Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File:                     pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier:          Qv5NdhOErW2XF0K3e9XmfppkWfh7cQ4phwLZwx6D+4w=
Subject key identifier:   37:93:3C:FD:F8:CC:52:95:99:B4:08:CB:FB:86:B0:1B:79:EC:8B:11
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer:       /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial:       019853444D294B29FDA4C88EA6EABB134F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number:          0C9B
Signing time:             Mon 28 Jul 2025 23:00:41 +0000
Manifest this update:     Mon 28 Jul 2025 23:00:41 +0000
Manifest next update:     Tue 29 Jul 2025 23:00:41 +0000
Files and hashes:         1: 2Qr4P6TtNG8XIKkXI_c0cLDbaUc.roa (hash: MYKMpqtjE4XkNANAGzzsCBedfNhF2YMsBN5+jKHyoYI=)
                          2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: Tw47bcBLhKmr466qYtbuNdsERG7X7fl1wDDY6YcimNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:53:44:4d:29:4b:29:fd:a4:c8:8e:a6:ea:bb:13:4f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
        Validity
            Not Before: Jul 28 23:00:41 2025 GMT
            Not After : Jul 29 23:00:41 2025 GMT
        Subject: CN=37933cfdf8cc529599b408cbfb86b01b79ec8b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ee:39:19:7f:c5:4e:e1:5f:3f:c2:83:7a:16:
                    15:f5:3a:86:b4:2c:10:24:43:f2:87:3e:ef:47:d4:
                    b6:6b:63:3a:2d:e6:b9:bb:93:16:df:f1:f5:65:fc:
                    b6:50:c1:a3:b7:25:2b:2b:17:8a:ff:20:99:e3:dd:
                    44:48:63:16:0c:93:56:4c:6c:47:ed:f9:46:a5:12:
                    b1:e4:e2:3d:f2:38:cf:28:0d:12:58:c9:14:82:45:
                    4b:b3:c5:a2:e4:28:c2:1d:5b:c3:83:42:99:80:96:
                    02:74:42:bb:23:2d:c2:fa:3b:e0:37:93:6d:1a:04:
                    80:e6:62:c9:5f:8a:be:fe:dd:23:aa:6a:cd:06:d3:
                    3f:fa:f9:56:81:aa:d8:61:c6:da:98:91:e9:15:3e:
                    79:5c:4e:08:8e:ea:fd:9a:2f:2b:e9:c3:bc:94:89:
                    fb:08:94:06:69:07:36:1b:ed:34:9e:4c:c2:26:f1:
                    a4:03:86:ec:49:cc:4f:b4:c4:f8:f3:02:50:20:d1:
                    aa:04:27:23:d3:2b:92:dd:fa:5a:5d:75:4e:a7:87:
                    6f:8a:2e:1c:a5:9d:f1:4f:e4:7c:c0:c8:dc:ad:dc:
                    62:86:9e:47:8b:4b:43:a6:94:7f:06:6d:f7:6e:67:
                    a3:49:0e:fd:78:6d:d6:eb:9e:55:24:2f:c7:af:d0:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:3C:FD:F8:CC:52:95:99:B4:08:CB:FB:86:B0:1B:79:EC:8B:11
            X509v3 Authority Key Identifier:
                keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:b1:79:92:07:15:6d:20:fe:94:ba:c7:13:2a:2b:e2:87:
         78:e2:ae:ac:2c:ca:78:f1:a4:99:3c:d1:50:0f:6f:f5:7c:2e:
         a0:14:df:ec:a1:57:ca:04:82:17:a6:39:c2:fd:46:2d:2f:f7:
         c4:3d:59:c1:89:f2:4e:d0:5c:6a:b4:ee:d6:35:76:c3:be:f4:
         a0:2a:ce:1f:96:72:a0:c5:61:16:1c:32:9e:43:5c:c6:fc:7e:
         5a:f1:0d:59:f1:0d:3d:2d:1b:4e:a6:1a:78:50:4c:ed:b9:df:
         14:a8:4f:6f:71:02:1e:93:4b:53:47:7a:fb:6b:c4:32:5a:43:
         86:30:9c:04:c2:2f:1e:a5:10:ec:38:86:ff:71:3f:de:0b:ed:
         2c:9d:d4:c5:42:f3:92:71:6e:1e:dc:a0:93:68:e1:b8:7d:d0:
         fc:ef:af:1b:ed:87:4f:05:1f:9a:01:8c:da:bd:b7:27:51:ca:
         c1:20:26:c2:0c:4a:40:8b:d9:54:c6:47:eb:ca:bf:2d:13:b0:
         5f:db:5b:bc:88:6a:0d:1c:86:2e:98:30:ed:f2:ea:68:8b:ba:
         7c:9f:e0:c2:e6:06:6e:ef:06:64:cd:93:74:92:7f:13:4a:12:
         f6:ea:de:fb:4c:2a:1b:01:96:46:a7:b5:0f:6f:5b:b2:9a:9a:
         97:be:f8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:38:56 2025 by rpki-client