Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
File:                     koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json)
Hash identifier:          U+Bc5iZvM7r/ADLblQMC3V6txW6l/MfmJ5MBopkMk5A=
Subject key identifier:   6E:50:BD:DC:91:48:1C:C5:8F:E4:3E:FB:73:A3:E6:4E:09:31:6C:46
Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9
Certificate issuer:       /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
Certificate serial:       019884D58E416A6D962495E6821118E0F95D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
Manifest number:          161E
Signing time:             Thu 07 Aug 2025 14:00:44 +0000
Manifest this update:     Thu 07 Aug 2025 14:00:44 +0000
Manifest next update:     Fri 08 Aug 2025 14:00:44 +0000
Files and hashes:         1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=)
                          2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=)
                          3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: raEUeJzrBk3KPg3Q0+/48fJ/y8MpuODnoqGdUCPrz40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:84:d5:8e:41:6a:6d:96:24:95:e6:82:11:18:e0:f9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9
        Validity
            Not Before: Aug  7 14:00:44 2025 GMT
            Not After : Aug  8 14:00:44 2025 GMT
        Subject: CN=6e50bddc91481cc58fe43efb73a3e64e09316c46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1b:f9:a1:5d:dc:1a:07:ea:53:88:f8:25:24:
                    86:13:af:c0:a7:61:f7:fc:cc:84:ff:d3:32:7a:d2:
                    78:9f:47:5c:89:58:1e:59:63:22:b1:b5:8a:ea:c7:
                    c8:41:15:72:a3:2f:01:80:65:a2:d6:68:96:a8:4c:
                    f8:f4:b2:ae:c3:bf:1d:c5:1a:4d:64:d1:1f:26:46:
                    23:ca:01:f4:f0:ea:78:d1:8a:38:18:11:26:3d:cd:
                    7b:de:9c:bc:48:6d:7d:a0:ab:8c:a1:94:96:40:b6:
                    bb:f8:75:98:fe:82:b4:df:10:dc:66:fe:dc:6b:6c:
                    e3:db:8a:4a:ea:2b:2f:f2:ce:4a:3e:bd:88:a0:6d:
                    61:ea:c4:5b:8e:16:14:34:29:de:50:57:32:a7:66:
                    f1:4b:22:37:7a:93:ed:e7:4f:27:25:22:2a:65:02:
                    d3:9e:6f:65:04:35:3b:c2:46:4d:84:56:96:75:b0:
                    35:60:8d:e2:bb:98:90:26:e2:b4:14:ba:8d:3a:b7:
                    52:25:f5:7d:09:72:ca:06:6d:7f:d8:93:2f:57:f1:
                    7e:a6:13:87:2a:f7:36:c2:24:07:dc:1f:68:3f:6c:
                    91:9d:dd:07:46:b0:b2:d3:f1:37:1f:0b:50:65:d3:
                    8b:49:ea:a3:26:c2:85:16:69:ff:98:db:3b:a0:60:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:50:BD:DC:91:48:1C:C5:8F:E4:3E:FB:73:A3:E6:4E:09:31:6C:46
            X509v3 Authority Key Identifier:
                keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:68:11:e9:d5:61:9c:09:51:db:b7:65:dd:fb:b6:0d:b0:ac:
         5d:87:51:e7:11:c4:6a:ca:da:d4:cd:cb:04:77:cf:f9:31:46:
         0c:80:24:4d:8d:a7:51:ff:b7:f6:7d:55:8e:9d:77:37:cf:a8:
         49:27:d1:85:d2:25:3a:53:14:f8:90:7a:87:c0:11:08:ed:5c:
         7a:dd:6d:e5:a1:12:fe:84:e9:19:3d:c4:b6:e1:1a:25:91:6b:
         bc:37:af:62:07:c9:cc:1c:c8:19:05:aa:ec:42:ab:4e:18:fb:
         c4:e5:14:b0:95:44:16:52:30:a1:7a:40:fe:a7:20:f5:3f:17:
         0a:95:46:b9:36:7d:62:fc:d4:df:be:e9:52:61:47:45:50:e0:
         d9:2e:c6:46:2e:4b:d3:0d:19:c7:af:10:f8:15:98:68:c5:1d:
         73:24:31:cd:28:e7:3d:01:1a:bd:4f:d3:9a:3a:43:c7:cb:70:
         24:1e:f5:4e:9e:90:4a:69:02:9c:af:7a:04:ce:6c:4d:23:44:
         2d:a0:06:2e:42:04:8b:c8:8f:15:29:32:f3:88:86:f2:01:d0:
         a8:c3:5a:63:77:e1:80:16:f5:58:3f:79:42:9c:e9:07:40:91:
         41:bf:87:2c:6f:b0:a0:07:df:1f:bf:fa:51:ef:4f:62:bf:46:
         b3:05:18:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:10:49 2025 by rpki-client