Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
File:                     rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft (raw, json)
Hash identifier:          UiEsntWTYwe/fS9P5Zyxzz51FTKgSwCJusvCx635A7M=
Subject key identifier:   0A:34:18:97:00:5B:F0:E8:5E:00:E3:74:6B:CF:29:A6:5B:49:82:31
Authority key identifier: AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86
Certificate issuer:       /CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
Certificate serial:       019896A6A6FC5209FF56BCB751AEFA8D5E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
Manifest number:          050D
Signing time:             Mon 11 Aug 2025 01:02:40 +0000
Manifest this update:     Mon 11 Aug 2025 01:02:40 +0000
Manifest next update:     Tue 12 Aug 2025 01:02:40 +0000
Files and hashes:         1: rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl (hash: SsvPFodAQUI+VjlqJ/GfsGVL5rgVmcFmpJ7Rwdg3Hfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a6:a6:fc:52:09:ff:56:bc:b7:51:ae:fa:8d:5e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6bbaadbe3e787dceee23db23a320ba1e2fbf86
        Validity
            Not Before: Aug 11 01:02:40 2025 GMT
            Not After : Aug 12 01:02:40 2025 GMT
        Subject: CN=0a341897005bf0e85e00e3746bcf29a65b498231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1b:7c:77:f6:99:3c:3c:24:11:ee:3b:1a:58:
                    2d:8c:c1:bd:34:54:fe:15:89:e2:0f:2c:83:bd:b2:
                    db:ea:00:eb:b6:39:f5:25:6d:99:65:f8:00:88:ad:
                    2d:78:8f:36:36:d7:22:26:91:4c:7f:03:d1:2a:8d:
                    92:e9:a2:a5:f8:c6:e8:6c:43:ba:f0:64:9b:5e:09:
                    48:4e:ec:25:7f:67:ed:3f:52:73:8d:fb:39:c8:c6:
                    5d:26:25:0c:f9:ee:00:5a:c1:9b:ed:b1:fb:64:e9:
                    d0:3d:72:31:06:20:2b:b0:33:c7:62:ab:c5:51:4d:
                    62:70:a8:01:2d:a4:80:5d:9a:75:0d:ca:58:67:44:
                    19:a8:9c:38:bf:a3:3b:26:4a:fc:c9:fe:eb:41:da:
                    99:ed:d9:a9:39:a7:2b:fc:ee:7c:40:db:9d:fb:59:
                    56:5b:64:ff:ce:92:7c:0b:72:8d:a6:a0:a9:a1:70:
                    7f:97:5d:f1:2c:73:ff:ce:f8:d3:74:d4:d4:7d:46:
                    4c:fc:eb:14:d3:0a:0e:89:c2:7a:e7:ca:0e:bf:43:
                    02:70:09:bc:60:14:65:0a:1e:2e:90:82:d9:b8:2c:
                    9c:15:3e:ca:b4:28:15:1d:cf:8c:b1:fc:85:d0:6d:
                    38:01:e2:25:a4:44:1b:43:a6:07:6a:6a:b5:1a:2d:
                    50:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:34:18:97:00:5B:F0:E8:5E:00:E3:74:6B:CF:29:A6:5B:49:82:31
            X509v3 Authority Key Identifier:
                keyid:AE:6B:BA:AD:BE:3E:78:7D:CE:EE:23:DB:23:A3:20:BA:1E:2F:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/777321-1bd6-40db-8e80-33928d3fa12d/1/rmu6rb4-eH3O7iPbI6Mguh4vv4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a1:b2:3e:25:ce:02:2f:92:57:76:a5:1f:e1:b2:28:7b:75:
         b8:9f:c4:32:b5:ce:b5:26:eb:b0:58:11:86:a5:55:b9:36:96:
         b6:58:80:bd:0d:d5:f6:b0:10:4a:99:b9:ea:25:57:36:f9:b0:
         74:de:bd:4c:08:3d:41:79:e2:77:3f:09:f4:6c:16:b1:bd:b1:
         cf:75:19:50:5b:5e:5b:fb:1a:4c:16:08:9c:08:1b:99:84:67:
         77:c6:40:51:3f:8c:81:61:33:e5:00:ef:74:ea:fd:5e:1f:55:
         7f:e7:76:3e:d2:07:92:9e:7b:68:89:31:55:ad:ab:89:0b:55:
         8b:08:1a:c2:b1:5a:72:4d:a4:be:f5:49:93:26:63:e2:8c:3b:
         d7:ee:6d:78:27:c7:82:8c:1d:27:d5:ba:6e:e6:e8:58:82:a7:
         b2:6f:62:f5:54:4b:72:e8:c0:1b:75:f9:e8:ff:03:cd:af:c4:
         98:85:9c:d9:2d:d0:92:dd:aa:90:a9:d0:d5:7c:78:1d:5a:09:
         af:83:0f:70:fc:c4:44:fb:30:a6:91:8c:38:d3:44:04:94:48:
         f0:d4:63:a5:93:cb:ee:03:ab:a7:4e:a8:16:b6:21:77:2b:c6:
         85:85:5d:ba:b2:4b:b1:b4:1f:36:b2:bf:30:52:a6:21:5b:1c:
         51:10:6b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiWpqb8Ugn/Vry3Ua76jV4jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmJiYWFkYmUzZTc4N2RjZWVlMjNkYjIzYTMyMGJhMWUy
ZmJmODYwHhcNMjUwODExMDEwMjQwWhcNMjUwODEyMDEwMjQwWjAzMTEwLwYDVQQD
EygwYTM0MTg5NzAwNWJmMGU4NWUwMGUzNzQ2YmNmMjlhNjViNDk4MjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxt8d/aZPDwkEe47GlgtjMG9NFT+
FYniDyyDvbLb6gDrtjn1JW2ZZfgAiK0teI82NtciJpFMfwPRKo2S6aKl+MbobEO6
8GSbXglITuwlf2ftP1Jzjfs5yMZdJiUM+e4AWsGb7bH7ZOnQPXIxBiArsDPHYqvF
UU1icKgBLaSAXZp1DcpYZ0QZqJw4v6M7Jkr8yf7rQdqZ7dmpOacr/O58QNud+1lW
W2T/zpJ8C3KNpqCpoXB/l13xLHP/zvjTdNTUfUZM/OsU0woOicJ658oOv0MCcAm8
YBRlCh4ukILZuCycFT7KtCgVHc+MsfyF0G04AeIlpEQbQ6YHamq1Gi1QUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAo0GJcAW/DoXgDjdGvPKaZbSYIxMB8GA1UdIwQY
MBaAFK5ruq2+Pnh9zu4j2yOjILoeL7+GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NzczMjEtMWJkNi00MGRiLThlODAt
MzM5MjhkM2ZhMTJkLzEvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi83NzczMjEtMWJkNi00MGRiLThlODAtMzM5MjhkM2ZhMTJk
LzEvcm11NnJiNC1lSDNPN2lQYkk2TWd1aDR2djRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqGyPiXO
Ai+SV3alH+GyKHt1uJ/EMrXOtSbrsFgRhqVVuTaWtliAvQ3V9rAQSpm56iVXNvmw
dN69TAg9QXnidz8J9GwWsb2xz3UZUFteW/saTBYInAgbmYRnd8ZAUT+MgWEz5QDv
dOr9Xh9Vf+d2PtIHkp57aIkxVa2riQtViwgawrFack2kvvVJkyZj4ow71+5teCfH
gowdJ9W6buboWIKnsm9i9VRLcujAG3X56P8Dza/EmIWc2S3Qkt2qkKnQ1Xx4HVoJ
r4MPcPzERPswppGMONNEBJRI8NRjpZPL7gOrp06oFrYhdyvGhYVdurJLsbQfNrK/
MFKmIVscURBrzA==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:21:41 2025 by rpki-client