Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
File:                     V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft (raw, json)
Hash identifier:          /r90QfyzcdU38gASWX4ud50ySElpFIF9B0aymPNtiTE=
Subject key identifier:   41:E0:93:C2:6A:11:A2:FF:96:78:FB:F3:0B:6E:14:7F:3C:3D:85:2F
Authority key identifier: 57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93
Certificate issuer:       /CN=57d011b577f90aa7e8e0cc5229e1f29983824593
Certificate serial:       019896DC561670CDE6FB5705FEDE6448278B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
Manifest number:          1626
Signing time:             Mon 11 Aug 2025 02:01:19 +0000
Manifest this update:     Mon 11 Aug 2025 02:01:19 +0000
Manifest next update:     Tue 12 Aug 2025 02:01:19 +0000
Files and hashes:         1: V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl (hash: xKffN1UwjMP3gut2TCk8TfZmuMD0vVj2xHzaP/+nnuM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:dc:56:16:70:cd:e6:fb:57:05:fe:de:64:48:27:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d011b577f90aa7e8e0cc5229e1f29983824593
        Validity
            Not Before: Aug 11 02:01:19 2025 GMT
            Not After : Aug 12 02:01:19 2025 GMT
        Subject: CN=41e093c26a11a2ff9678fbf30b6e147f3c3d852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:20:83:e3:fb:cb:e7:40:1a:0e:27:39:23:
                    d5:d9:4e:57:91:4f:a6:45:dd:cc:b3:aa:7f:0f:eb:
                    f1:d4:b9:63:2a:5e:26:7c:e9:92:74:7a:b8:fa:09:
                    43:90:ca:f8:84:cd:3b:94:c6:aa:c2:19:bf:15:b5:
                    57:49:26:53:ac:4e:fe:a4:98:f7:bf:d2:be:f7:e0:
                    b5:d9:88:5f:2d:b5:4d:13:53:ea:20:33:ea:34:99:
                    3a:d0:0c:e2:19:6a:a3:a8:e5:c3:a6:77:03:da:66:
                    94:42:da:6a:da:9e:4d:a2:d8:53:a9:e0:59:e8:19:
                    48:08:4b:bd:81:52:e4:aa:34:10:59:c8:97:59:b9:
                    f2:0b:6d:20:18:c1:6e:00:95:0b:8c:cc:cd:62:c4:
                    8b:d7:28:92:d2:58:c3:1b:ca:f9:3d:c0:09:69:cc:
                    15:ff:46:97:ac:ce:e3:9a:7c:46:fd:c5:11:77:19:
                    42:33:f2:39:d3:6b:32:41:50:ee:1f:5f:af:10:5c:
                    b7:59:1e:46:bb:ac:2e:2d:5e:3a:e2:09:29:cd:ca:
                    a2:fd:f2:bd:a8:5d:0d:93:d0:f9:97:8c:24:ac:0a:
                    bb:53:86:3f:a8:30:23:94:2b:6a:e0:4e:95:ed:6f:
                    53:8b:e4:7b:52:e7:ea:70:e8:a8:a3:0e:fd:e6:7f:
                    8a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E0:93:C2:6A:11:A2:FF:96:78:FB:F3:0B:6E:14:7F:3C:3D:85:2F
            X509v3 Authority Key Identifier:
                keyid:57:D0:11:B5:77:F9:0A:A7:E8:E0:CC:52:29:E1:F2:99:83:82:45:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ARtXf5Cqfo4MxSKeHymYOCRZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e7e8fe-ede6-49e5-a2dc-0d1da3713fe9/1/V9ARtXf5Cqfo4MxSKeHymYOCRZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:1f:11:59:12:ee:67:2a:77:c9:1d:8d:86:ae:fa:3c:a2:f4:
         6b:19:8b:ba:09:5b:f8:bc:f8:45:9f:ef:e6:a2:25:13:d6:dd:
         69:b2:aa:fd:ce:c5:05:7f:4e:57:0e:34:f9:7d:8a:69:e6:64:
         90:14:17:54:e2:2d:af:9b:03:92:cf:ae:ed:1a:af:1d:44:fc:
         56:24:0d:23:10:23:e3:ab:01:2d:f9:ae:ed:fc:9d:e4:5e:9a:
         80:28:7a:59:86:5e:66:c7:4f:77:d5:6d:8d:77:36:37:c2:23:
         0a:22:8d:f8:dd:ec:4c:6f:1a:33:af:b4:e6:7e:48:53:ac:9f:
         f0:3c:91:b8:b4:b4:27:f8:e7:20:da:8b:14:2d:09:9a:8a:30:
         bb:97:1a:8a:0b:70:e5:31:10:c8:54:f1:0b:b4:76:22:26:b8:
         96:c8:4d:9d:a3:d7:7b:54:42:2b:a8:bb:1e:1a:80:b2:51:8f:
         bd:77:5b:c5:64:35:61:32:2e:5e:76:4d:53:16:3e:56:39:2f:
         60:79:f0:c1:ed:80:93:ae:6b:98:08:ff:19:a7:d0:3d:4c:5b:
         6a:5a:9d:54:9c:c7:90:c7:3c:94:fb:ab:ae:35:be:ff:69:a0:
         49:e8:94:db:70:74:70:93:42:2b:d7:d9:f7:f3:4e:c9:24:55:
         2d:1f:60:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:17 2025 by rpki-client