Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
File:                     dtS8ie60qcifEAXqrSJ8EyXtFWI.mft (raw, json)
Hash identifier:          OxqEEa4oIHSYcwEv44dyTuriIxzIy7DCdUWqw9hA0oQ=
Subject key identifier:   9C:46:90:52:12:5F:D8:F2:BA:3F:B0:D8:1D:36:EA:B8:AF:18:A7:6D
Authority key identifier: 76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62
Certificate issuer:       /CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
Certificate serial:       01989FDF0D09DCA68189A3DABA3E37D76256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
Manifest number:          0948
Signing time:             Tue 12 Aug 2025 20:00:51 +0000
Manifest this update:     Tue 12 Aug 2025 20:00:51 +0000
Manifest next update:     Wed 13 Aug 2025 20:00:51 +0000
Files and hashes:         1: ZsJKFxXmo7OPgqm-sYXIzxvA6qU.roa (hash: IBfv0VOpf12GHCCld3i7ENCZlrb/HEkRLIfqN7c44Ds=)
                          2: dtS8ie60qcifEAXqrSJ8EyXtFWI.crl (hash: x+VZ1CYR4EL8Hg5ply1OP7TkHrrHXZTuQ2xaNIRdLvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:9f:df:0d:09:dc:a6:81:89:a3:da:ba:3e:37:d7:62:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76d4bc89eeb4a9c89f1005eaad227c1325ed1562
        Validity
            Not Before: Aug 12 20:00:51 2025 GMT
            Not After : Aug 13 20:00:51 2025 GMT
        Subject: CN=9c469052125fd8f2ba3fb0d81d36eab8af18a76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:82:fe:1f:ec:0f:80:56:57:e9:41:ee:ef:
                    72:7b:d3:2e:20:d6:fd:11:80:8c:f3:b3:1c:ea:e5:
                    f4:74:4a:e5:b2:d8:6d:1d:b2:21:83:0c:4c:b9:f4:
                    6f:2e:4e:e3:ce:c3:ea:ca:51:03:09:2f:50:a9:aa:
                    92:b3:d4:b1:ea:fe:73:6f:1a:36:e6:f9:c0:c1:55:
                    22:d5:87:74:04:1e:00:72:fe:1b:22:20:81:7c:46:
                    25:95:40:50:61:88:27:56:49:8e:53:bd:e0:59:32:
                    1b:ef:d2:aa:f0:4d:be:97:eb:8c:e3:49:ab:07:86:
                    ac:48:c3:d3:7b:dc:75:2a:67:c9:81:96:72:57:5d:
                    74:87:94:95:4e:a3:79:44:e4:c9:16:fa:b7:12:57:
                    21:67:d3:ee:60:b5:0d:ef:3d:a3:25:d9:39:eb:27:
                    3d:17:33:ad:d7:6e:2f:3b:fb:bd:b3:81:bb:cc:04:
                    25:8f:a7:4b:17:2d:95:af:77:f0:d6:19:59:5c:f8:
                    e4:80:dc:a7:65:52:33:73:d5:85:9f:9c:e0:2f:d4:
                    c0:8d:3c:22:9f:81:db:28:88:a5:d3:84:32:b5:5a:
                    27:fc:ae:ea:18:ba:a6:62:9c:ee:e7:23:b4:da:73:
                    23:cf:0b:51:36:a6:01:2a:f5:01:ca:0a:10:86:f2:
                    a4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:46:90:52:12:5F:D8:F2:BA:3F:B0:D8:1D:36:EA:B8:AF:18:A7:6D
            X509v3 Authority Key Identifier:
                keyid:76:D4:BC:89:EE:B4:A9:C8:9F:10:05:EA:AD:22:7C:13:25:ED:15:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dtS8ie60qcifEAXqrSJ8EyXtFWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fb3673-7419-49d8-b6f6-091f7f9b9761/1/dtS8ie60qcifEAXqrSJ8EyXtFWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d5:7b:c9:56:40:d1:00:a7:56:f4:f3:b1:6a:36:98:ad:88:
         15:35:87:8d:ec:2b:d7:fd:c1:52:a4:b4:6e:84:00:c7:fb:eb:
         2b:cb:0d:ef:58:00:de:6d:86:eb:10:00:b1:c3:4f:3c:95:cf:
         1f:8a:49:95:70:39:08:5c:aa:85:47:2d:a3:dd:70:50:be:a0:
         a2:d4:ea:97:51:ef:36:f4:9e:be:54:29:a2:71:94:aa:5a:df:
         d1:4b:ec:6e:de:88:97:d7:0d:91:6a:bb:7f:b7:52:ac:8f:aa:
         da:c2:84:d5:86:e2:43:ce:d2:ea:34:be:56:07:ef:d1:b5:0c:
         04:a7:29:d7:39:d2:37:44:40:63:04:77:11:d8:73:93:44:95:
         64:42:bc:b9:3e:da:26:0c:18:0a:4c:05:c0:a6:30:72:03:21:
         63:79:7c:d1:fc:26:8f:ce:08:49:4c:a0:03:2d:d0:d0:86:2e:
         fa:6d:fe:c1:b7:43:0f:02:09:d7:a5:20:df:42:09:88:73:7c:
         b0:a1:b0:cf:96:25:b5:ed:41:69:32:e6:e8:96:ab:90:2c:72:
         9a:f1:2b:45:ae:0d:59:ab:d8:b3:01:7c:27:c9:ef:7f:a6:f6:
         79:3a:2c:2d:7c:b0:63:77:22:a4:da:84:84:d8:98:b9:d3:58:
         00:00:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:58 2025 by rpki-client