Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File:                     9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier:          7uRPJw6RpfB6f7PYARgJONwqaPj11krKjqdD3vbKoFg=
Subject key identifier:   C6:37:1D:9F:CC:04:CE:F4:83:9B:B7:CC:6B:C7:55:E5:17:B9:BC:69
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer:       /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial:       019849D34DA0BDE0185F87A5F17E0DD20F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number:          0854
Signing time:             Sun 27 Jul 2025 03:00:41 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:41 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:41 +0000
Files and hashes:         1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
                          2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: XZ/NPDTVbQ31uAZSdMQLrq9w7p0CNdGgMaHK++iYRJI=)
                          3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:4d:a0:bd:e0:18:5f:87:a5:f1:7e:0d:d2:0f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
        Validity
            Not Before: Jul 27 03:00:41 2025 GMT
            Not After : Jul 28 03:00:41 2025 GMT
        Subject: CN=c6371d9fcc04cef4839bb7cc6bc755e517b9bc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:99:4b:59:fd:f8:92:d2:c9:b0:e5:44:39:
                    c6:fd:33:b1:cc:d6:05:c0:14:c2:85:6f:e3:a8:73:
                    36:6a:2a:02:ae:6f:9c:ad:52:d1:32:54:44:d8:e8:
                    3f:df:e5:2a:db:26:ba:af:1f:1a:29:f2:66:3b:23:
                    da:41:ef:77:c7:e6:c8:1f:df:2d:de:f2:b1:1d:81:
                    04:b6:ac:73:8a:d2:6f:ee:a0:e8:a1:e0:25:98:9e:
                    4f:83:e5:c9:ba:19:af:8c:b9:3d:bb:8c:0b:28:82:
                    17:e2:7c:7c:e7:1d:08:29:d8:4d:6f:ab:a7:51:73:
                    f7:c8:36:20:cc:3f:92:40:1d:9a:a1:a0:2b:7a:ae:
                    fa:f3:aa:09:1c:34:a8:f8:ba:3f:1f:0c:f2:36:7f:
                    9b:af:1a:54:c2:e1:45:8b:15:01:ef:ba:72:0a:f4:
                    ec:8f:ba:0b:98:d1:67:81:91:1f:77:15:d7:4f:90:
                    fe:ae:0b:ed:87:29:47:6c:e6:86:51:b9:22:f6:a1:
                    81:b4:97:a3:a5:9d:bf:1e:27:a0:d0:0f:c6:ff:0c:
                    63:94:f8:82:cd:97:1e:9c:fe:18:26:aa:15:29:f0:
                    30:a3:61:3d:fa:bf:bb:e1:0e:36:08:be:c4:18:86:
                    a6:6a:7a:fa:5e:15:af:68:17:5e:63:2d:a4:4a:b5:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:37:1D:9F:CC:04:CE:F4:83:9B:B7:CC:6B:C7:55:E5:17:B9:BC:69
            X509v3 Authority Key Identifier:
                keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:9b:71:78:e8:a5:93:6c:78:1d:c9:5f:40:43:6b:9c:68:
         5d:fc:e0:89:cf:33:b6:28:ab:f4:42:b0:59:73:9d:02:20:c7:
         53:68:59:7a:cc:6d:24:26:bd:ec:4b:90:70:ba:6e:38:02:4d:
         10:50:07:14:b0:75:84:50:59:e0:57:54:bd:20:36:b5:54:4f:
         27:03:43:17:32:2c:f3:27:9d:ac:b9:72:da:58:11:c7:6e:8b:
         d4:b3:4f:2b:9f:a9:12:0d:0b:4e:e4:58:a7:3f:81:c3:8b:7a:
         ff:86:2c:ab:38:fb:95:1b:91:1f:38:78:ad:ef:dd:3f:38:e2:
         ed:0e:f8:ec:07:91:01:bb:9c:6c:91:ce:92:ac:e3:e9:b0:b0:
         8a:fe:6b:76:63:58:c1:79:55:42:57:6e:10:9c:35:9d:b6:2a:
         ea:11:a0:76:13:7d:e0:d1:be:b8:36:18:59:11:cd:e1:d3:6b:
         10:8d:a5:b8:36:06:1b:8d:83:db:01:69:23:dd:13:5e:3a:2a:
         d6:3d:89:46:e4:4e:5b:71:f3:74:5d:3b:d5:ff:e0:56:3a:c3:
         c7:67:78:bf:39:01:f0:46:a3:d1:a4:04:42:43:6e:1c:d6:b0:
         d9:27:cb:77:c3:19:a8:d1:b3:a7:56:b2:ec:a2:09:75:ce:5f:
         44:5f:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:51:22 2025 by rpki-client