Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
File:                     m1WmQjec5XjznsDRBgPc-oP2404.mft (raw, json)
Hash identifier:          6BJpXJV1q5ZShHJwCXeqWXGyvaRShA0zxA7qjnj8pSs=
Subject key identifier:   04:FF:3F:52:93:30:99:9A:4F:B3:7C:2F:CE:09:71:BD:F8:E1:C5:BD
Authority key identifier: 9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E
Certificate issuer:       /CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
Certificate serial:       0198567C702BDD9325C40758A7C43C77D285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
Manifest number:          11E9
Signing time:             Tue 29 Jul 2025 14:00:52 +0000
Manifest this update:     Tue 29 Jul 2025 14:00:52 +0000
Manifest next update:     Wed 30 Jul 2025 14:00:52 +0000
Files and hashes:         1: m1WmQjec5XjznsDRBgPc-oP2404.crl (hash: yiLDp4oYPIF0ycLTsB2Vt1S9p4535ZfXqTk506HQCHc=)
                          2: rKHwl3Cc8x5jyJG1zE_2bLEuudU.roa (hash: R8KRd6bkmQYX+rv1TKmwJFyYawaIUtq89ucsqsJ+aXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:56:7c:70:2b:dd:93:25:c4:07:58:a7:c4:3c:77:d2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55a642379ce578f39ec0d10603dcfa83f6e34e
        Validity
            Not Before: Jul 29 14:00:52 2025 GMT
            Not After : Jul 30 14:00:52 2025 GMT
        Subject: CN=04ff3f529330999a4fb37c2fce0971bdf8e1c5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:6f:6a:1f:a6:8a:8b:63:40:94:5f:48:dd:
                    09:bc:88:7e:a1:3f:24:82:3f:84:0c:aa:ae:75:5a:
                    65:4c:20:a3:a4:4e:f5:d8:35:92:6a:d6:20:cb:f6:
                    cd:4a:0c:13:50:40:be:02:ce:b3:eb:fb:8f:e7:39:
                    3f:5f:ae:71:11:8a:31:19:3c:f8:30:96:51:75:dd:
                    53:f0:a2:15:a6:4d:18:a4:1f:49:e3:55:92:15:e0:
                    cd:86:80:81:d7:7b:e0:40:78:1c:bc:38:18:a6:de:
                    04:66:e2:11:db:db:17:91:b0:13:2e:17:1f:ed:00:
                    59:6e:e2:9c:0c:44:79:fc:dd:39:5b:2c:ee:ae:9b:
                    ae:9d:59:1c:65:62:58:2e:0c:ad:19:c5:1f:cb:8c:
                    cb:f5:41:91:ae:56:8a:db:66:63:f2:62:0d:97:e5:
                    2c:1d:c3:a4:a4:af:f7:bc:48:4d:2f:78:84:65:2b:
                    86:2a:57:28:64:06:d1:f0:01:b0:31:82:cf:88:f5:
                    63:6b:34:51:28:ad:28:4c:b3:f0:1b:ae:bc:89:79:
                    8c:bd:ff:a7:97:bb:0a:44:86:1e:ef:0c:cb:26:22:
                    78:77:fa:7b:35:1b:11:95:1a:ce:20:ed:4e:ce:ef:
                    3c:dd:86:ad:4b:dd:28:2a:04:c6:fa:35:74:a7:a4:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FF:3F:52:93:30:99:9A:4F:B3:7C:2F:CE:09:71:BD:F8:E1:C5:BD
            X509v3 Authority Key Identifier:
                keyid:9B:55:A6:42:37:9C:E5:78:F3:9E:C0:D1:06:03:DC:FA:83:F6:E3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1WmQjec5XjznsDRBgPc-oP2404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/be92b5-5717-4046-ac1c-8222e251a91b/1/m1WmQjec5XjznsDRBgPc-oP2404.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:57:f3:5e:a4:04:79:11:90:df:12:86:73:3d:03:e7:fe:14:
         66:c4:bb:c3:de:ef:1e:60:6a:da:b8:51:18:d9:bb:f3:1d:17:
         9e:a1:ce:26:93:39:cc:3a:2f:b4:2f:67:17:28:ea:82:40:0d:
         e2:14:62:2b:74:86:5f:8e:eb:9c:cb:93:88:1c:8e:e2:fe:73:
         eb:58:3c:52:4c:67:c3:c3:15:ba:6e:f9:79:c3:36:ac:71:8b:
         e0:a7:42:49:bd:5b:99:18:a6:93:ef:f1:5e:44:04:9a:42:aa:
         8b:d2:95:56:f8:f8:ba:7a:46:b4:5e:ad:00:a2:87:f1:eb:4e:
         cc:0f:25:52:16:bb:39:95:0b:90:ee:96:54:a5:af:bd:0b:5b:
         8f:85:63:60:08:55:a1:36:b0:98:35:93:bd:63:4f:2d:a5:a3:
         19:13:ff:1a:5c:2a:17:e0:61:49:40:6c:c2:2f:df:a7:0a:46:
         91:e6:87:1c:b4:52:e8:50:94:cd:b5:e1:ef:ce:9a:ba:f6:f7:
         7e:0b:01:b3:bd:30:74:e2:0c:8f:e1:5e:fb:ec:c4:70:28:25:
         e5:49:db:11:54:29:25:f0:8b:30:12:11:99:03:39:b1:38:3c:
         eb:d3:0f:f4:3c:a9:d8:68:95:f1:8f:14:ea:d7:43:26:24:3d:
         16:ec:f9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:55:33 2025 by rpki-client