Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          3Oi5Q7nA74i7PhXUpXmuJYIyaBtc4WLBnUGtYwHWKF8=
Subject key identifier:   82:5E:9F:41:13:E2:83:00:BA:B6:00:45:0F:B6:A1:37:22:11:20:9E
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019890DBCCBE56DC74B16912B92B8FECDE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          141A
Signing time:             Sat 09 Aug 2025 22:03:00 +0000
Manifest this update:     Sat 09 Aug 2025 22:03:00 +0000
Manifest next update:     Sun 10 Aug 2025 22:03:00 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: 54nim9As/j9XHlNAaLSczjS0U6QLruBhGDkQI1RtXLA=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
                          5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:db:cc:be:56:dc:74:b1:69:12:b9:2b:8f:ec:de:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Aug  9 22:03:00 2025 GMT
            Not After : Aug 10 22:03:00 2025 GMT
        Subject: CN=825e9f4113e28300bab600450fb6a1372211209e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:c6:8d:c5:56:74:5e:18:b4:c1:ba:f8:1b:
                    9a:3f:3b:b7:be:21:c0:fe:f9:9b:e0:e1:eb:6c:a0:
                    3e:12:4b:af:5c:9e:0e:56:1c:5b:34:99:94:e5:e0:
                    63:c7:8b:37:82:31:bd:6f:4d:02:e2:aa:5f:0a:d3:
                    9f:e3:27:17:91:55:83:39:ad:1a:5b:9d:77:cb:a7:
                    8b:96:d8:57:b0:73:f6:c9:b3:ee:a4:9e:c4:18:c4:
                    70:b4:05:7b:db:83:64:ff:c1:92:07:87:ca:20:5e:
                    2b:0b:bf:ca:d8:fe:69:81:5d:d7:45:90:56:0b:16:
                    96:8c:20:dd:cd:ef:5a:de:5b:f1:e4:df:5f:97:72:
                    d0:6c:45:ac:5c:d3:e8:39:23:40:28:8e:a8:6d:6f:
                    1a:b0:4d:eb:46:63:b3:42:6e:80:23:34:96:ad:cf:
                    73:2e:ab:d5:06:57:72:78:6b:43:e6:2b:5d:1f:e5:
                    c1:f8:e7:8b:d5:2d:d6:c6:a6:cd:a2:d9:a2:fe:15:
                    f7:2f:20:97:80:5b:09:07:84:a8:e3:f3:38:84:9f:
                    00:db:d1:15:79:e0:e3:5d:c0:48:69:d6:f3:a3:8d:
                    9a:5f:5e:30:ae:8b:ea:68:20:10:20:59:87:aa:18:
                    2e:41:d5:c3:d1:5c:1f:fd:01:a0:27:f1:ae:88:29:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5E:9F:41:13:E2:83:00:BA:B6:00:45:0F:B6:A1:37:22:11:20:9E
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:32:d8:a7:0b:60:65:15:0e:ba:cc:db:9d:33:a6:ed:9c:cc:
         ee:e8:15:43:52:89:49:1c:87:e7:7f:8f:48:4b:38:db:12:51:
         1c:ca:2b:e1:73:5b:0e:09:4d:d6:d1:0b:fd:03:31:11:df:f3:
         3d:bf:05:79:bd:53:2e:9b:37:e9:4a:20:f8:0d:87:82:ee:9b:
         c3:d4:12:17:b3:ce:0a:69:39:6a:df:af:ce:6f:0d:6d:34:66:
         72:d0:95:13:48:a0:db:91:74:f3:aa:ef:07:fa:fe:ef:1c:00:
         78:54:c8:08:73:ea:fd:57:b5:1d:78:ba:4d:68:52:d3:65:b0:
         61:d5:71:c7:79:c6:ef:07:85:70:a5:0e:4e:0a:64:be:86:67:
         cf:b0:97:ad:68:f2:a0:db:e7:a9:1e:fe:98:f9:fd:55:f8:3b:
         f7:ac:3c:ed:ee:78:33:0a:0e:82:94:f3:80:d8:e1:ef:13:35:
         2a:b2:6c:5a:f2:63:c1:39:ab:c7:06:33:1e:bd:af:96:d9:12:
         83:13:a7:12:1c:61:9e:92:9a:02:42:d5:62:4c:27:26:0b:61:
         6d:b9:fd:55:d2:79:dd:9e:71:5f:1d:ff:88:eb:e4:88:1f:23:
         fe:e3:39:c3:2c:62:68:08:20:cc:fa:c9:ee:13:1d:c0:cd:a1:
         4e:f5:92:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:56:30 2025 by rpki-client