Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
File:                     m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json)
Hash identifier:          HRha0dIJh3qF8YQ3ENzBxwD/02QYvSbR4LQ7knL6dZE=
Subject key identifier:   43:6E:82:CB:52:E2:2A:67:8F:97:F8:A1:AE:79:A0:52:FD:0E:0C:63
Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF
Certificate issuer:       /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
Certificate serial:       019848F76EEFAD3152C5610A3F7276A35582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
Manifest number:          91
Signing time:             Sat 26 Jul 2025 23:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:31 +0000
Files and hashes:         1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=)
                          2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: /x19fJphKpS1Y+9b3UEGajvBTfNH5Ca+/x/wRWHQ1Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:6e:ef:ad:31:52:c5:61:0a:3f:72:76:a3:55:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af
        Validity
            Not Before: Jul 26 23:00:31 2025 GMT
            Not After : Jul 27 23:00:31 2025 GMT
        Subject: CN=436e82cb52e22a678f97f8a1ae79a052fd0e0c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:bc:53:d1:59:22:20:d0:f2:6b:30:3a:cc:
                    a2:20:52:28:57:19:c3:e9:e9:31:b6:25:e5:ff:c0:
                    bf:ac:34:a6:82:15:17:9a:6d:5a:8c:91:4e:39:80:
                    a8:b5:6f:79:b4:e4:63:aa:88:27:94:58:fa:a6:0f:
                    15:d3:54:68:34:9d:a6:9f:7e:2c:32:8d:51:11:ce:
                    cd:db:f3:f0:b6:cd:c4:fc:fd:37:48:6a:57:41:49:
                    2e:ea:25:2e:ac:9c:7f:97:2f:24:9f:66:e6:db:31:
                    96:61:48:ee:bb:fb:3b:12:42:f8:c7:ef:26:b7:c1:
                    ed:6e:e3:6d:94:0b:66:8b:ce:d2:53:fc:af:a4:dc:
                    2b:37:7f:85:ae:24:fc:62:51:40:85:50:b6:77:ab:
                    da:b6:06:94:17:70:79:2c:39:cb:24:cb:92:d0:62:
                    d3:c0:8a:47:d3:26:f7:4a:ec:d2:45:fc:b7:42:f4:
                    c6:82:f8:62:05:b2:9f:85:7e:e8:8d:a7:fe:3d:b6:
                    84:6a:75:a5:51:20:d7:28:26:8d:ca:75:35:11:cd:
                    42:cf:1c:a4:4f:71:68:72:98:45:ae:57:f2:ed:56:
                    0c:bd:da:7f:8d:96:0a:c8:01:30:06:87:fa:f7:25:
                    c1:10:c5:67:bc:bb:c5:48:e3:58:13:2f:c3:df:fb:
                    36:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6E:82:CB:52:E2:2A:67:8F:97:F8:A1:AE:79:A0:52:FD:0E:0C:63
            X509v3 Authority Key Identifier:
                keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3d:2b:cf:de:45:aa:8f:4f:f2:6c:80:de:5e:45:7e:46:26:
         55:1a:d5:32:0f:cc:7a:9a:6f:1c:7f:33:b8:cb:27:2b:68:62:
         5d:11:e1:4d:3f:11:98:99:79:04:06:8c:5d:59:ab:d1:0c:9f:
         a5:30:b5:e1:b2:51:31:44:f4:b4:dd:88:bf:8b:83:52:e0:5c:
         32:8b:79:c2:14:83:c5:a6:d6:28:4b:e1:81:3b:ad:c4:90:5e:
         f7:54:7c:51:49:4c:62:6a:7c:cf:3a:42:90:4f:72:e4:fa:cd:
         cf:70:20:89:6b:d2:03:67:9a:6e:14:cc:da:0c:9a:33:d8:c1:
         da:57:18:23:ba:33:17:23:78:0e:e3:5e:5e:ce:42:a3:ab:54:
         76:3f:1d:9d:26:7e:02:a8:b1:8e:40:f2:13:ea:ae:e3:e6:f2:
         95:bd:e4:90:ab:6e:99:9d:cd:a6:96:78:94:c0:db:04:0e:0c:
         f7:a4:e3:bd:f2:9f:99:a9:db:91:57:b0:b0:e6:74:d0:ac:1c:
         fc:c0:a2:05:a4:b6:ee:84:55:94:7a:90:33:db:a9:dd:45:b5:
         0a:e9:51:a0:50:f9:61:cc:23:28:b3:4a:69:d9:67:4e:a6:ac:
         6e:df:68:44:e6:f5:63:e9:3f:01:d9:0e:e2:75:45:97:3a:a5:
         24:11:8e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:10:25 2025 by rpki-client