Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
File:                     9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json)
Hash identifier:          +6sSZ4PyeFY7VzpV89FrnQi6Wya6E/2pkGw7hUKBRHk=
Subject key identifier:   63:AE:7B:F4:82:E7:8C:44:F5:8D:8B:3F:3B:36:C7:66:BD:E3:00:E5
Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29
Certificate issuer:       /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
Certificate serial:       019873E3CA30A5CE64366D8C77F295990E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
Manifest number:          1302
Signing time:             Mon 04 Aug 2025 07:02:44 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:44 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:44 +0000
Files and hashes:         1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=)
                          2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: 9hcNnk8yqLQbMBXA83ltcyK2nJq61m6903Py+CPg3hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:ca:30:a5:ce:64:36:6d:8c:77:f2:95:99:0e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29
        Validity
            Not Before: Aug  4 07:02:44 2025 GMT
            Not After : Aug  5 07:02:44 2025 GMT
        Subject: CN=63ae7bf482e78c44f58d8b3f3b36c766bde300e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a1:d3:4d:05:41:64:8f:51:8b:45:8f:68:60:
                    dc:73:1a:3f:28:cc:dd:fa:45:e5:45:6f:1b:86:4a:
                    75:5d:b5:15:21:e8:d8:8a:57:be:fb:63:5f:98:08:
                    d1:14:8e:d6:d7:2f:4a:e1:1e:f4:94:63:35:cd:2c:
                    c7:e9:99:12:85:df:bc:42:65:cf:61:5b:cb:7d:d5:
                    63:4e:81:ba:eb:4f:f2:24:c7:f0:9d:fe:cb:28:b1:
                    5f:7c:12:a9:8d:dd:04:e0:48:5c:74:ed:3e:35:31:
                    d5:b5:50:ea:b1:64:69:00:17:59:2d:d6:c4:2e:83:
                    84:08:b4:db:1e:45:6b:5e:af:7b:45:64:ef:dd:f6:
                    d0:9f:fb:22:36:25:75:ff:56:5c:6e:7b:cc:86:b8:
                    c9:26:7b:fd:8e:2c:ff:a6:68:6b:79:70:af:99:79:
                    40:f7:20:ca:7a:c4:eb:ce:ac:8c:ee:a1:5f:f0:f6:
                    e5:85:99:d3:4e:68:28:27:28:63:0e:09:87:8a:28:
                    8f:de:33:ed:00:4e:d1:68:12:0a:9d:a3:ac:3f:27:
                    21:49:89:c2:67:38:17:c1:3d:04:08:31:90:4f:a6:
                    e2:1f:7e:0b:c0:b5:e1:27:08:5b:e4:27:34:ab:38:
                    39:e6:3d:22:d9:9f:22:5b:39:46:08:ba:16:1a:80:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:7B:F4:82:E7:8C:44:F5:8D:8B:3F:3B:36:C7:66:BD:E3:00:E5
            X509v3 Authority Key Identifier:
                keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b9:cd:5f:3a:6b:9d:ef:db:03:76:74:1e:68:fe:e8:cc:8a:
         f3:5a:f3:93:e3:6e:56:f0:27:00:e6:58:49:2c:3f:f3:5b:9e:
         14:b0:1b:fe:38:df:ea:34:32:49:dd:f7:e2:c4:0e:31:3c:98:
         df:6e:38:7b:04:23:df:7d:7d:ff:18:72:ba:1a:d0:f5:a3:74:
         6f:cd:7c:e2:02:7e:a1:3c:d1:cd:91:f7:28:e0:64:0b:c6:35:
         2b:2b:7e:1e:2c:21:27:ab:6b:bd:87:d9:7e:53:9e:08:03:f8:
         83:9e:1a:4b:ab:2a:5d:b7:38:d4:90:ff:1c:de:ff:3e:35:65:
         af:6d:ac:cf:9c:26:81:4e:23:88:d4:a4:bb:d8:48:4c:9a:48:
         f9:24:30:d9:f4:64:01:42:66:92:7d:32:2a:ab:23:b7:f7:d2:
         6d:f1:94:0f:70:6a:3d:f5:92:f9:b4:e0:d3:e5:88:28:c8:b5:
         fb:36:e8:b4:83:61:41:e0:9e:c2:f7:70:7c:96:c8:3d:bd:55:
         e9:73:34:ef:95:e8:56:3d:de:ac:9e:b2:5a:bd:cd:83:5f:a3:
         8d:dd:25:5e:82:33:86:43:5b:c4:43:28:c4:61:bd:ee:73:10:
         29:12:94:b3:37:30:5d:8a:3b:18:e5:6b:f2:57:99:3d:f8:38:
         a2:91:ee:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:41 2025 by rpki-client