Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
File:                     aWoG5FR9oBpci177cQQOXt0Qnuc.mft (raw, json)
Hash identifier:          n9huPpBysrk6OppZPai7tfgFg2PBt5iJf6VCDQieRPs=
Subject key identifier:   4F:A2:7B:72:78:DB:F7:29:2B:AB:6F:A6:1E:99:A5:7E:8C:50:EF:81
Authority key identifier: 69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7
Certificate issuer:       /CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
Certificate serial:       01988B0F7C6C2D296AA75F54A7B520257E0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
Manifest number:          1099
Signing time:             Fri 08 Aug 2025 19:01:44 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:44 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:44 +0000
Files and hashes:         1: aWoG5FR9oBpci177cQQOXt0Qnuc.crl (hash: kF49BqBdyy/baKQ2odtKif3Nea9cdoxhwuxTgn7gmX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:7c:6c:2d:29:6a:a7:5f:54:a7:b5:20:25:7e:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696a06e4547da01a5c8b5efb71040e5edd109ee7
        Validity
            Not Before: Aug  8 19:01:44 2025 GMT
            Not After : Aug  9 19:01:44 2025 GMT
        Subject: CN=4fa27b7278dbf7292bab6fa61e99a57e8c50ef81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:3e:5b:bd:d4:ca:81:f3:02:99:01:59:52:
                    c3:6e:13:61:fc:29:6d:35:93:af:05:ae:8e:8f:3d:
                    1d:ea:4d:ba:e5:36:99:eb:11:1f:47:7a:bf:42:f5:
                    5e:0c:7c:be:91:f3:d2:19:eb:73:f0:5d:e0:16:87:
                    19:15:fa:9d:76:0e:f6:68:d8:3c:d1:02:d4:53:7f:
                    f6:c6:fa:10:62:59:e7:0f:1c:94:70:75:5a:f6:fa:
                    38:85:80:51:b9:6a:32:c9:5e:5e:30:71:a8:1a:d8:
                    10:a3:7a:3e:4a:03:7c:b6:c9:c2:24:00:0d:84:24:
                    a3:d4:78:19:cd:57:6b:33:a7:26:13:08:68:a2:d1:
                    79:79:8f:98:c6:d7:18:29:9b:f0:ad:01:87:ce:cd:
                    78:bc:08:b2:9f:8e:7b:2a:2c:b9:80:2d:1c:5b:ae:
                    fb:a6:c6:69:a5:79:05:f5:c2:5a:64:9b:94:a8:dd:
                    ff:27:e4:41:71:14:f1:e8:12:3d:48:1a:c2:bb:51:
                    f8:8a:b1:a7:ff:49:d8:ed:ae:5d:dd:3a:71:87:61:
                    b3:0f:cc:3c:a5:09:cc:05:c2:b1:80:f7:c3:d3:3b:
                    be:5c:92:8b:2b:a0:d6:4c:00:a9:5f:7b:fc:cf:ed:
                    d5:a2:38:fd:13:3d:8f:2f:e2:77:8d:55:a7:e6:43:
                    68:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:A2:7B:72:78:DB:F7:29:2B:AB:6F:A6:1E:99:A5:7E:8C:50:EF:81
            X509v3 Authority Key Identifier:
                keyid:69:6A:06:E4:54:7D:A0:1A:5C:8B:5E:FB:71:04:0E:5E:DD:10:9E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWoG5FR9oBpci177cQQOXt0Qnuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/900385-d852-4ff3-a2a2-62df93bc64dc/1/aWoG5FR9oBpci177cQQOXt0Qnuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:22:8a:c1:4f:d4:ff:df:93:ae:ab:66:07:5d:ab:e7:89:ff:
         3c:b5:bf:f8:41:fe:32:be:8a:e3:0c:8a:9d:76:04:b7:34:ab:
         21:ae:2d:df:19:da:a0:a9:9d:5a:fc:91:be:5e:5d:d3:45:9a:
         03:44:04:eb:8f:39:69:8f:5d:97:86:ea:92:07:7c:05:5f:32:
         8e:cb:d9:ca:50:81:1c:5a:6a:72:24:1d:01:c7:81:82:11:64:
         cb:49:60:12:cc:6d:07:0b:c3:a0:fd:ea:7f:5c:ce:3a:cc:2c:
         3e:64:96:d6:72:66:3e:72:91:69:8e:30:39:94:62:e7:de:a8:
         15:ab:2c:9f:81:c7:54:fc:a6:f4:1b:0f:bf:de:09:15:77:ad:
         24:49:51:d5:21:d1:9f:5e:cd:a6:ed:29:40:58:ab:2a:3b:b1:
         c2:e3:ef:d3:59:9f:ce:ee:a5:8d:6c:c2:89:a2:94:54:85:6d:
         43:8a:a4:95:4d:c5:f1:25:93:13:3f:64:cd:f5:e8:25:ec:29:
         b9:e2:ce:6a:3d:47:44:f3:93:10:d7:24:79:ab:f9:86:c6:8b:
         7b:e5:2a:15:7e:cb:16:33:eb:b0:81:cc:c8:84:11:1a:4e:c9:
         f5:59:64:51:7b:dc:c0:2b:80:55:6b:ef:43:88:3f:52:33:34:
         29:26:80:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:52:29 2025 by rpki-client