Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
File:                     M1M9nu9agSjcQ10C8iMygDSNwrY.mft (raw, json)
Hash identifier:          fuD6x+ucVErHJ0sv6XqT3RLhb3Oy4ecRIlrhPbq28VA=
Subject key identifier:   84:63:A3:78:B3:77:1B:CB:1C:1F:06:CB:53:17:32:97:B0:49:7E:05
Authority key identifier: 33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6
Certificate issuer:       /CN=33533d9eef5a8128dc435d02f2233280348dc2b6
Certificate serial:       0198925A9107C8E992725A41C868029B29A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
Manifest number:          12B9
Signing time:             Sun 10 Aug 2025 05:01:05 +0000
Manifest this update:     Sun 10 Aug 2025 05:01:05 +0000
Manifest next update:     Mon 11 Aug 2025 05:01:05 +0000
Files and hashes:         1: M1M9nu9agSjcQ10C8iMygDSNwrY.crl (hash: VrC/Xche0QIZ55KYoLpzmesiZOaK0iA79xrx6/Tf/uU=)
                          2: w5RgxPZJeCHJ32aZdxHuHtsDhQo.roa (hash: Uc4RlDE0xm/vlOwUXxqVD6EiTzssOmMkcQ4YcA/6FLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:5a:91:07:c8:e9:92:72:5a:41:c8:68:02:9b:29:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33533d9eef5a8128dc435d02f2233280348dc2b6
        Validity
            Not Before: Aug 10 05:01:05 2025 GMT
            Not After : Aug 11 05:01:05 2025 GMT
        Subject: CN=8463a378b3771bcb1c1f06cb53173297b0497e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:3d:76:76:23:78:99:0b:f7:fd:54:23:d1:
                    10:bf:d1:c7:34:4d:6a:5f:53:67:f2:c1:e0:d7:89:
                    67:88:bc:72:0d:d5:bc:95:89:13:d8:66:7b:f9:b7:
                    a2:3e:77:40:ad:2e:8a:c9:eb:72:26:59:f2:5c:a6:
                    83:9b:25:ab:e5:e9:c8:b9:73:9c:9f:fa:21:91:98:
                    f5:68:35:59:7d:2a:68:3e:52:f5:c4:51:d8:45:ff:
                    73:f4:20:c1:ae:f3:fb:2e:ed:98:0b:44:bf:36:74:
                    a4:1b:1b:a7:4b:cd:9f:2a:6e:84:be:4a:a2:fd:b3:
                    bc:09:9c:9c:45:61:13:7f:84:6d:e0:50:47:67:16:
                    88:0c:aa:ed:48:70:94:9f:26:92:b1:b1:b5:2b:ed:
                    2d:62:e7:eb:00:81:f9:d0:8f:72:d8:2d:17:47:8f:
                    1e:b9:41:b1:91:65:90:e5:c2:e0:0d:b6:e0:c1:ba:
                    c7:06:aa:97:ac:63:e2:2a:39:53:ec:6b:f7:93:5c:
                    b2:e9:d0:7f:5b:e3:b5:b7:8f:41:dc:51:55:4a:94:
                    66:6f:08:5e:2a:12:04:e4:34:61:f5:29:25:8d:0c:
                    ea:ca:f4:14:9b:20:e8:8e:7a:88:a8:19:f2:af:48:
                    49:3c:cd:bb:a9:0f:0e:c1:61:60:c6:92:be:60:4b:
                    a6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:A3:78:B3:77:1B:CB:1C:1F:06:CB:53:17:32:97:B0:49:7E:05
            X509v3 Authority Key Identifier:
                keyid:33:53:3D:9E:EF:5A:81:28:DC:43:5D:02:F2:23:32:80:34:8D:C2:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1M9nu9agSjcQ10C8iMygDSNwrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a3bcad-1d98-48b4-afaf-d2c3b4c09ea1/1/M1M9nu9agSjcQ10C8iMygDSNwrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f4:ff:43:22:d4:8f:f0:1e:88:bd:dc:05:cb:13:73:9b:df:
         4d:df:ca:03:82:63:b5:24:26:db:fb:9a:c6:8a:52:01:4d:c9:
         61:dd:6f:29:a7:19:61:1a:64:5e:98:c9:8f:58:76:26:c1:9d:
         3e:ef:60:4c:dc:27:25:07:19:ab:4c:fb:3c:5d:0a:36:da:f0:
         3f:49:27:86:06:32:1d:47:28:ea:9f:12:65:e2:30:29:16:a8:
         2d:c3:61:2c:d0:a9:fe:dc:dd:17:07:c7:8a:a7:fb:17:13:dc:
         d3:89:99:d7:98:b1:ce:d6:f0:75:bd:f2:a2:c4:48:d9:1e:fc:
         87:67:23:86:53:35:11:96:6f:51:a0:f5:d8:f7:8f:f5:76:d0:
         f5:58:d6:ac:ce:06:59:98:b9:9e:65:80:82:fd:f9:91:fe:fc:
         ee:e2:e9:cd:c2:5a:07:69:2a:30:df:9b:14:35:9a:94:b1:1f:
         19:46:b5:14:0d:8b:8a:14:5d:42:86:fa:c8:82:7c:2a:90:79:
         b9:9e:bd:66:99:d0:66:c6:14:e4:4b:63:87:95:50:d2:99:29:
         08:12:4c:e2:8d:41:c8:b2:81:f8:79:5a:04:49:1a:7c:06:ff:
         3c:1c:b1:57:95:3b:e5:e1:1a:3c:e4:43:4e:94:d9:a0:ed:47:
         9c:bc:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:44:44 2025 by rpki-client