Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
File:                     9pGrMkX_iVpy3W_wdDw3e28PiaY.mft (raw, json)
Hash identifier:          kuIHlcMMv+h5fuHNTWec145a7RLUWh8+zkhytuYmfkM=
Subject key identifier:   70:3F:E1:F9:59:FB:91:5B:B9:9C:75:AA:51:56:E1:D8:40:6B:31:4B
Authority key identifier: F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6
Certificate issuer:       /CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
Certificate serial:       019874192875FD77459F33B5B18B623BB6C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
Manifest number:          0736
Signing time:             Mon 04 Aug 2025 08:01:02 +0000
Manifest this update:     Mon 04 Aug 2025 08:01:02 +0000
Manifest next update:     Tue 05 Aug 2025 08:01:02 +0000
Files and hashes:         1: 9pGrMkX_iVpy3W_wdDw3e28PiaY.crl (hash: XmU1JlKcPV5188tgkUSkiq04RooBEr/awX8n7Rk0ZN4=)
                          2: NNs7_agCq4a5LGK9vlJAbRyPMSw.roa (hash: /RavIGbCYx2zogfJiuXee/WpGjlrh9UdwbzPF7/qVAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:19:28:75:fd:77:45:9f:33:b5:b1:8b:62:3b:b6:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f691ab3245ff895a72dd6ff0743c377b6f0f89a6
        Validity
            Not Before: Aug  4 08:01:02 2025 GMT
            Not After : Aug  5 08:01:02 2025 GMT
        Subject: CN=703fe1f959fb915bb99c75aa5156e1d8406b314b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:bb:65:f0:a8:45:97:b3:60:aa:bd:75:de:
                    a5:4f:25:bf:8d:8b:74:40:54:9a:a7:cc:bc:de:2f:
                    a5:a9:09:fa:ba:5b:9e:82:84:e5:1a:c5:1e:92:05:
                    8a:a5:fe:1b:f1:bd:9f:9b:f0:14:68:ed:07:6e:a6:
                    c8:4a:69:fc:7f:5f:10:bf:ee:26:72:aa:14:db:26:
                    50:06:ab:63:a3:02:bb:ca:23:8e:79:5f:9c:57:9d:
                    e8:79:78:d2:5a:c3:32:38:70:18:29:1a:21:4f:78:
                    76:9a:6e:09:e6:89:56:0a:be:b5:0d:56:7a:cc:11:
                    2c:2e:70:d3:d7:3b:14:f5:ea:f6:3e:dd:b4:15:90:
                    98:35:5a:be:27:21:74:75:a4:61:13:9d:22:65:65:
                    7b:ec:52:bc:d7:fb:c4:08:d7:e1:31:ac:d4:0c:a4:
                    e9:fd:42:d4:ef:ee:56:6c:07:73:d9:da:f3:de:ff:
                    53:d6:b1:3e:f2:81:11:fc:fd:99:44:ff:f5:82:a2:
                    19:ca:ba:4e:fe:e9:14:6c:27:e2:88:83:8b:81:96:
                    94:b6:12:bd:de:5b:02:c5:49:06:c9:41:10:6c:95:
                    65:2f:d1:4e:07:80:8b:e8:f1:80:2c:e8:d4:f7:61:
                    1f:49:e8:4a:a7:0a:bb:4d:e6:89:58:7e:1a:82:2e:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3F:E1:F9:59:FB:91:5B:B9:9C:75:AA:51:56:E1:D8:40:6B:31:4B
            X509v3 Authority Key Identifier:
                keyid:F6:91:AB:32:45:FF:89:5A:72:DD:6F:F0:74:3C:37:7B:6F:0F:89:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pGrMkX_iVpy3W_wdDw3e28PiaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/244a71-e6af-4905-bf65-dfe3c4c5288c/1/9pGrMkX_iVpy3W_wdDw3e28PiaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:d8:c0:63:12:08:5e:86:ed:0c:dd:3a:ca:60:5b:bf:10:6e:
         14:ba:81:58:c3:ac:72:c4:5a:83:56:5b:a9:f5:af:05:6b:11:
         ed:99:53:3f:7f:3d:83:74:10:f0:da:e3:2d:de:7e:2a:1b:54:
         76:74:48:5a:51:18:4c:78:f5:93:bb:ab:09:b2:60:96:bb:0a:
         da:e3:29:6b:60:e4:70:98:c6:a5:e9:bd:fe:99:50:91:60:8e:
         b7:86:bb:b4:2d:11:93:1e:0e:bf:f7:d8:c4:df:96:08:28:15:
         d5:d3:db:ba:31:25:f4:2a:c9:c4:49:95:01:8c:54:8c:17:fd:
         aa:af:dd:ba:62:47:1b:eb:5b:d2:ec:31:2a:cd:be:79:51:d0:
         ef:4b:aa:6e:00:e4:40:7a:a8:7f:94:f3:d2:20:27:57:01:7a:
         05:03:a7:b5:46:c2:02:47:27:d5:60:35:69:33:49:a7:b0:e6:
         f8:bf:90:ee:13:3d:0d:21:ae:63:aa:4f:03:fe:f3:64:fa:19:
         ab:60:f4:89:d4:4f:8b:0e:f4:c7:0e:b5:a6:1d:3b:6a:e6:c0:
         68:40:34:91:a9:ca:05:18:0a:14:d3:e6:1e:93:ee:f7:e2:ea:
         17:a6:6b:6f:e3:48:f0:f4:84:28:87:b7:aa:03:7d:b6:01:f8:
         30:76:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:23:23 2025 by rpki-client