Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          ZkKpA4zZ8dIaLu4VoLhYcW3i+lQBgKbK7aHff3VhlJI=
Subject key identifier:   11:7B:4A:07:92:58:B6:50:4A:44:DB:5F:52:2C:1B:B9:85:25:04:19
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019880C264E1CBE8CEBD69183364C86F5B18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          16A1
Signing time:             Wed 06 Aug 2025 19:01:20 +0000
Manifest this update:     Wed 06 Aug 2025 19:01:20 +0000
Manifest next update:     Thu 07 Aug 2025 19:01:20 +0000
Files and hashes:         1: 2It_I9J9BgRnnQT5C-V712e3yx4.roa (hash: ESMa8M4XpFdW7jSu8zHJhrebxwQNF93LMCKBGt+hLE4=)
                          2: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: irDW6oR7WBEwmqMEBcxeD/mEbZrunr86hrTy06Dc4eI=)
                          3: 9wqSsz454xa7xQ9yciYDZS_0nT4.roa (hash: t7sNw5C01M0Lri24QEX27hUX97IHa1BqO6KYTgvz7io=)
                          4: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=)
                          5: PueZ2Saibe_grnff0WyfuKxQBLM.roa (hash: ASz9qPcsScVDhnrxdRTZGa/ifE1te7I/3UbW2qncNLQ=)
                          6: bIOnLPyVT4HMkOF207Y-bxFgW_o.roa (hash: sgHv3RFNqOpH2R7wPkXbngTzHaihOut0tmB1GHo2cvM=)
                          7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=)
                          8: qzQ58HKI-mgBoaOFTgfx4_Ity54.roa (hash: uVfHYpeJ9lif56v5ovpl9hgZmP0798jrrH58ViAFwNI=)
                          9: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=)
                          10: zVJHdam97YhSyaN6HMdIxs7X12A.roa (hash: dDne1wP6FLj5db+nkqmszrC9qemts/WD7C0EScin8hs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:c2:64:e1:cb:e8:ce:bd:69:18:33:64:c8:6f:5b:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Aug  6 19:01:20 2025 GMT
            Not After : Aug  7 19:01:20 2025 GMT
        Subject: CN=117b4a079258b6504a44db5f522c1bb985250419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b2:2f:db:0e:20:fc:dd:18:6d:52:a1:de:e0:
                    4a:5d:fc:d9:f6:71:56:ea:26:e1:d8:60:92:db:7f:
                    04:b0:73:9f:c3:a0:64:f9:49:83:84:2e:89:79:4b:
                    78:db:1d:32:04:f7:78:c4:dc:fb:e0:19:29:43:99:
                    d2:9f:88:7e:20:d4:31:cb:9e:11:4a:c6:6c:67:4a:
                    e8:cc:c0:74:67:24:03:1c:be:08:c0:60:a9:29:67:
                    17:5b:bb:96:f1:da:7a:1d:ab:d7:8f:56:5a:33:fb:
                    b1:b1:51:26:9e:9f:84:7e:53:68:d4:be:e2:1a:28:
                    a9:8f:f1:49:cb:56:89:03:16:f5:10:fc:21:42:25:
                    38:2c:d8:f4:b1:62:3d:c1:ea:d7:c3:27:c9:c0:78:
                    fa:f1:40:b2:b7:57:c6:68:a6:e5:fd:2d:e8:ea:87:
                    8c:82:0c:53:69:7c:b2:9f:0b:8f:a2:2e:5d:b3:33:
                    9d:76:63:3a:67:6a:e5:5f:4d:34:89:8e:a5:07:5d:
                    1e:ef:1c:67:2a:1a:32:8d:73:60:42:53:e5:1c:aa:
                    57:52:0b:13:ee:34:f9:6d:a5:36:41:b7:6d:80:3b:
                    22:68:8e:13:ba:73:34:a2:e6:3f:89:9e:66:b2:a4:
                    a0:ba:53:89:d5:ba:c9:ca:14:94:a6:87:24:de:6e:
                    5b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7B:4A:07:92:58:B6:50:4A:44:DB:5F:52:2C:1B:B9:85:25:04:19
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:34:96:70:89:db:e5:a4:fe:2b:b6:b8:e2:eb:c3:50:66:7a:
         e5:fa:25:c2:7e:a9:ff:f1:3d:c6:a0:a1:c2:d1:ec:c8:9a:43:
         c9:9d:41:d1:ec:42:30:19:b0:0f:7f:00:5b:da:05:38:a3:37:
         cf:99:0c:44:c8:c7:6b:1c:af:ef:48:3f:f9:28:55:89:a2:91:
         8b:50:20:ac:4c:bb:95:db:f3:0d:5b:41:9c:ff:22:64:43:89:
         a6:eb:a2:a0:6a:c7:5f:ea:fd:5b:dc:96:be:e0:15:c5:fc:30:
         d8:84:f2:50:dc:1b:b6:5f:b7:83:23:d9:9f:36:8f:87:3d:34:
         ff:a8:b7:c2:35:74:12:b5:31:14:ee:f0:7e:da:aa:51:86:7a:
         d1:4a:d9:7f:3d:59:2d:6a:31:0d:3d:c3:5b:65:c4:57:d1:64:
         29:f7:ec:74:78:e2:78:b0:dc:ab:48:b3:5b:ac:c1:a3:fa:df:
         f8:7f:6e:37:c2:28:c0:ea:bd:ef:82:90:cb:80:28:f6:bc:f4:
         f5:ae:1e:bb:c1:7c:b3:72:f4:73:3e:a5:37:7a:56:f6:a7:75:
         4c:77:8e:11:d5:43:b9:a0:fc:b2:a7:7e:a6:9d:a4:ba:98:0c:
         ec:cf:10:8e:68:34:99:65:90:c9:be:2f:3b:9f:e9:55:9d:39:
         79:74:84:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:01:16 2025 by rpki-client