Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
File:                     9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json)
Hash identifier:          LR1WE45me03LEag4MElhBYmmQcmKvxBD/Fs+1k2Tx+M=
Subject key identifier:   F4:B0:9C:82:65:ED:37:C9:13:BC:0C:34:F7:47:F7:1C:1E:F3:3C:DF
Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95
Certificate issuer:       /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
Certificate serial:       0198A0839513CBC5E60F542E83A55BBC2C2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
Manifest number:          0B62
Signing time:             Tue 12 Aug 2025 23:00:34 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:34 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:34 +0000
Files and hashes:         1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: ZFbYQKCKBzA9GX9yBNNZx40GwFPw8MG2veErAMg7qSY=)
                          2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:95:13:cb:c5:e6:0f:54:2e:83:a5:5b:bc:2c:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695
        Validity
            Not Before: Aug 12 23:00:34 2025 GMT
            Not After : Aug 13 23:00:34 2025 GMT
        Subject: CN=f4b09c8265ed37c913bc0c34f747f71c1ef33cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:89:ec:b1:5b:e7:df:8a:ad:75:27:ca:9e:
                    d0:9a:74:7e:1a:d2:af:8b:da:80:48:ef:7c:ea:33:
                    df:a9:62:be:47:91:62:d4:7b:5e:7d:ca:dd:0b:58:
                    fe:5c:c3:7c:f1:d1:23:b0:92:b4:b9:52:a7:29:3d:
                    c3:8b:7f:ee:bf:14:6c:b3:23:0b:7a:4f:86:0e:48:
                    05:b6:f8:d4:34:47:91:72:ea:d6:21:80:38:8b:cf:
                    cf:4c:0e:0a:c5:66:47:93:af:43:ff:2c:ad:b0:3b:
                    29:ae:61:9a:cd:d8:fa:b7:32:8c:ac:5f:db:ef:0c:
                    c4:25:39:49:83:ea:01:fc:c0:f2:33:38:74:9d:a3:
                    ad:89:3d:22:81:22:c4:ed:ca:24:19:44:b0:7f:d8:
                    f5:36:06:92:db:71:23:95:56:6e:1d:9c:57:11:ed:
                    40:6c:9e:9d:08:af:05:84:c2:14:dd:91:0a:7f:46:
                    5c:25:c1:43:23:c5:91:e2:57:8e:e8:61:2c:f5:6b:
                    ae:42:a2:df:06:8e:d1:04:ab:0b:10:40:bd:0b:11:
                    7e:69:62:41:59:00:2b:9f:bf:a3:61:fb:ec:21:fc:
                    1a:29:a3:83:ed:8e:18:6a:6b:92:77:84:9e:5e:f3:
                    6e:1b:be:5c:e3:b8:af:f0:2e:f2:f5:d2:b3:99:5d:
                    1a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B0:9C:82:65:ED:37:C9:13:BC:0C:34:F7:47:F7:1C:1E:F3:3C:DF
            X509v3 Authority Key Identifier:
                keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3c:bf:89:75:41:c9:49:c8:ca:28:c1:35:83:fc:31:43:1d:
         6e:31:ea:e0:b7:43:11:9c:b4:c7:4e:f7:eb:5e:c6:bc:c2:12:
         e9:d3:66:58:ca:e4:35:f1:7a:b0:af:b7:a2:5e:c0:94:5d:d2:
         ae:56:91:81:21:41:0d:b3:23:b8:b4:c3:1e:20:f5:8b:ad:53:
         b0:eb:81:56:7f:7c:a4:7c:ef:25:1a:df:3d:0d:cc:b7:66:1d:
         5f:65:06:ae:5d:98:ca:8d:17:d0:71:b2:24:71:47:f7:3a:2b:
         a8:68:1e:c3:18:97:6e:f1:a0:e1:2f:90:4e:b8:bb:cc:92:c6:
         16:21:05:ac:1e:5c:c9:4c:61:d0:cf:44:a6:0d:28:c7:a2:9c:
         b9:08:29:f5:6f:9b:f3:18:ea:0b:ca:71:cf:52:76:64:2a:e6:
         cb:6c:7a:de:1f:c8:69:14:a3:d8:ce:81:9e:9b:4d:d7:59:cd:
         3a:8a:fc:3b:11:ad:6c:ce:44:a9:c2:82:c4:27:e5:ce:b7:fc:
         34:5a:d7:c3:17:c2:3e:54:bf:aa:7a:55:83:7d:9a:8d:73:08:
         dc:7b:b0:07:23:f8:f7:25:b9:27:6f:e0:ff:60:4c:04:a7:47:
         e7:c0:7d:f5:46:8a:a0:12:df:7b:d5:99:a0:d3:58:5d:48:5a:
         9d:db:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:28 2025 by rpki-client