Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
File:                     1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft (raw, json)
Hash identifier:          Jq0k4yAUIUi3W1zEqcob1SD16t+OZ/86GRd2kixWaKQ=
Subject key identifier:   92:9B:41:B7:AF:3D:7B:AC:AA:60:B0:8F:A2:99:F4:F4:6D:3F:F8:11
Authority key identifier: FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA
Certificate issuer:       /CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
Certificate serial:       019843D0FC222B2D0291D14A6C09744720D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
Manifest number:          1603
Signing time:             Fri 25 Jul 2025 23:00:25 +0000
Manifest this update:     Fri 25 Jul 2025 23:00:25 +0000
Manifest next update:     Sat 26 Jul 2025 23:00:25 +0000
Files and hashes:         1: 1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl (hash: BDnNvBPfF/U6sHG2g3sNAb3klDd/bqxpCyzbUeuZDyo=)
                          2: b1EekpPHczR9SbF16iWNQ3damig.roa (hash: Fw8tFU/rOTZrNv9R1o3/Px5yWIdWmaPwzJuJsuMKmH0=)
                          3: eADzDJE6P-qH0r5TYUNn_ncYKzA.roa (hash: PxBgbfMtKG6Jth9+kbRfrbslcA+mMm5JhYaaugK0nGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:50:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:43:d0:fc:22:2b:2d:02:91:d1:4a:6c:09:74:47:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd83efdd9996f8c75e7f4114e466ebf836968ea
        Validity
            Not Before: Jul 25 23:00:25 2025 GMT
            Not After : Jul 26 23:00:25 2025 GMT
        Subject: CN=929b41b7af3d7bacaa60b08fa299f4f46d3ff811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ab:06:88:75:46:4a:1d:be:11:bf:73:b0:9d:
                    35:ae:3f:3b:f2:6a:97:8a:e0:1e:2a:71:b3:b3:12:
                    4d:1c:f0:cf:f1:95:50:59:1f:98:08:2f:1e:a2:18:
                    85:3e:13:c0:a8:6a:99:39:f0:83:4b:25:45:3c:a8:
                    28:ba:c3:74:90:85:32:aa:16:f9:ec:30:13:23:9c:
                    2e:52:1a:45:b2:1c:b2:11:ce:91:f2:6e:62:51:15:
                    14:28:de:36:5c:6d:f3:9f:af:44:20:81:be:b0:ea:
                    4a:a8:d5:6e:32:dc:4f:cf:f8:62:ec:11:1b:10:42:
                    e8:0f:b2:8c:8f:f1:2f:ae:fe:76:78:bb:9c:4c:9c:
                    01:c9:d4:a7:f6:1c:f5:cc:b0:d5:95:64:0a:aa:db:
                    5f:7d:a8:60:5b:33:0e:48:fb:40:33:90:2e:7f:be:
                    c8:d1:1b:90:31:83:1e:6d:74:78:23:ed:da:e2:68:
                    4e:6b:14:56:67:05:3c:8e:00:3c:74:a1:47:cd:ae:
                    d3:03:b3:dc:63:df:e3:38:ba:da:1e:e1:e0:28:f8:
                    2a:ab:d7:9e:20:fd:70:75:ef:2a:64:9e:e3:0e:2c:
                    4a:3c:fb:35:b8:df:60:ab:3b:1d:23:df:61:cb:07:
                    de:d3:1a:85:1a:bc:b7:f1:56:6b:31:10:05:df:5f:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9B:41:B7:AF:3D:7B:AC:AA:60:B0:8F:A2:99:F4:F4:6D:3F:F8:11
            X509v3 Authority Key Identifier:
                keyid:FB:D8:3E:FD:D9:99:6F:8C:75:E7:F4:11:4E:46:6E:BF:83:69:68:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9g-_dmZb4x15_QRTkZuv4NpaOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/aa06a5-7ef6-4bc9-b0a0-2fa839017d75/1/1-9g-_dmZb4x15_QRTkZuv4NpaOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:31:f2:3b:b2:87:54:5c:02:ca:12:a1:c5:ae:de:aa:12:25:
         09:a3:aa:10:24:98:1e:f4:c0:84:ee:5b:a1:8f:b5:7f:28:cf:
         eb:bc:7e:c4:b2:1f:33:e3:ed:08:03:31:ff:31:d7:23:71:c3:
         1b:51:6a:16:d6:a9:76:3d:8b:17:ac:07:74:fa:25:80:5f:ea:
         d2:ec:21:6a:a7:28:d4:f2:3d:6d:f1:01:07:7e:0a:d8:e3:33:
         5d:73:90:fd:96:16:79:33:b6:0a:d2:41:8c:5a:c2:35:c7:61:
         27:ac:16:10:db:af:a6:db:68:46:fc:15:50:f8:6f:40:3b:ec:
         8b:5b:28:37:70:b3:64:d7:b8:91:c4:7c:ad:a6:53:de:8d:3f:
         6a:b8:a1:1c:13:d2:ae:e1:f6:9a:5f:f6:d3:f3:97:97:40:0c:
         15:03:e1:41:59:56:37:80:ba:cb:b0:ec:60:e7:63:2e:79:59:
         4e:5f:91:13:34:5b:6f:52:b6:92:a0:d4:8f:9d:89:54:71:0e:
         fb:11:14:b2:04:6c:26:2b:f3:87:15:b0:45:70:83:e5:27:b1:
         11:6f:1e:7b:6a:6d:11:8f:e9:91:bb:62:eb:d4:1a:d0:35:fa:
         98:dd:07:0c:9f:46:96:c2:9c:41:07:50:bc:9a:7a:1c:28:1b:
         64:c0:36:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 06:35:12 2025 by rpki-client