Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
File:                     S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json)
Hash identifier:          6yiLI++POknChtJm1EJFi9bFJSoDa+l671TjOGyWrs0=
Subject key identifier:   D8:E1:2B:30:29:07:B3:64:0D:68:69:76:36:42:BC:D5:B9:5A:D1:3E
Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11
Certificate issuer:       /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
Certificate serial:       01988B0EDA5D751C5521E65D88CC58A44D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
Manifest number:          0BD0
Signing time:             Fri 08 Aug 2025 19:01:03 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:03 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:03 +0000
Files and hashes:         1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: IJapLqK1gFrWIUsL110P/RTP5mBVoIWMKCI5/9CWLxE=)
                          2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0e:da:5d:75:1c:55:21:e6:5d:88:cc:58:a4:4d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11
        Validity
            Not Before: Aug  8 19:01:03 2025 GMT
            Not After : Aug  9 19:01:03 2025 GMT
        Subject: CN=d8e12b302907b3640d6869763642bcd5b95ad13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6d:80:df:5a:a9:8f:64:ce:84:78:6d:30:fa:
                    9b:d8:b0:3d:4d:26:50:ba:05:81:e7:cf:9d:b3:c3:
                    00:c8:b1:df:13:48:25:83:1d:37:42:77:69:55:4b:
                    e7:5a:c0:ff:91:55:24:7a:da:9b:ed:1d:25:0f:65:
                    e5:b9:94:2e:2c:3c:b3:d1:42:7f:58:9d:bf:5a:5c:
                    dc:bf:2e:ef:e9:85:01:f8:c5:20:b1:c0:14:1c:0b:
                    cf:cf:ed:98:b6:66:47:0f:c3:83:6d:f7:14:2e:34:
                    bb:86:b7:f4:07:83:76:55:a3:df:de:17:14:66:37:
                    30:4a:f1:e8:c4:9c:42:20:77:d6:74:fc:cf:66:de:
                    0d:6a:f0:52:02:58:3c:05:26:fb:2e:dd:35:6f:15:
                    11:24:1d:bf:96:11:92:f4:90:20:21:dc:8b:61:50:
                    db:8f:d7:01:f2:72:3d:68:b2:aa:77:94:0d:54:19:
                    61:c8:a8:00:98:05:62:f8:bc:d4:91:63:11:80:4e:
                    0e:c0:1c:b3:78:58:39:24:87:6f:f1:a5:f4:a3:dc:
                    08:21:b3:69:5f:03:9f:ba:a5:3e:7f:fe:c8:d1:b0:
                    36:cb:d0:b8:b5:ae:0b:94:d4:18:cc:0d:0a:36:42:
                    90:88:ae:97:d1:37:be:79:be:23:97:62:ad:6f:66:
                    9a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E1:2B:30:29:07:B3:64:0D:68:69:76:36:42:BC:D5:B9:5A:D1:3E
            X509v3 Authority Key Identifier:
                keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d2:e5:db:82:44:05:e9:a5:66:3d:bf:62:d2:59:76:a8:0d:
         0d:aa:e6:93:9e:3a:52:4e:d8:d7:de:08:3a:ec:5e:a1:7c:f6:
         f4:87:bb:b7:3c:29:ec:d9:0b:e0:2c:08:91:ce:10:3f:2f:5b:
         c3:8b:6b:c5:33:7b:71:63:1e:9c:28:85:bb:e5:0f:08:35:49:
         b2:c8:d7:c6:60:3f:2d:31:e3:b0:46:63:4b:d8:f2:78:5e:fb:
         fa:76:79:92:4f:83:df:5a:87:e0:c4:b5:da:87:0e:68:2e:a4:
         29:36:c9:a8:fe:a2:2f:2b:6c:32:2a:ab:a8:a0:6e:9d:ee:68:
         d6:92:57:65:a3:a2:71:09:a8:45:f9:da:de:46:57:16:eb:e3:
         4a:3f:67:48:57:6d:8f:75:76:0d:4c:d8:5c:9b:a1:88:80:4f:
         f1:50:62:6c:12:65:21:cd:8d:80:de:6d:b1:2a:1a:80:d3:0f:
         14:76:4f:d1:fe:8e:3e:3a:fa:46:65:e5:94:6f:15:a1:cb:00:
         86:17:fa:2f:cb:22:fd:e6:40:44:96:19:06:ed:88:08:e3:33:
         47:a4:aa:f8:f7:24:9e:6d:08:51:0c:40:70:93:58:3d:dd:6f:
         a8:9d:df:ba:9a:90:5d:47:58:8a:cf:44:98:e4:7d:d3:88:3a:
         eb:fb:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:02 2025 by rpki-client