Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
File:                     m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json)
Hash identifier:          31Q5/Tsw7spaozQx21hNraJBNHBj7ob0yfzqxmUv/fY=
Subject key identifier:   28:6A:E6:5B:52:43:30:78:82:E7:D0:40:D7:A6:F9:2B:23:93:96:AA
Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95
Certificate issuer:       /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
Certificate serial:       019847AD8F43E4E764BA13A79D01F00FDE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
Manifest number:          1601
Signing time:             Sat 26 Jul 2025 17:00:13 +0000
Manifest this update:     Sat 26 Jul 2025 17:00:13 +0000
Manifest next update:     Sun 27 Jul 2025 17:00:13 +0000
Files and hashes:         1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=)
                          2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: DlZiB/z2Mo+pxni6E/2hK2yymQqajBHkG9q8yR5qtCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:ad:8f:43:e4:e7:64:ba:13:a7:9d:01:f0:0f:de:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995
        Validity
            Not Before: Jul 26 17:00:13 2025 GMT
            Not After : Jul 27 17:00:13 2025 GMT
        Subject: CN=286ae65b5243307882e7d040d7a6f92b239396aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:31:7a:55:05:28:58:b8:90:9d:33:ab:60:98:
                    06:f5:0b:18:e7:c4:90:62:79:e0:55:52:60:30:d7:
                    0d:1f:cc:bd:28:05:ee:f4:0f:0c:32:69:6f:6b:f3:
                    9e:70:7a:e5:ad:a6:1d:db:0a:ae:b0:08:fe:c1:2f:
                    f1:b6:14:34:15:f5:6f:0a:1b:32:28:59:61:ad:b7:
                    12:20:dc:af:54:8e:ad:5a:54:cf:f5:e9:98:2c:b9:
                    d6:a9:c8:29:27:a1:b2:08:31:49:ca:d3:64:8e:3c:
                    ae:29:b8:e4:c8:57:9a:49:8a:11:f8:22:f5:1b:56:
                    58:58:8c:ac:76:7d:50:16:0d:d1:c9:eb:62:4f:32:
                    ff:70:3e:7b:cc:14:68:21:cf:73:81:66:04:18:30:
                    83:43:1b:32:82:85:f6:47:92:a3:fc:c8:63:15:fa:
                    2f:3b:35:65:9b:67:b4:d0:c0:21:cd:dc:c1:f4:48:
                    d9:1a:ea:36:d1:c5:47:e1:ec:03:3f:83:27:12:a9:
                    19:18:11:87:9a:1b:ae:9e:39:4c:63:66:58:73:e7:
                    67:1b:ff:f1:0a:1a:ae:3d:bc:00:81:a3:46:16:dd:
                    47:12:e1:75:7c:77:2e:cd:c9:dc:1b:91:77:da:6f:
                    48:2c:1c:a9:ce:47:02:bf:4e:4d:d6:3e:b3:c2:8a:
                    2b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:6A:E6:5B:52:43:30:78:82:E7:D0:40:D7:A6:F9:2B:23:93:96:AA
            X509v3 Authority Key Identifier:
                keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:a5:1c:2a:b2:87:6e:9b:61:45:f1:c3:2a:07:41:da:9a:
         b7:60:9d:ac:01:7b:2c:0c:ff:98:86:d1:19:24:d5:db:c4:39:
         04:c6:d6:18:4e:a7:fc:66:05:0e:94:d6:5e:25:a1:ee:15:8e:
         2b:68:3f:7e:b3:e4:45:03:78:f5:46:1e:0f:7c:18:45:49:aa:
         e0:48:f5:82:37:9f:72:75:8a:77:e4:c5:55:4b:95:15:ba:d5:
         fb:9d:fe:fb:2d:97:1b:b3:60:61:ce:94:ff:35:82:65:28:e6:
         75:a5:4e:e0:6c:52:df:6d:5d:3a:05:d9:f3:f9:6f:69:2d:07:
         d1:c2:47:0b:b3:2d:16:0b:a1:cc:43:bd:0c:d6:b7:02:c4:3e:
         5f:be:e3:a9:b9:33:1c:f3:b8:48:78:a6:91:12:67:69:73:32:
         f1:f2:ed:c9:47:72:a7:74:55:68:e5:41:78:49:b2:ab:1a:11:
         d0:23:32:95:39:9f:97:f8:46:f8:62:7c:03:97:f5:9d:cc:e6:
         d8:7c:ec:60:c1:43:f7:bc:40:6e:f4:08:1c:3d:8e:e1:4d:67:
         76:80:ef:65:3c:38:39:07:6d:b4:e0:6b:de:14:af:35:5b:20:
         ae:c8:04:b1:3a:07:ee:9f:f0:0e:73:ad:09:e9:6b:6c:21:fc:
         04:85:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:01:16 2025 by rpki-client