Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          nUnWvFChv68hVbecy4DwofEAa5yE1jzi+hxc+dkQSvE=
Subject key identifier:   D6:CE:D0:76:6E:D6:05:D3:49:D3:22:76:36:73:6E:0E:AE:94:B1:EF
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       01989034F5A6C680D1CB246AD48EAFB20169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          1625
Signing time:             Sat 09 Aug 2025 19:00:46 +0000
Manifest this update:     Sat 09 Aug 2025 19:00:46 +0000
Manifest next update:     Sun 10 Aug 2025 19:00:46 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: rRMzZmjs3JD+BzMRmEY7oDyWV6P2+kz2cGMTrFCm1zw=)
                          2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=)
                          3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=)
                          4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:34:f5:a6:c6:80:d1:cb:24:6a:d4:8e:af:b2:01:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Aug  9 19:00:46 2025 GMT
            Not After : Aug 10 19:00:46 2025 GMT
        Subject: CN=d6ced0766ed605d349d3227636736e0eae94b1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:88:f2:8c:76:55:d1:a4:95:8f:a2:0e:36:
                    0d:1f:51:a2:71:29:30:ed:77:2e:1e:82:2a:97:b7:
                    9b:ed:50:26:46:52:3f:ed:84:64:fb:52:25:59:e7:
                    0d:2f:0c:91:c7:61:a4:fb:9e:b6:c8:3a:d8:9e:d3:
                    df:9f:ce:ca:41:b8:02:25:c0:85:d6:03:cc:06:f7:
                    44:94:f8:10:32:64:07:69:3d:30:e2:88:c0:ca:80:
                    46:aa:b7:9a:e2:86:ab:12:8e:d1:f9:62:15:4e:d7:
                    ec:67:10:e2:de:37:d4:01:95:84:62:41:50:8f:80:
                    9c:fd:43:4f:dc:90:8a:16:02:88:49:fc:1e:1d:67:
                    1e:6f:5f:7a:0e:c3:06:ac:84:c6:85:e7:be:54:41:
                    7c:4c:74:f0:7f:c1:fd:27:de:d3:89:7f:fb:db:86:
                    bc:bc:e1:72:ff:28:cc:24:0a:5e:9e:e1:f7:db:d2:
                    af:a2:e6:28:75:8d:04:1d:dc:0c:ec:ad:6c:00:8e:
                    88:2e:cc:a7:5b:73:64:03:c7:42:52:0e:d3:15:42:
                    bf:12:df:f1:e4:8d:7b:b3:bd:a4:c2:99:f3:d5:38:
                    d3:60:1e:23:02:5f:d2:e7:de:0e:5e:9d:20:73:07:
                    19:b8:34:28:8e:7d:1c:08:78:5b:c0:57:29:dd:7f:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:D0:76:6E:D6:05:D3:49:D3:22:76:36:73:6E:0E:AE:94:B1:EF
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a2:83:4d:f0:de:26:e3:c6:67:10:7f:7c:b6:4f:a0:c0:94:
         b0:3f:2d:62:ef:30:5e:8b:3f:6c:4a:d4:fb:d2:16:81:31:0d:
         08:cd:62:a6:6a:d3:c8:b0:0a:46:33:32:fc:47:e2:a6:f9:2c:
         d3:52:ff:60:95:42:bc:29:2f:d7:a2:ce:ec:bf:33:2c:7d:90:
         a2:62:b9:59:fe:ee:b2:a1:1d:1e:31:5d:34:cc:88:2a:fb:5c:
         c1:f3:f8:f1:cf:a6:bb:83:4c:5d:bd:41:d9:98:d0:b2:f9:bd:
         ee:2d:0f:53:95:87:2f:44:40:b7:f6:14:c7:dc:a0:aa:86:1a:
         3c:2f:c7:fc:64:b4:bf:8e:be:57:48:35:4c:2d:d3:a2:05:26:
         e8:da:1a:e0:70:64:c9:55:e9:b9:6a:58:1d:3e:30:44:16:ab:
         95:a1:fc:f4:41:0d:fe:ed:85:c4:9d:74:5e:7c:69:52:4e:a6:
         6d:ef:b9:2b:ce:0b:e2:90:62:9e:89:d6:c8:de:c5:72:00:37:
         d9:a8:b4:2a:f8:5d:61:e1:ae:36:60:4b:43:51:6c:9a:13:c4:
         19:cc:95:8e:92:7e:f1:9e:1e:19:e9:f4:13:fa:63:77:6b:bf:
         f5:cc:b1:30:19:10:ff:de:36:a9:d4:32:53:e5:85:e6:e2:82:
         c9:73:21:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:30 2025 by rpki-client