Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
File:                     niX4djqjUWiba6M2JpqyHE4BILM.mft (raw, json)
Hash identifier:          lkMX/LPsrQD7XDeIZ10RF+p+mmY5BRKOyegcDW//fKU=
Subject key identifier:   9E:7B:6F:2E:C5:3E:BC:DA:1A:F9:4F:BD:89:4D:1F:31:B7:8D:C2:9B
Authority key identifier: 9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3
Certificate issuer:       /CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
Certificate serial:       019881D53B74B51A047206E2507F1BB0D1A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
Manifest number:          0442
Signing time:             Thu 07 Aug 2025 00:01:31 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:31 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:31 +0000
Files and hashes:         1: 3lv0MS0KMvs2NqTlqtd3HvxtHfA.roa (hash: Jn8Yd6x4goPshXFFHZFFSl5WpHb8SXFgvxZ7Lsgfvu4=)
                          2: niX4djqjUWiba6M2JpqyHE4BILM.crl (hash: xe6q3YgmvsLBsXoiOwMczpqEB7ek7bZCGcNCz/RxtlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:3b:74:b5:1a:04:72:06:e2:50:7f:1b:b0:d1:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e25f8763aa351689b6ba336269ab21c4e0120b3
        Validity
            Not Before: Aug  7 00:01:31 2025 GMT
            Not After : Aug  8 00:01:31 2025 GMT
        Subject: CN=9e7b6f2ec53ebcda1af94fbd894d1f31b78dc29b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e4:c1:cd:9a:a5:39:70:be:43:1d:9a:36:bb:
                    f1:61:40:d8:e9:7e:7e:1f:f5:07:9f:e6:ab:65:65:
                    bc:0e:24:d1:58:21:0c:f2:df:25:33:b5:72:f8:db:
                    69:2f:b6:c9:aa:c4:1f:52:dc:a3:99:e6:da:b1:f7:
                    72:85:83:48:79:e3:64:fe:95:28:95:e0:38:55:39:
                    ab:84:39:eb:71:bc:f3:a9:2d:e2:12:d5:8a:ed:48:
                    ea:08:f0:d5:20:3c:6b:4c:5d:26:89:74:40:78:68:
                    4f:0c:70:1c:8f:64:6a:30:e8:47:f4:d6:a7:17:12:
                    8f:17:87:50:19:62:9e:a2:01:92:ce:de:fb:c8:87:
                    22:c5:4c:48:fa:ff:62:8f:6e:97:23:f7:e7:93:30:
                    31:4e:b4:a8:70:4a:b1:4c:47:6d:e0:60:2b:e0:76:
                    f4:38:e9:c1:6b:2f:fc:2e:2f:91:24:45:04:3a:77:
                    60:81:35:f2:de:c8:86:c1:d7:c7:83:db:94:69:8f:
                    0b:8d:f1:77:87:0b:d2:25:21:c9:8d:01:4d:4e:26:
                    da:62:72:45:f8:a9:27:41:cc:f0:ef:d5:75:3b:28:
                    2d:4f:cd:ee:54:1d:92:b2:36:a7:b2:61:d9:34:bd:
                    53:b1:a8:7a:0c:02:54:14:9a:b5:2d:c6:0f:ae:98:
                    ed:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7B:6F:2E:C5:3E:BC:DA:1A:F9:4F:BD:89:4D:1F:31:B7:8D:C2:9B
            X509v3 Authority Key Identifier:
                keyid:9E:25:F8:76:3A:A3:51:68:9B:6B:A3:36:26:9A:B2:1C:4E:01:20:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niX4djqjUWiba6M2JpqyHE4BILM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0a4564-a525-4615-9a3a-8930ebb83e31/1/niX4djqjUWiba6M2JpqyHE4BILM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:41:e8:76:b3:f5:80:13:c3:92:70:a4:59:af:4d:bc:6e:73:
         25:4e:55:1a:29:b6:5a:df:b9:aa:9d:89:76:4b:4e:fa:04:3a:
         77:c7:fa:ab:1d:87:fa:c6:d3:4e:d6:59:3e:31:e7:3d:a4:f8:
         16:c9:87:d3:fd:5c:74:17:f5:98:24:29:0d:d6:7c:77:ef:2e:
         61:a4:6d:ed:c7:eb:66:5e:06:b3:b8:92:36:c9:3d:58:8a:73:
         7e:cf:a5:13:83:5f:9c:9b:46:d3:80:56:ab:20:19:3e:d6:e3:
         b8:7e:b3:68:66:7b:3d:20:13:2a:d6:3f:fc:20:30:b2:e3:18:
         d3:ee:7e:89:72:38:04:23:b1:70:52:d8:63:6b:bd:80:d5:b8:
         a1:e5:f2:4e:87:9e:80:94:05:22:82:26:45:5e:4f:a3:01:54:
         bd:27:56:73:2d:59:af:17:b1:0e:b4:b1:77:01:5b:ce:4f:f9:
         96:e8:84:e8:2c:da:a4:ec:4a:3b:1c:7c:5e:78:20:a6:af:bd:
         37:b6:fa:7d:4e:87:c4:15:c3:4d:ec:24:4e:6a:0f:a5:06:1a:
         2a:cf:40:bc:63:f8:50:f3:c1:ad:11:e8:6c:2f:a3:97:14:6a:
         5e:50:ed:f7:c7:23:73:69:27:8b:ea:26:84:0d:26:ef:9b:fc:
         5a:56:88:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:58:19 2025 by rpki-client