Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
File:                     96i3CqEAabVRWpyzwUm4hbehKDQ.mft (raw, json)
Hash identifier:          sj1PLH5e/bIOB1y7ZHJ/Cm4CoOS4NSbRaVFXAJs0Ogs=
Subject key identifier:   1A:03:00:49:7F:BC:EF:B0:8E:5E:FD:66:87:9F:47:46:33:66:99:53
Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34
Certificate issuer:       /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
Certificate serial:       019892C877FADF99B02014F8D982CF9D08EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
Manifest number:          1226
Signing time:             Sun 10 Aug 2025 07:01:08 +0000
Manifest this update:     Sun 10 Aug 2025 07:01:08 +0000
Manifest next update:     Mon 11 Aug 2025 07:01:08 +0000
Files and hashes:         1: 3hd2cWOKo1TQkV2Yjc58aajJp40.roa (hash: 74N6tK8Ekv8MCL01lxtmIlPxSXElnTOh23zMPv2z/H0=)
                          2: 96i3CqEAabVRWpyzwUm4hbehKDQ.crl (hash: axymENjm7tk2hhRNBIeqxgVhrAKLhmM4PZ2/rHjozoA=)
                          3: NxP1yZRJkCqknWUlNsClQNUVfUo.roa (hash: u6b4+QpHV+iYUkKSAV1ntHvZ0Uq8id30dDjn4p6jm1c=)
                          4: rpMKo0baZdPqRPqlkYdACo6a3P0.roa (hash: HTnTb+0/EFAi/eXd0bEmB23wAYwHBXAEwiEqoddfA3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:77:fa:df:99:b0:20:14:f8:d9:82:cf:9d:08:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834
        Validity
            Not Before: Aug 10 07:01:08 2025 GMT
            Not After : Aug 11 07:01:08 2025 GMT
        Subject: CN=1a0300497fbcefb08e5efd66879f474633669953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:9a:90:0e:be:45:56:ea:e6:eb:93:6c:ed:
                    6d:6f:75:d3:68:8e:95:92:05:ae:84:15:ee:eb:a3:
                    7f:61:02:24:bd:c8:09:ca:f4:4e:78:8c:4b:5e:1d:
                    3c:09:c1:83:8b:23:53:41:ac:e7:c2:da:8b:3d:66:
                    6b:d4:d7:74:2e:d1:a0:c9:ab:5c:44:60:57:c4:3a:
                    23:a8:da:7a:c8:5a:6b:27:f1:f2:1e:bf:6e:09:90:
                    5d:1a:2e:d3:e1:5f:f3:0b:83:db:91:1d:f9:1e:b5:
                    e3:78:64:60:14:cd:01:33:38:2f:f3:99:ab:d7:c8:
                    d6:df:4c:91:59:fc:c0:24:a4:7e:3d:8d:3a:73:6b:
                    15:ad:7b:1f:d0:9d:38:2a:59:b0:57:b8:2c:6b:2e:
                    8e:af:16:1c:83:14:0b:fb:4e:e0:9f:59:4a:f3:f0:
                    e5:5d:09:8b:2e:06:aa:e4:48:69:2d:a4:7f:9e:e7:
                    7e:cc:f1:c6:81:af:69:0c:55:54:d9:ed:34:89:26:
                    70:0f:aa:df:1f:9a:91:91:78:17:70:58:51:cb:a8:
                    5c:41:9c:1d:ae:76:51:59:4a:4a:c7:7c:af:f4:1c:
                    7f:37:e3:bf:84:7e:19:9c:3f:d8:cd:15:c1:cf:f0:
                    4f:17:a7:9b:40:0a:2e:67:d1:fe:3c:cb:88:58:32:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:03:00:49:7F:BC:EF:B0:8E:5E:FD:66:87:9F:47:46:33:66:99:53
            X509v3 Authority Key Identifier:
                keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:99:bc:60:90:ee:2e:7c:44:e8:75:de:5f:9e:e7:ce:90:39:
         23:66:d0:0f:25:d9:46:2f:8f:91:4d:57:25:ea:d2:06:fd:b0:
         07:df:9b:16:e6:15:06:23:56:f0:c1:ab:b8:21:5a:ea:91:b6:
         9f:e3:36:99:2e:fa:59:63:06:d9:e5:86:b2:7e:24:63:73:46:
         f5:c1:f0:ec:15:16:4a:ef:87:a5:ea:cb:36:e5:21:92:90:53:
         1f:63:ab:3c:bd:0c:f0:db:9d:7a:0c:11:ba:a7:20:ee:ea:d2:
         84:9d:9f:5b:01:9a:84:35:84:b2:6b:95:c4:0d:aa:aa:e2:b0:
         2d:55:c8:17:6c:c1:63:78:97:9a:8f:1e:8f:4c:25:01:91:fe:
         4b:89:a1:f6:1f:df:d7:14:f0:72:48:fc:8a:2e:1e:0f:8b:c2:
         83:69:e8:2b:57:dd:22:9c:5b:a1:88:83:ac:cf:6b:6b:e9:22:
         3e:7d:79:af:2b:9a:91:82:e8:08:6e:43:54:c8:45:79:db:7f:
         24:c7:e3:4d:a1:d6:25:bc:4c:c4:bd:38:06:fa:cd:c8:e8:59:
         6c:cf:9a:3b:25:4e:00:62:5e:0d:62:76:08:19:40:fc:15:c8:
         2a:de:3a:a9:46:1e:eb:a1:4d:ee:32:0c:d4:d0:77:84:47:c5:
         25:2b:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:51:27 2025 by rpki-client