Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
File:                     9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json)
Hash identifier:          eVhB9+iILQTmdLBYhsnEQe7H+Vu7s5rlqf8U++Et+Dg=
Subject key identifier:   C1:E8:AB:B2:D7:0C:C7:1A:BE:64:CF:B5:F9:07:A4:4C:FD:A3:ED:B0
Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7
Certificate issuer:       /CN=f6e7d811954993a953b7948dd06765cbc090dcf7
Certificate serial:       0198880D8E97E29874A4A35FE830D36413D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
Manifest number:          0239
Signing time:             Fri 08 Aug 2025 05:00:46 +0000
Manifest this update:     Fri 08 Aug 2025 05:00:46 +0000
Manifest next update:     Sat 09 Aug 2025 05:00:46 +0000
Files and hashes:         1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: JDyOzupSX+aODcOGJeptf7PVyMx7FnSTmNnnrInFUMM=)
                          2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:0d:8e:97:e2:98:74:a4:a3:5f:e8:30:d3:64:13:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7
        Validity
            Not Before: Aug  8 05:00:46 2025 GMT
            Not After : Aug  9 05:00:46 2025 GMT
        Subject: CN=c1e8abb2d70cc71abe64cfb5f907a44cfda3edb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c8:9d:15:db:43:90:c4:58:1f:64:8b:eb:4b:
                    69:80:be:9a:ca:fb:cd:28:ce:22:1c:20:19:2b:d0:
                    21:00:75:bb:ca:e7:1b:df:10:68:de:5c:fa:3c:e8:
                    79:64:73:4e:e4:0d:df:ed:c8:ff:30:06:58:4a:36:
                    11:39:15:d2:fe:cb:22:64:4f:1a:46:48:bf:4b:e6:
                    bf:a5:d6:7d:1a:3a:2c:59:ea:07:ec:b8:ea:9c:4c:
                    bc:d1:cf:8c:27:dd:e7:1a:03:05:64:35:c7:83:40:
                    25:73:72:31:2b:71:fe:f3:2a:21:59:89:1d:8b:fd:
                    e7:7b:a3:e6:c5:58:d6:8b:cc:96:51:e4:aa:80:ee:
                    f4:d4:df:9c:39:91:91:19:a0:80:93:c9:b1:75:3a:
                    19:55:0d:7e:df:e1:d8:a5:29:fa:31:2b:c0:26:09:
                    e6:ec:6f:c9:d3:db:ce:e6:cd:a4:bb:cf:6f:51:e2:
                    0b:57:61:00:8a:7f:cd:c0:95:c2:b2:d3:94:d0:1c:
                    ce:f1:b0:91:02:95:b4:5d:94:3f:d8:4a:48:af:aa:
                    da:35:78:dc:42:82:24:38:ac:cd:a2:9f:3b:37:98:
                    ec:44:c2:57:d1:6b:7c:01:9f:91:a2:93:c4:66:61:
                    5e:b7:ca:39:a1:73:2d:81:63:06:04:be:63:07:c7:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E8:AB:B2:D7:0C:C7:1A:BE:64:CF:B5:F9:07:A4:4C:FD:A3:ED:B0
            X509v3 Authority Key Identifier:
                keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:be:53:49:ba:a4:b2:61:fa:2d:60:ed:82:e1:04:c7:98:d4:
         6c:35:39:82:2b:7b:d9:3a:b6:e1:85:fc:eb:9a:ae:9c:58:59:
         09:31:2f:2e:d1:6a:3e:5f:e2:69:de:43:0f:8b:9f:33:56:ce:
         92:ec:4b:49:b0:c3:11:c3:85:11:ae:30:8b:b4:4c:43:d1:dd:
         42:ce:8c:84:bc:c3:50:43:5b:a2:e7:31:9d:6a:23:05:52:e3:
         f1:b2:61:89:cc:e4:61:3d:a3:f5:ac:4a:95:e9:91:83:fe:c4:
         3d:5d:e6:e9:54:ef:2c:60:fd:be:d6:ee:58:77:1a:82:f5:a3:
         04:ab:3d:d3:d8:f5:7a:10:08:db:18:d2:c6:e3:33:64:86:39:
         20:87:eb:e4:ba:a7:84:dc:5b:85:85:b7:fc:5b:7b:7f:b0:2d:
         4b:ca:52:20:d6:66:82:78:ec:e3:6c:df:00:26:4a:a7:a2:17:
         f7:00:dc:7b:0c:b8:43:d8:2d:65:66:6f:85:4a:b8:6b:eb:50:
         01:f4:dd:49:32:bf:ee:be:30:8c:46:01:9f:63:e0:cd:3d:24:
         d6:ec:ae:2c:79:58:07:80:b0:f9:d7:a3:d6:21:f8:b0:09:92:
         f4:23:28:8e:55:09:fc:5a:44:7a:b6:b5:0c:57:ef:d0:16:ca:
         e2:89:da:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:10:14 2025 by rpki-client