Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
File:                     rJuTmjrJfa2gglFh86DoUDOoLSU.mft (raw, json)
Hash identifier:          3wwuVao2n6HKMaLKGmvCwqLGpEfGKVwWAC4Ko1Gr6ys=
Subject key identifier:   D9:4F:B9:01:54:22:5C:84:56:57:72:2C:85:D9:85:CC:A5:6C:6A:31
Authority key identifier: AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25
Certificate issuer:       /CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
Certificate serial:       019874BE6B4ECFE96301D945B0856FA0C2DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
Manifest number:          0F92
Signing time:             Mon 04 Aug 2025 11:01:32 +0000
Manifest this update:     Mon 04 Aug 2025 11:01:32 +0000
Manifest next update:     Tue 05 Aug 2025 11:01:32 +0000
Files and hashes:         1: rJuTmjrJfa2gglFh86DoUDOoLSU.crl (hash: fOwPqQpp0OTuunaUdIDErOGe3DWffOJEpoZabjm4Qoc=)
                          2: wbUwXsM6rSDrkQwsebUB7l1OtR0.roa (hash: l9d1EOf1QfY4TX8pjAVvmIhfn1wufKZnDqjhNvEB3f4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:be:6b:4e:cf:e9:63:01:d9:45:b0:85:6f:a0:c2:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9b939a3ac97dada0825161f3a0e85033a82d25
        Validity
            Not Before: Aug  4 11:01:32 2025 GMT
            Not After : Aug  5 11:01:32 2025 GMT
        Subject: CN=d94fb90154225c845657722c85d985cca56c6a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:61:7f:05:88:58:b0:6d:5a:61:1f:5a:b1:
                    6d:83:16:cf:fb:cf:d0:58:ee:33:3d:8d:84:62:80:
                    f4:89:8b:eb:f9:0a:55:4d:44:7f:99:21:e7:03:4f:
                    27:73:c2:12:76:32:a9:e6:46:4f:25:c2:5b:88:2d:
                    eb:67:f1:00:5d:a7:24:b6:59:d0:36:98:dd:28:bc:
                    ac:b3:00:6a:28:d9:4c:f6:08:73:95:dd:f2:93:a1:
                    7f:e7:e3:5b:7b:56:e3:20:cc:73:c0:cb:a4:fa:a6:
                    5f:5b:11:54:27:0c:04:d0:18:28:f2:bd:e9:ad:cf:
                    a2:5e:80:a8:7a:72:cd:0d:d7:12:c0:cb:8f:92:35:
                    12:56:0b:cc:22:23:27:d3:4d:1d:e6:75:3a:88:2c:
                    35:c8:64:ef:18:f4:0f:14:6a:49:c0:36:c7:6d:93:
                    41:11:23:13:b7:5d:ce:3f:f0:81:da:4f:bd:12:e5:
                    89:3e:0e:68:16:9f:9b:6f:1d:f5:34:00:7d:d8:ed:
                    82:7a:d6:3c:0f:9d:ff:36:49:5d:0a:b7:20:75:99:
                    58:c6:cf:28:0e:ec:e7:01:d4:51:67:76:3a:aa:9a:
                    17:56:3a:43:0f:f7:00:00:4c:33:4f:e1:40:e8:98:
                    b9:d3:ac:bb:c6:8d:d7:ee:71:16:3b:e8:0b:1f:7e:
                    8e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4F:B9:01:54:22:5C:84:56:57:72:2C:85:D9:85:CC:A5:6C:6A:31
            X509v3 Authority Key Identifier:
                keyid:AC:9B:93:9A:3A:C9:7D:AD:A0:82:51:61:F3:A0:E8:50:33:A8:2D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJuTmjrJfa2gglFh86DoUDOoLSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1aa2aa-bfbf-4428-a3df-3857232f456c/1/rJuTmjrJfa2gglFh86DoUDOoLSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:ed:97:20:bd:0f:57:75:74:57:34:49:03:60:7e:bc:f0:
         6e:73:d6:50:7b:80:52:d9:c2:6d:39:f5:1b:3f:b9:5c:83:37:
         9f:53:1e:9c:f7:57:e7:eb:36:92:f2:f9:55:c5:36:09:bc:27:
         cb:f7:50:0d:78:19:a9:b6:f7:4b:20:f3:c2:38:8b:72:50:72:
         92:c0:c7:47:d5:15:4d:b1:92:20:2f:3a:25:ef:ee:29:b1:69:
         88:a6:cd:ea:06:26:a5:ca:ee:52:0d:c4:ba:5e:56:c2:7d:e4:
         70:20:f7:f6:da:96:7e:82:00:6a:bb:82:e5:8a:87:45:24:33:
         97:7b:44:e9:f0:a7:05:a7:58:51:90:e0:f9:e3:e7:fb:0f:79:
         b4:c8:ad:0e:e6:d5:ed:82:79:4d:ad:f2:c9:c2:f8:d8:f2:8a:
         2a:60:96:91:05:76:e9:5f:e6:df:0f:40:d3:7f:ef:3b:c2:18:
         da:5f:dc:a9:59:62:bd:24:0e:30:52:f6:bb:ed:41:60:3c:65:
         0c:7a:e9:99:aa:a9:7c:cf:76:6f:c1:56:ac:5e:b5:c2:a1:66:
         c3:1c:69:4c:73:aa:9c:78:82:1b:05:bf:29:3f:ba:43:ef:c2:
         77:a6:18:a9:33:d1:e3:91:0f:5f:34:c8:86:71:6c:c0:85:5d:
         af:63:ae:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:38 2025 by rpki-client