Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
File:                     Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json)
Hash identifier:          RGX/YHyFtlEUM4uOwInNZP7V8yPuCm7glqBFPqg3mjw=
Subject key identifier:   9D:0F:6E:27:1C:E3:82:5D:DF:50:51:26:D5:4D:D5:79:97:D4:FA:3D
Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08
Certificate issuer:       /CN=0dff499ecdb8e15733bb7110959959ac0e166008
Certificate serial:       019890D9936A248490E9349FF43806FCCDB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
Manifest number:          0D9D
Signing time:             Sat 09 Aug 2025 22:00:34 +0000
Manifest this update:     Sat 09 Aug 2025 22:00:34 +0000
Manifest next update:     Sun 10 Aug 2025 22:00:34 +0000
Files and hashes:         1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: HWyGANR/O6YlkbVNjj7pYpDG1Th090d14fMhdmrJ3+o=)
                          2: u2KSOkA9Tk7vaFv7OCby2G46AIs.roa (hash: QpVj8Qnda9R0uaJPbddZ05OYdtwL9DiuDJMuscNQj0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:d9:93:6a:24:84:90:e9:34:9f:f4:38:06:fc:cd:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008
        Validity
            Not Before: Aug  9 22:00:34 2025 GMT
            Not After : Aug 10 22:00:34 2025 GMT
        Subject: CN=9d0f6e271ce3825ddf505126d54dd57997d4fa3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:47:b5:75:ca:81:98:7a:17:27:2e:15:1c:
                    4e:90:c3:77:6b:fd:22:c4:17:69:50:2b:08:73:ba:
                    65:8b:0d:c9:05:04:80:be:c0:21:39:89:04:05:08:
                    d5:19:a9:9c:c7:d7:17:48:71:8e:ee:cd:f4:63:a7:
                    d0:fa:5b:7c:35:20:ff:64:30:85:98:2c:2e:81:5b:
                    c6:ab:51:17:9c:00:aa:63:44:16:3c:19:f9:fb:97:
                    d2:2e:76:4b:fa:ad:f0:8f:4b:58:41:58:54:b1:48:
                    32:30:f3:12:8d:4f:f5:ba:e5:8a:fc:fb:6a:86:01:
                    d3:b2:ad:cb:33:d7:8d:bb:ee:51:f4:8d:aa:0d:eb:
                    33:68:72:32:84:2b:a0:34:e1:f7:51:74:f1:96:e0:
                    e3:e3:2e:82:55:bb:f0:e7:8c:76:20:ef:79:0a:fd:
                    44:6e:19:ee:31:de:7c:a9:9e:d9:e8:a3:41:09:e5:
                    9a:34:53:d8:4d:e3:0f:44:70:f9:d1:83:1f:73:b2:
                    ab:8a:53:83:02:12:ba:d0:58:e8:af:a4:96:56:75:
                    34:43:7d:8d:ed:32:b6:26:42:0d:71:64:06:07:55:
                    a9:f5:88:77:be:22:04:68:45:94:9b:c2:22:53:1f:
                    ff:a7:35:56:cb:9e:ff:4a:73:31:a0:d7:f1:79:fd:
                    a0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:6E:27:1C:E3:82:5D:DF:50:51:26:D5:4D:D5:79:97:D4:FA:3D
            X509v3 Authority Key Identifier:
                keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:3e:19:67:aa:11:36:91:01:ec:ea:83:7b:4c:20:ae:e5:
         14:01:91:81:8b:ce:41:05:26:13:ac:29:55:d1:7e:db:39:03:
         47:62:99:a0:71:fd:fa:ce:db:56:3d:20:9d:e4:3a:d3:25:6e:
         2f:04:22:45:2f:3c:ce:c6:5d:c2:92:d1:12:7e:b2:e4:2e:71:
         41:a7:fd:10:83:b0:5f:20:0d:c8:8d:1a:38:c4:bd:24:ef:03:
         71:5f:29:da:69:c4:a6:0f:d0:c8:9d:11:6c:90:18:fa:66:0e:
         f4:ec:20:bf:63:4e:7b:85:9b:db:58:6f:a1:90:f7:58:44:71:
         60:6c:6b:77:c9:b0:47:33:37:75:61:01:d3:2b:57:da:8d:1c:
         8c:ef:7a:7e:6a:3d:8a:cd:45:5b:cc:8c:c2:e5:d2:a3:96:d6:
         3b:b0:44:ab:8d:6a:98:fe:39:3e:df:7a:05:33:bb:37:6a:4a:
         9c:e1:5b:d4:94:c2:4c:89:a4:88:f1:9b:c1:49:7a:eb:34:c0:
         66:b1:11:6e:db:7c:f5:b0:6c:5a:02:2e:25:a1:04:eb:a7:52:
         a0:4a:24:f6:85:7c:82:a1:2e:50:b4:9c:31:84:f5:ce:a6:8b:
         d8:78:e4:74:4a:3b:fc:63:ec:2e:1c:53:1c:8e:44:d8:7c:f2:
         f5:a1:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:42 2025 by rpki-client