:0a:41:fa:
                    f1:44:d9:2e:b3:ec:c5:9d:27:0a:46:24:98:b8:cf:
                    5d:95:d9:f6:3c:98:41:ce:3a:d1:be:25:89:d8:2c:
                    b2:25:c3:9d:8d:7d:f7:48:fd:c9:de:97:aa:0d:97:
                    59:f1:44:92:7a:25:72:75:b8:54:80:44:bc:2e:a5:
                    cc:ce:cf:2f:66:6a:21:11:24:54:fb:c6:3e:e6:23:
                    1f:48:83:02:74:7e:8d:2c:ca:9c:94:80:ed:c9:24:
                    0f:6b:62:cb:ff:b2:d1:fb:49:9d:3f:05:e9:2a:d9:
                    c0:3b:b7:65:94:f2:9b:76:af:f9:ef:e8:77:ac:43:
                    cf:d5:d3:ec:97:30:2c:89:87:bc:f7:5f:49:a9:b1:
                    1b:81:7e:92:3e:ac:0f:e1:2d:dc:00:41:a9:eb:d2:
                    f1:7e:18:71:0c:08:d8:d5:9d:5b:0d:29:de:7a:25:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:56:D0:D9:C0:AD:38:77:5A:63:E7:C7:AF:C4:88:3D:31:D3:3B
            X509v3 Authority Key Identifier:
                keyid:30:C4:F4:B1:DE:4C:31:E5:61:5B:FD:0B:3C:CB:2D:81:7E:83:B9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMT0sd5MMeVhW_0LPMstgX6DuTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/14a26b-45cf-43ee-af05-cf971d2c2a65/1/MMT0sd5MMeVhW_0LPMstgX6DuTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:51:d1:17:9a:83:83:04:8d:ff:7f:75:35:0c:24:a1:64:
         f3:00:e9:97:c2:ef:42:06:d6:7c:98:74:d9:ce:8a:42:65:22:
         12:21:08:e8:4d:e9:8d:d3:d6:4e:0e:0e:35:6c:de:b4:64:7f:
         0f:56:3d:23:a3:64:41:cc:05:53:47:7a:46:88:5b:e6:db:94:
         d7:9e:23:f9:94:7f:5c:80:1b:d8:15:f7:a3:b2:0c:f6:00:e4:
         4f:b2:95:9b:f6:97:82:c4:1a:a6:01:fa:42:df:5b:3d:3c:6a:
         32:ed:fd:82:db:cd:27:22:d9:75:22:94:30:70:e1:28:34:27:
         a7:70:56:94:99:01:64:88:86:be:ee:86:60:4b:34:92:58:0b:
         d7:cf:7f:bc:f8:74:75:be:92:ef:35:93:aa:94:ab:e6:81:56:
         54:86:d8:76:5d:f3:ca:0a:69:c4:a4:67:aa:9d:6c:5f:c1:06:
         9c:14:08:b7:f6:d7:7d:76:dc:50:52:a1:0d:93:e4:1f:3f:85:
         be:3a:ee:26:03:fc:3a:2b:38:09:7f:49:ac:06:67:0f:f7:b1:
         5a:47:fd:36:7c:f0:ba:70:75:ce:cd:65:6a:70:29:66:40:95:
         fa:20:86:df:56:ac:e7:7b:e5:a3:69:4b:2e:99:f2:60:99:2a:
         f1:61:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:17:23 2025 by rpki-client