Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
File:                     9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json)
Hash identifier:          gXqVtFhwcKMsotkVtU/2Dp8sCkfEwqOayoG2A3vIntM=
Subject key identifier:   80:48:C0:A7:CC:AE:46:42:29:67:66:B9:AD:D3:8E:80:F8:D1:93:A0
Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17
Certificate issuer:       /CN=f5d412953ac06a7c52cb26796f8806b1bb859617
Certificate serial:       019873E2A7E940636F40AAE4CAB418EEF889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 07:01:30 +0000
Manifest this update:     Mon 04 Aug 2025 07:01:30 +0000
Manifest next update:     Tue 05 Aug 2025 07:01:30 +0000
Files and hashes:         1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: jvJqIE5ZZXKlQEYLAsnovRjIOpEUyShzd1jgodmJ+SI=)
                          2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e2:a7:e9:40:63:6f:40:aa:e4:ca:b4:18:ee:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617
        Validity
            Not Before: Aug  4 07:01:30 2025 GMT
            Not After : Aug  5 07:01:30 2025 GMT
        Subject: CN=8048c0a7ccae4642296766b9add38e80f8d193a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:00:73:4f:1c:68:84:5c:f3:b4:e4:73:5a:2c:
                    7a:e9:35:e2:cf:b8:8a:4f:78:b9:d5:69:04:7b:99:
                    4b:1d:6e:48:d1:02:12:3e:b8:cc:12:87:14:df:01:
                    89:23:0f:29:62:4f:36:92:7c:00:06:cf:54:64:c5:
                    58:79:23:1d:c0:22:72:f8:a1:e1:24:f5:92:4a:33:
                    b2:b8:5b:6a:d7:6c:eb:28:cb:7d:b8:c6:b1:9b:b8:
                    49:17:12:46:d0:05:f9:7d:5d:d9:da:75:10:de:37:
                    99:72:c9:7b:c4:23:fd:96:91:df:16:41:94:f5:00:
                    2f:27:14:d2:e4:31:fb:28:eb:ca:09:1e:33:35:74:
                    75:57:53:5d:c2:a7:0e:58:44:d5:6b:3b:08:ca:f7:
                    d1:f9:16:df:e7:5a:f9:bf:f8:fd:0e:10:d5:b2:8f:
                    86:84:aa:57:d6:5c:71:d1:7a:2c:e5:d6:56:f7:04:
                    46:a8:5e:b3:a0:bf:ad:10:39:f5:b2:3d:fa:d1:cd:
                    4c:8d:c5:ca:e7:80:e5:72:c3:41:d4:f8:e7:9f:0a:
                    ed:41:40:4a:3b:ae:50:da:78:35:a1:a3:52:66:bb:
                    7f:c9:28:3d:93:ea:8b:27:61:22:b5:1b:79:82:31:
                    f4:11:65:5e:bd:08:62:cc:cc:0a:80:a8:70:8d:8d:
                    d1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:48:C0:A7:CC:AE:46:42:29:67:66:B9:AD:D3:8E:80:F8:D1:93:A0
            X509v3 Authority Key Identifier:
                keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8e:87:2f:c1:b7:3b:a7:8e:5c:7c:f4:77:00:7a:8e:03:c4:
         15:98:26:b4:01:f4:89:dd:6a:53:de:66:74:73:94:ef:ad:09:
         e3:60:cc:50:53:8e:14:c8:c7:2b:c2:89:ec:45:16:af:04:6b:
         18:a0:9c:f8:8c:97:eb:80:89:11:f1:74:c7:4f:93:e6:87:09:
         d7:93:79:49:e4:10:5d:84:d4:a7:52:97:f0:b8:b5:35:20:c5:
         80:64:3d:30:a4:3b:fc:e7:4d:6f:ef:0f:86:6c:e1:cb:c3:91:
         2f:d8:af:e5:3e:cc:90:59:57:c7:8e:38:82:6d:60:72:00:0c:
         59:86:e4:3c:20:77:7e:3a:8d:66:67:2d:25:6d:0d:4f:04:c6:
         8b:51:8b:d2:10:cc:5c:4d:7a:9d:5c:f7:40:fe:da:5f:f7:7d:
         d9:09:6b:18:8f:50:aa:82:59:50:fb:15:ca:39:75:b2:aa:70:
         ae:06:f2:f5:b9:93:25:de:21:5b:dc:da:91:ee:02:51:5d:42:
         68:2a:5e:3a:8c:be:b0:7d:74:7b:bb:9e:93:04:a5:ec:6d:1a:
         29:4b:76:72:c2:26:43:d1:dc:00:2c:e6:23:a2:e0:f0:36:c2:
         5c:48:83:a0:b1:c8:3d:99:be:37:86:d0:7f:dc:a0:62:68:67:
         60:a5:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:15:53 2025 by rpki-client