Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
File:                     loH8jHM3xqHSC4SADfhion5f29c.mft (raw, json)
Hash identifier:          QjKUpWmw2/9784dHXpd+bt31BNrhEzhq85tqqjyE8zM=
Subject key identifier:   6A:59:F4:D2:EE:22:18:C3:89:C1:46:60:F7:99:8C:4A:A1:85:1B:B6
Authority key identifier: 96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7
Certificate issuer:       /CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
Certificate serial:       0198398492DFE50A13FD2867C924F2F6ED3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
Manifest number:          9A
Signing time:             Wed 23 Jul 2025 23:00:46 +0000
Manifest this update:     Wed 23 Jul 2025 23:00:46 +0000
Manifest next update:     Thu 24 Jul 2025 23:00:46 +0000
Files and hashes:         1: F7JL5bHYyLaweW8pONIwm4V1Ta8.roa (hash: 9Al0+nQsmlduPmazSDY0bBkTJLPuHl1nJV+djdoKlfw=)
                          2: aOIjfYULj8ZZW-4gX-UQwdrDQ9U.roa (hash: 0raPVOn63vL6rgNpBZdFkEjdsenkXzmQ/PYsO0nF2sE=)
                          3: loH8jHM3xqHSC4SADfhion5f29c.crl (hash: QMW3hu+hWMubsvxj9yTSPR10LuqTct56AaRJelb1NXk=)
                          4: qxk1xepxwGG51OB8xsnLC_37Uaw.roa (hash: ypZE1fVxTf8ts+4DLxa1x+J1+KV7fqtGzn+ax6Dq94A=)
                          5: w1BzHYlYCb3EG4ztspZKX_15RAY.roa (hash: ASsa3u4RFIDCrpyjiaJAOUJvMGU5bhKQs1/vB/xTB6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:39:84:92:df:e5:0a:13:fd:28:67:c9:24:f2:f6:ed:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9681fc8c7337c6a1d20b84800df862a27e5fdbd7
        Validity
            Not Before: Jul 23 23:00:46 2025 GMT
            Not After : Jul 24 23:00:46 2025 GMT
        Subject: CN=6a59f4d2ee2218c389c14660f7998c4aa1851bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:33:52:54:94:f0:b8:91:6a:0c:cf:f9:18:0f:
                    b0:7a:7d:64:51:a1:29:63:ac:c9:ab:1c:f5:42:97:
                    56:e7:19:fb:bd:a6:f4:08:a0:09:30:d2:67:ea:f6:
                    be:59:09:40:c5:0c:3f:a1:9b:1c:34:c7:16:d1:dd:
                    46:81:7f:93:eb:fd:1c:0d:63:c6:d3:38:98:66:a2:
                    59:96:cc:86:24:b3:2a:36:47:94:9b:5d:a2:a6:e6:
                    81:b4:c7:ab:c1:bc:1b:da:c7:6d:da:ce:6d:5d:8c:
                    98:d2:ec:97:7f:41:6f:cf:17:76:cc:6f:9c:dc:41:
                    a2:98:ff:0d:a8:3d:94:44:6f:25:ea:a2:d7:ab:87:
                    85:8b:8e:80:dd:6c:6a:56:92:97:b0:6c:04:d0:f1:
                    76:e4:45:f0:a4:40:66:ef:cb:2d:9c:ad:48:36:36:
                    61:1e:85:20:e7:c7:76:1f:23:8c:f2:6a:6c:60:16:
                    9d:7e:81:71:a4:6c:b4:71:ae:20:b7:c8:04:32:b8:
                    c8:3e:b4:02:bc:c6:c1:3f:c0:8c:e7:de:65:8e:a9:
                    26:28:4d:63:6e:23:7a:c6:94:e1:4e:ef:13:9c:96:
                    12:2b:21:69:24:32:57:cd:1e:64:5a:db:27:2a:fb:
                    49:4c:23:a4:99:b7:fc:6d:6f:8e:a3:40:14:dd:8e:
                    9a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:59:F4:D2:EE:22:18:C3:89:C1:46:60:F7:99:8C:4A:A1:85:1B:B6
            X509v3 Authority Key Identifier:
                keyid:96:81:FC:8C:73:37:C6:A1:D2:0B:84:80:0D:F8:62:A2:7E:5F:DB:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/loH8jHM3xqHSC4SADfhion5f29c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/40e5d5-ed41-4dd3-9332-53d96099d7b1/1/loH8jHM3xqHSC4SADfhion5f29c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:2a:ee:fd:cb:7c:86:b0:42:4e:81:0f:6f:1e:3e:31:c1:50:
         9f:0d:05:03:52:1e:19:86:98:df:c6:5a:41:65:c3:98:de:48:
         b2:4a:49:8c:ba:e1:f2:2e:2f:db:cc:93:73:c7:6f:4f:b2:e0:
         15:0e:27:95:a1:e1:c0:34:06:be:7d:91:84:b1:35:87:95:03:
         91:f3:ed:1c:8c:65:62:ff:35:ae:b3:08:b3:a2:ed:0b:49:c7:
         38:75:0d:56:da:6d:44:dc:f2:85:71:8a:f5:9d:36:6a:ed:0f:
         98:14:11:dc:a9:cd:9c:c9:67:cb:6b:43:dd:3f:11:5b:18:e8:
         1c:02:f8:5b:fc:47:d8:1e:1e:a7:14:34:48:4f:a7:03:62:c5:
         7a:af:3b:70:3c:2f:74:b2:e3:15:d7:4e:20:f0:4f:49:5c:55:
         ad:ca:d9:cd:c5:c7:40:64:20:15:84:eb:8d:c5:d9:9f:91:db:
         45:7d:05:59:1a:d7:82:aa:62:cf:a1:8d:2f:0b:5a:12:68:c7:
         28:68:66:57:30:09:4f:6e:5c:6b:62:21:e0:a1:44:ba:ae:54:
         53:df:0d:84:30:e7:6a:8a:11:bd:c7:2e:60:53:2a:03:b5:fb:
         77:d1:e6:b1:08:9d:73:a2:67:57:cb:70:e4:28:f7:11:f1:08:
         cd:1a:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:38:36 2025 by rpki-client