Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
File:                     9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json)
Hash identifier:          JtYQJTmmLz//4vFuqLGa1z6d5+Jz6rYjS5HCGKOCp2Y=
Subject key identifier:   F4:E5:04:71:7C:2E:9F:48:9A:CD:87:FA:99:39:E3:AF:C8:72:41:98
Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D
Certificate issuer:       /CN=f5232ee805f78e592eff2cca61539109e5a3467d
Certificate serial:       01987E2F3F5C60F658A96727D80D86EC08D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
Manifest number:          044A
Signing time:             Wed 06 Aug 2025 07:01:22 +0000
Manifest this update:     Wed 06 Aug 2025 07:01:22 +0000
Manifest next update:     Thu 07 Aug 2025 07:01:22 +0000
Files and hashes:         1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: syZqBU0pLzgXwzVGVxCWiDQw7KobkuJitSHrehkjjuc=)
                          2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2f:3f:5c:60:f6:58:a9:67:27:d8:0d:86:ec:08:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d
        Validity
            Not Before: Aug  6 07:01:22 2025 GMT
            Not After : Aug  7 07:01:22 2025 GMT
        Subject: CN=f4e504717c2e9f489acd87fa9939e3afc8724198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8d:36:4c:79:39:92:22:03:e4:24:04:4c:f0:
                    f4:d9:50:53:11:2d:ab:38:d6:9e:83:b2:77:b7:55:
                    17:12:3d:5f:64:f8:b9:e6:7e:de:6d:46:d1:e0:bf:
                    62:dd:d7:66:c2:c9:21:a9:4f:2c:4b:9f:0f:57:16:
                    f7:f7:83:02:b5:2a:15:8a:fc:f9:a7:36:a9:1a:3e:
                    26:49:67:e3:d0:0c:55:a4:33:16:3f:19:e7:21:b6:
                    44:b0:76:94:19:2b:c2:61:d2:e3:57:be:c4:63:d3:
                    28:4c:53:d7:4d:8a:ff:13:0f:bf:6f:d8:2d:ce:6b:
                    21:4e:5a:06:e4:92:e0:5c:16:c7:50:4d:93:08:0a:
                    fa:00:f5:79:62:e8:e8:9f:46:c6:f8:a5:f4:5f:df:
                    e7:35:e2:41:63:81:37:3e:fb:2d:fd:f1:da:e2:68:
                    94:68:5a:f1:2d:30:4d:c8:16:e5:4f:cc:a8:14:c2:
                    ea:5d:07:41:d7:bb:1b:89:60:7a:7c:29:30:1a:fd:
                    9a:32:b4:38:1b:5f:26:f9:10:5e:c2:ae:37:df:67:
                    4d:4a:bd:f6:65:4c:51:a3:b0:a8:e8:a6:87:99:4e:
                    57:ac:71:f6:95:44:14:08:e8:46:cd:d3:9c:bc:a1:
                    fe:32:e8:59:3c:08:c9:27:e6:56:7b:4c:52:53:00:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E5:04:71:7C:2E:9F:48:9A:CD:87:FA:99:39:E3:AF:C8:72:41:98
            X509v3 Authority Key Identifier:
                keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:bc:6e:5d:51:5f:39:b5:15:b1:ed:63:52:20:7d:ad:81:8c:
         52:3a:0a:78:65:4c:5c:87:a9:f0:55:09:39:7a:75:7d:fa:0c:
         14:fe:2b:73:8b:2d:73:df:a1:e9:8f:43:6d:3c:0f:e7:ab:a1:
         ea:f1:95:c2:fb:11:9d:4a:25:40:e9:1f:6b:99:18:fc:b7:0f:
         ca:88:25:6d:ee:20:19:68:18:8c:90:ad:8b:63:eb:3f:07:86:
         60:1a:d4:ac:7c:d6:98:32:50:60:c3:19:d6:06:90:63:77:da:
         dc:e6:bf:1c:17:41:70:db:41:81:4e:96:5f:cd:37:61:ee:bb:
         34:10:90:e7:e7:a6:38:70:d0:2e:0b:8a:2c:53:38:9a:98:da:
         59:04:e7:8c:00:b5:e2:b0:5b:aa:23:d5:0a:11:6d:06:08:98:
         c0:26:0b:96:a9:1a:8e:10:cf:e5:9f:bd:b2:f0:3e:06:4a:31:
         85:d0:f0:9b:8e:c7:37:ea:11:8f:5f:25:9d:5c:e4:2f:39:13:
         2b:40:14:e8:37:f7:39:ad:ed:22:c1:26:44:17:6e:f6:76:8e:
         ee:83:f5:3e:26:f8:6b:f2:00:09:15:05:6f:e3:fc:3a:46:f6:
         a9:cf:0f:bc:b4:92:56:b5:02:d2:2d:ba:d5:dc:01:03:6f:91:
         05:a0:ba:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:26:57 2025 by rpki-client