Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File:                     CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier:          hsPtJK61R7X1cy9Y+PQySb+r1+DXP2137Gp2ngjHKmc=
Subject key identifier:   02:72:5A:68:C3:01:4B:3F:5B:07:8C:5D:50:33:B1:0D:AB:E7:2A:5A
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer:       /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial:       01987C777134C9B5EDE846F5DB6FC5F98B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number:          1091
Signing time:             Tue 05 Aug 2025 23:00:59 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:59 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:59 +0000
Files and hashes:         1: 9BZlV5u49Gak3QK5oEuLPOBSnn0.roa (hash: FmzCgS4aXNRr8JerLZUsfQlHdIEA6EKm/rMgvtNymy8=)
                          2: B6wSZJvSGeybR7CPqtyVhXyylu0.roa (hash: JHvST/m8T4zGrW1YqRbxakpRITmsR241Cez8p9x2uaE=)
                          3: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: xVsaCiXEfcROxnnmdR3F75CfH+lzu93qnmfnac9Am3k=)
                          4: HoNzXhT8lx7vw7JlMXDLD2qJC4o.roa (hash: cNxTbsYhGJbBaA5KX6zTYu/tMB/8NFnmb2pRJ5AhFSg=)
                          5: ao-pH_2txkXRm36Fqqb0zfVnxeQ.roa (hash: PbN0VPyFR+E4wVcHf4vZ5OY6UiGEFVo+Jh+vf+hGjQM=)
                          6: mEa7ci9GxscmRsk-oNcnX_tH1Ws.roa (hash: ooLE+dfj0M2cSMZSDMJWC5DsnnWyEmz/3Hgg0yiBDWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:71:34:c9:b5:ed:e8:46:f5:db:6f:c5:f9:8b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
        Validity
            Not Before: Aug  5 23:00:59 2025 GMT
            Not After : Aug  6 23:00:59 2025 GMT
        Subject: CN=02725a68c3014b3f5b078c5d5033b10dabe72a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:0e:c6:49:eb:ab:4b:2b:52:96:3f:b8:81:
                    d4:6b:d4:48:54:0a:a0:49:e2:0f:99:11:37:24:c8:
                    1a:83:2a:b8:cb:7a:06:81:6f:b6:38:3a:01:dd:9e:
                    bc:b9:6f:33:69:73:2a:e7:1a:e0:c6:87:61:0a:1e:
                    92:23:3a:4e:98:27:71:e1:98:10:19:80:29:25:85:
                    3b:f3:f7:7d:19:59:a1:31:7d:be:f7:bd:63:9c:ce:
                    5f:f5:96:8f:58:8e:40:dc:7d:66:9e:fc:d1:1e:3b:
                    7c:80:4d:2f:f0:e7:c7:81:7c:f2:c8:29:c5:1a:97:
                    77:e6:1a:40:1e:0d:e5:6b:61:24:ed:e5:44:ab:06:
                    7e:27:5c:67:05:00:80:60:81:15:fd:30:a9:84:ad:
                    fa:a9:0b:1a:fb:9c:6f:dc:e5:65:68:27:d3:3a:4c:
                    e5:63:7c:d1:d9:e5:05:01:d7:26:05:2d:45:11:6a:
                    72:8a:59:89:37:fb:6c:3c:f9:59:c9:0e:3a:33:f2:
                    16:c3:ef:16:4b:aa:25:ce:dd:ad:f8:0d:ad:a8:45:
                    f9:86:6b:b0:65:fd:a0:a3:83:d8:a0:e2:fc:8c:ba:
                    74:9d:57:bf:92:8b:df:a0:4c:3d:c4:ce:82:05:88:
                    f6:0c:cc:da:7f:d3:f0:c9:70:0f:d3:72:f6:c6:4b:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:72:5A:68:C3:01:4B:3F:5B:07:8C:5D:50:33:B1:0D:AB:E7:2A:5A
            X509v3 Authority Key Identifier:
                keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:66:15:02:2c:7c:e0:52:08:3c:2a:cd:a3:07:a8:3d:e4:
         73:39:75:5d:2d:28:82:99:20:c6:65:77:41:cf:f7:63:7f:55:
         a0:b5:d1:95:63:86:e4:33:7d:ef:2d:bd:37:3f:d5:96:f3:14:
         b5:40:91:ea:c4:da:fa:aa:e4:2f:9e:1b:20:dd:1c:6d:36:0c:
         ae:05:6b:2b:d8:24:f0:0c:1f:50:d2:7b:3c:a9:42:00:f5:e2:
         b2:14:ae:8c:6d:ca:b0:ce:d0:a6:02:36:23:09:b4:fd:85:7e:
         97:74:4d:cc:38:45:60:83:21:65:93:52:72:3f:b6:e3:3c:ef:
         47:7d:52:dc:64:8f:c7:42:6c:72:21:7e:be:f9:f7:6b:70:0e:
         d1:75:f2:b2:e3:6f:99:ad:81:0e:e8:91:75:e5:f9:0d:c1:45:
         b0:49:2d:eb:bb:ef:7c:47:62:33:1b:44:33:10:a5:44:72:af:
         13:01:e2:82:b6:82:14:4e:ec:cb:07:a2:27:c5:ae:d3:7c:aa:
         12:23:2f:52:41:d2:da:eb:ac:db:c2:04:07:dc:e0:fe:a8:76:
         44:da:05:47:65:ef:f5:94:68:32:15:0a:ec:9c:b1:96:74:b4:
         88:0e:1f:bf:5f:21:b5:e6:b9:0a:53:e6:be:d9:1c:77:bb:52:
         1b:50:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:12:42 2025 by rpki-client