Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File:                     1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier:          38W5StwE8JP7pTzmXR3Ttu44wvKs+TcN/dnoUx7EpLQ=
Subject key identifier:   15:17:F8:25:1C:DD:B8:9D:F1:D4:24:E2:DD:4F:21:1F:D7:E0:8F:76
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       019893A3B36A0CBEAEB7FD3E4BFDC47E3CE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number:          0967
Signing time:             Sun 10 Aug 2025 11:00:35 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:35 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:35 +0000
Files and hashes:         1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: RdcgHc644RQABMP+czz14av6INjxNtmYJvrKBHtD0C4=)
                          2: A33VgYNU9pG7LNVwjpvZA-ej7NI.roa (hash: m+uYAGW4ZRT1gz0ybf+uanbobcnko9YyjutwYvkqGW8=)
                          3: REskoa14BgJkhUCvWjHx9eaTd20.roa (hash: xil3JLcrx1++eWENxWi8v9S+saZS2Aj8jUHaFwQUcf4=)
                          4: UMf4KbahVEx8sqhbE5i5BsC3FsA.roa (hash: tXmMZLhWuik4iB1zgaI4TBIGH/BwZuH+iewbZQIYmmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:b3:6a:0c:be:ae:b7:fd:3e:4b:fd:c4:7e:3c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Aug 10 11:00:35 2025 GMT
            Not After : Aug 11 11:00:35 2025 GMT
        Subject: CN=1517f8251cddb89df1d424e2dd4f211fd7e08f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:63:59:cc:d4:6d:1c:70:1d:3b:ca:d9:1c:
                    c6:62:9f:71:dd:2f:6b:43:59:78:44:f1:27:7f:61:
                    ff:27:07:8f:80:57:ca:7a:74:c7:3c:73:a4:dd:29:
                    8e:f2:56:19:ea:37:55:b5:37:93:7c:b8:23:32:2e:
                    7c:f2:8d:c3:df:44:84:47:1e:4d:ce:8a:da:11:ac:
                    79:40:82:5a:57:47:13:88:90:5e:32:dc:17:6c:39:
                    86:85:71:c5:b0:4f:12:a3:06:e5:30:e9:54:5f:62:
                    d7:5e:2c:a5:7c:5e:10:d4:7d:eb:3a:4e:2a:d9:00:
                    2c:b7:6e:ef:a6:e1:74:aa:89:5c:cd:f2:f7:28:03:
                    7b:54:97:a2:ea:e7:66:37:7a:a1:ae:e6:c2:3b:e5:
                    d7:63:35:71:26:66:da:58:6f:a7:f2:c9:c4:0a:1d:
                    e6:1f:61:e1:c3:d5:40:12:d0:9d:96:3d:6d:2f:c2:
                    f3:9b:a3:1a:ab:6d:95:db:99:aa:fb:8c:3f:8d:55:
                    1a:8a:88:9b:8d:8e:2f:9a:78:36:d3:24:a7:7b:84:
                    23:da:02:de:95:38:40:66:0a:87:fa:22:07:3f:e0:
                    e7:87:72:3e:8f:00:91:95:87:49:13:ce:27:54:f3:
                    d3:22:d6:e1:3a:79:95:25:15:bb:3f:54:db:ab:bf:
                    60:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:17:F8:25:1C:DD:B8:9D:F1:D4:24:E2:DD:4F:21:1F:D7:E0:8F:76
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e3:c4:31:76:17:98:0b:47:d6:f0:ad:1b:4f:62:3f:59:52:
         3f:24:8c:ea:88:78:b3:15:1b:f5:04:73:ce:e9:71:50:82:10:
         ac:93:16:a7:e3:b7:91:0e:fc:af:80:a8:09:ff:f3:bb:ec:9e:
         a5:4e:b1:5f:84:2d:0d:52:3c:0e:d3:03:15:79:e4:a3:c9:f2:
         e8:a6:6c:7e:8c:b4:23:5a:91:25:41:a1:41:92:ae:46:a8:2b:
         2a:6b:21:74:45:d1:41:60:a8:e2:42:db:ee:98:9d:9f:99:0b:
         9b:38:44:16:09:c5:b9:f7:4c:ec:1b:e3:50:5f:f5:b1:9e:ca:
         bd:a5:53:ab:10:96:cb:3b:1a:54:d3:39:21:b5:9d:4a:73:7b:
         46:68:27:45:61:82:ae:6a:8a:73:f5:3d:37:8e:55:60:a8:22:
         a0:a1:eb:75:4f:8d:4e:a0:58:a7:d9:9f:4c:2c:a6:ce:e0:ed:
         57:fe:3d:12:69:68:bd:bc:3e:68:aa:5e:9c:1e:33:36:27:97:
         65:32:ac:d3:eb:bc:ca:04:23:c5:81:d2:98:94:18:40:63:6e:
         d5:b3:f8:23:41:7b:dc:02:81:36:47:35:36:75:ec:91:c7:20:
         64:95:75:e7:a9:c5:d8:5a:72:f4:0a:a5:56:90:57:95:b5:3c:
         98:58:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:28 2025 by rpki-client