Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File:                     gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier:          BmPeJKyke5KxWBvz1YdY8plPHyuRCGiOe9JKImKiENE=
Subject key identifier:   11:67:5F:BC:B0:E3:37:CC:09:97:E6:4E:73:E3:FB:24:A8:0B:02:13
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer:       /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial:       0198808B52AB96AB2CCE0AE0B3DB1A39417A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number:          09F0
Signing time:             Wed 06 Aug 2025 18:01:10 +0000
Manifest this update:     Wed 06 Aug 2025 18:01:10 +0000
Manifest next update:     Thu 07 Aug 2025 18:01:10 +0000
Files and hashes:         1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: cbIBX7CN4X7CKy9KvSZxdP9BsT3hTPOalUjV7M8OvVU=)
                          2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:8b:52:ab:96:ab:2c:ce:0a:e0:b3:db:1a:39:41:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
        Validity
            Not Before: Aug  6 18:01:10 2025 GMT
            Not After : Aug  7 18:01:10 2025 GMT
        Subject: CN=11675fbcb0e337cc0997e64e73e3fb24a80b0213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:f4:a9:12:d2:75:e3:f5:3d:c4:81:d6:dd:
                    d4:44:40:ad:d7:40:14:50:6e:dd:51:1a:b7:9b:07:
                    2c:c1:92:7b:05:75:ed:e9:fe:51:51:0a:87:7b:b8:
                    62:13:a8:e2:e1:22:ca:0c:b3:42:37:e2:3e:a3:c3:
                    02:36:d9:62:b0:05:06:f7:fa:d1:00:93:4a:89:eb:
                    a3:64:51:8d:00:dd:fb:6b:39:5f:a9:b1:00:f8:12:
                    60:f8:a7:aa:3e:f2:f9:d0:0a:b3:b4:79:4b:7c:b9:
                    d0:b9:0d:fe:e6:f1:33:b5:84:65:32:8c:1e:e9:c9:
                    b1:1a:63:82:b4:9f:ee:84:77:33:54:2a:e7:e8:66:
                    48:b2:b1:30:28:9b:0c:49:b3:eb:c2:4c:52:07:06:
                    99:e2:c7:8d:b0:63:b3:5b:62:00:84:7a:56:b8:f8:
                    f3:56:8b:5e:de:dc:1a:09:1a:20:55:25:a8:aa:4c:
                    ce:3d:0a:84:70:f9:ce:34:f0:3d:63:35:e3:39:aa:
                    bd:c5:fc:0e:76:05:4d:c5:2c:77:73:34:9a:03:08:
                    c7:fd:62:4b:a7:bc:70:f7:ce:f9:22:9e:f3:c1:99:
                    a1:c9:72:2f:19:56:b5:a5:97:05:91:da:0a:d6:d1:
                    b9:70:58:d1:b3:ee:82:28:bc:43:df:87:c1:4e:7c:
                    8f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:67:5F:BC:B0:E3:37:CC:09:97:E6:4E:73:E3:FB:24:A8:0B:02:13
            X509v3 Authority Key Identifier:
                keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ab:3e:cd:fc:73:75:39:5e:1e:68:06:d8:a3:1e:39:68:e0:
         af:0e:46:19:6d:29:11:b6:cb:3e:6d:96:6f:83:58:3e:97:50:
         bd:88:71:10:62:99:e2:47:62:b6:26:f2:58:57:35:0f:ca:a3:
         45:53:b8:f1:18:05:21:dd:0e:b8:f3:61:2a:e1:56:86:03:af:
         c4:58:f2:fc:b6:ad:96:cd:27:4b:a8:25:a4:ec:07:3b:a2:33:
         f1:36:1a:bf:51:cb:14:c8:0e:57:21:8f:3a:b9:8d:5a:60:9b:
         3e:1d:2c:61:ee:20:28:66:16:f9:96:50:c6:10:4f:00:c4:f7:
         db:a3:cb:24:f7:f7:b6:5b:82:ac:17:33:b8:ae:7d:c7:c6:72:
         c7:f3:70:3c:48:b5:85:84:d6:5b:a8:b7:f6:bc:28:2b:27:62:
         65:b9:f8:8b:e3:8f:3d:6d:d8:d7:a3:a7:12:29:62:8e:da:d3:
         ec:d4:60:c9:cf:1b:66:c5:43:bd:d9:bb:0f:8f:6d:5b:63:c2:
         d8:b7:42:0f:bf:6e:89:68:d5:18:b1:99:2f:78:ae:71:50:cb:
         85:6d:cc:aa:05:f1:31:f8:09:f0:a2:2b:90:22:3f:b1:e1:73:
         1b:7e:39:61:08:ef:b9:bb:6a:92:6a:e1:d8:4f:38:2d:43:3b:
         6b:7b:f4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:30:21 2025 by rpki-client