Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
File:                     v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json)
Hash identifier:          YsEZu2kgtA5yIThQhxeT1uz8fYtuu8TCyQn7D2HAe2A=
Subject key identifier:   E0:A8:F7:43:CD:19:19:2C:21:93:31:BC:7B:23:0F:19:79:85:20:FB
Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C
Certificate issuer:       /CN=bfd070b0c9add92972fefc566c112d93717c4d6c
Certificate serial:       01987E2EC1A54EC3BF9CF5087917A5520C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
Manifest number:          1621
Signing time:             Wed 06 Aug 2025 07:00:50 +0000
Manifest this update:     Wed 06 Aug 2025 07:00:50 +0000
Manifest next update:     Thu 07 Aug 2025 07:00:50 +0000
Files and hashes:         1: exRb-rHcA90oTXk_rLfDmE2va0Q.roa (hash: o03D8YYP7kHIc/dGF0EKjd2OHviH18SfZbezk98xob4=)
                          2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: OC67yhWDWRfWBfdFo9ZpjxhIx4jxDLMJFLmVavYF4a0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 07:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:2e:c1:a5:4e:c3:bf:9c:f5:08:79:17:a5:52:0c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c
        Validity
            Not Before: Aug  6 07:00:50 2025 GMT
            Not After : Aug  7 07:00:50 2025 GMT
        Subject: CN=e0a8f743cd19192c219331bc7b230f19798520fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2c:90:84:11:81:43:29:06:03:b4:55:ea:00:
                    16:30:95:d0:bd:3a:04:ac:9a:7d:13:34:2b:4d:8e:
                    71:81:75:0e:24:7f:ce:58:22:08:87:1e:ab:50:0e:
                    9d:8d:ef:06:e0:ea:54:c0:5c:02:59:25:7f:6e:db:
                    fb:30:ca:68:89:f5:69:31:44:ef:86:2d:e0:3c:48:
                    a8:22:22:0e:c3:0a:74:c4:08:2f:6e:0c:43:cd:d7:
                    31:c7:08:83:ca:ea:c9:97:33:e5:00:f0:40:b0:90:
                    a2:8c:5a:5a:69:c6:dd:18:dc:0e:2a:ba:33:d8:0d:
                    af:91:bb:18:cd:07:0d:35:72:0d:30:6f:67:5a:65:
                    c5:61:38:47:24:24:32:28:4f:f5:4f:06:37:22:e0:
                    13:b0:74:b6:7f:1e:c4:cf:b0:56:6f:dc:a1:2a:cb:
                    ba:36:28:8e:32:85:2a:19:63:a5:0d:5c:71:f2:6f:
                    0d:da:70:e0:63:88:18:e3:ce:b1:93:67:c5:e5:e9:
                    ac:0b:0e:32:fe:16:7a:90:7e:cd:27:73:f5:be:f3:
                    56:3f:3c:41:4a:2d:7d:0f:26:2d:e8:4f:1f:0f:75:
                    39:eb:df:44:b2:35:83:b3:1d:13:aa:b0:e2:ef:8d:
                    be:10:8b:0d:ca:ab:65:49:ed:16:12:34:a2:ad:83:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:A8:F7:43:CD:19:19:2C:21:93:31:BC:7B:23:0F:19:79:85:20:FB
            X509v3 Authority Key Identifier:
                keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:21:29:5e:6a:00:9e:70:ee:c1:8f:0b:36:d8:07:9b:9a:
         68:f8:16:7e:7b:75:a3:a4:6e:f1:cb:7a:59:1d:82:0d:c7:3f:
         a0:e0:7b:3b:cb:bf:6e:f5:7c:e3:8f:b4:92:d9:d4:42:dc:70:
         f5:cd:ff:45:59:81:93:e8:2e:cb:d4:1c:ac:61:f8:cf:ac:d2:
         d4:24:ad:1e:f1:ae:54:79:be:e8:47:4c:9b:83:98:5b:10:ea:
         29:08:c7:bb:c8:52:f6:97:3d:3f:4e:07:a7:fc:94:61:32:89:
         09:ea:29:c3:00:0a:3d:ff:82:36:51:4c:f6:5e:e4:1c:bb:b3:
         0e:d4:77:60:05:c4:97:ba:81:f8:ff:aa:a3:72:4b:d3:25:a3:
         7b:da:49:cd:c2:4d:31:1d:f0:e8:74:56:e8:b5:18:0c:ad:7d:
         87:c0:d8:28:23:8e:6f:21:23:df:6b:09:7e:1f:b0:27:35:9c:
         3c:23:fd:4c:e0:6b:e7:8e:32:da:d6:98:dc:9e:e3:4b:1f:d4:
         ef:73:07:f0:8a:4a:71:e4:aa:d6:b1:f3:91:bf:8f:61:79:be:
         78:cd:1e:e5:5f:f1:b3:b1:31:70:e4:6a:5e:63:20:11:9b:e4:
         22:1a:74:df:5f:cb:50:1e:26:5f:ba:7a:8e:4b:24:47:ad:72:
         02:bd:5c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:10 2025 by rpki-client