Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File:                     nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier:          w8/Xpp7T9en4mAVjzTLDz1eVG3ABl+zSzUW0XsyH0Bo=
Subject key identifier:   54:D8:05:14:C2:D0:21:E9:20:32:F6:4B:D2:FB:59:01:DC:EE:1A:E0
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer:       /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial:       019875627449CBDF90BE92FF7F50FBD6F6B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number:          13F2
Signing time:             Mon 04 Aug 2025 14:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:43 +0000
Files and hashes:         1: EovVJfg3z9mSoPRLqdQrySDONz0.roa (hash: oZlmneGtk7nFcNF1eQjRZHNEgK8ZEfrOqUTxDl2I1wI=)
                          2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: kcDC1l+92/Uzx7X5FTz7M1YdoHqeaR3EzhPNnVy8e60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:74:49:cb:df:90:be:92:ff:7f:50:fb:d6:f6:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
        Validity
            Not Before: Aug  4 14:00:43 2025 GMT
            Not After : Aug  5 14:00:43 2025 GMT
        Subject: CN=54d80514c2d021e92032f64bd2fb5901dcee1ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:3e:8a:7a:20:15:bc:c5:99:4f:ee:33:5a:
                    27:ee:1e:92:57:1e:be:f5:ef:08:5e:ba:3b:63:bd:
                    40:0f:72:75:3f:88:a4:f6:76:b9:8e:d1:ec:7e:d8:
                    d3:9f:f1:39:22:a4:aa:d0:18:d7:70:7c:fa:a1:03:
                    44:97:e9:ee:ec:9b:47:db:3f:53:32:05:2d:26:82:
                    eb:13:65:8d:8f:d2:d0:45:81:fd:8c:44:a9:d6:c2:
                    4a:c3:27:d0:6a:42:a2:d4:80:82:00:83:a4:1c:b5:
                    0d:39:b8:36:9c:fa:ea:86:72:56:a0:b1:c3:6f:e0:
                    dd:da:41:1f:1e:4d:93:90:de:39:bf:38:e3:45:e1:
                    76:02:58:2c:54:f5:27:1d:89:49:a0:e1:b3:53:52:
                    80:45:65:9c:9f:7a:75:80:a2:fd:5d:53:32:b3:7d:
                    6e:7f:dd:81:f7:f3:b6:3d:90:a0:07:c7:94:55:59:
                    62:23:ca:9f:86:78:db:a8:12:e7:b6:2c:85:c4:e9:
                    5a:4b:19:77:e6:99:ed:f9:2f:c1:80:2f:a9:4d:73:
                    2c:8e:16:38:73:62:95:58:a7:6d:da:37:97:de:8b:
                    f2:cd:06:f5:f9:72:78:f9:5e:7c:cf:88:12:f6:2b:
                    8c:f9:70:51:04:ea:79:73:71:a8:aa:76:2b:f6:cd:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:D8:05:14:C2:D0:21:E9:20:32:F6:4B:D2:FB:59:01:DC:EE:1A:E0
            X509v3 Authority Key Identifier:
                keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:dc:e5:83:c3:e8:89:49:a5:99:67:5f:6e:be:bf:09:b9:0c:
         de:f1:d7:7e:fc:40:60:91:ce:42:32:e5:94:87:4a:aa:25:70:
         8e:b3:6c:87:76:91:4a:f2:9f:ff:3a:6a:2c:48:07:6d:31:f8:
         91:e9:59:6d:a8:bc:48:33:f3:b6:ea:e1:24:84:66:62:8e:de:
         bf:c5:79:46:3f:ec:a5:c6:b0:8b:7b:fd:92:44:d7:33:49:be:
         56:4b:2d:24:17:5a:fd:0d:cf:6a:52:51:45:cd:e8:b4:e3:4c:
         da:32:b1:2b:93:25:6a:f1:a3:9d:33:82:25:cd:e3:60:df:19:
         db:30:bb:e2:1c:3a:4f:cc:94:2b:5e:61:9b:2e:f3:d3:19:8a:
         2c:42:3f:2a:41:13:41:27:d4:a9:6a:68:92:7a:73:52:1a:9e:
         f9:46:97:6b:1a:2d:31:6f:6c:53:54:9f:50:74:aa:7a:2e:19:
         76:63:25:54:59:03:37:d1:88:9a:52:d7:69:4a:f3:07:2b:78:
         fd:12:ae:b1:b9:f7:03:c5:6c:58:f6:69:70:be:f4:a7:de:a7:
         ce:38:8b:33:90:0f:9c:ef:5e:e0:01:c3:67:6d:c9:d7:2d:6c:
         65:3f:cc:39:c6:d9:7e:30:0d:8a:6e:06:b2:d0:11:37:6d:6d:
         20:f4:ce:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:09:57 2025 by rpki-client