Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          c51WXc3kKUwFnYy3ropgTuZzolGW1NHc6BG8e6GvqBk=
Subject key identifier:   55:5A:0A:31:45:3A:60:78:CC:8B:EF:17:09:54:A2:89:BF:5E:AB:16
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       0198282305D0CD74F201D1E2AE1486AEF28F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          031B
Signing time:             Sun 20 Jul 2025 14:00:40 +0000
Manifest this update:     Sun 20 Jul 2025 14:00:40 +0000
Manifest next update:     Mon 21 Jul 2025 14:00:40 +0000
Files and hashes:         1: 7_nRVCQ3y6MID4FpVdSH-LVv21k.roa (hash: KeBopEjJ3jhpQFeNvuaMhntEK/xxfN7GL7n6M9G/SKU=)
                          2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
                          3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: yqh6xMQYwQgUwSLB+3wEH4qrla/t4YrBUg0wtqQ78M8=)
                          4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
                          5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
                          6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:28:23:05:d0:cd:74:f2:01:d1:e2:ae:14:86:ae:f2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Jul 20 14:00:40 2025 GMT
            Not After : Jul 21 14:00:40 2025 GMT
        Subject: CN=555a0a31453a6078cc8bef170954a289bf5eab16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:d2:7f:42:1f:da:3c:85:40:53:ff:03:68:
                    65:de:9b:7b:f3:36:0d:78:0a:91:d0:ce:94:eb:ed:
                    51:43:ef:a9:a7:65:98:4a:c3:3f:1d:ca:31:bf:2e:
                    b9:52:56:87:42:5f:bb:33:1e:00:4a:69:9c:90:c8:
                    f3:71:95:ec:03:37:37:1b:1b:ae:5f:09:cc:02:73:
                    f6:39:bb:05:3f:07:61:8a:d4:fd:a0:96:87:a6:df:
                    72:8d:b8:61:99:65:5f:96:69:ae:2f:90:f4:ac:cf:
                    2a:08:db:54:ce:94:f7:b8:24:24:10:af:99:3b:e4:
                    2d:69:80:04:6f:26:62:62:74:50:1c:56:1e:71:2a:
                    2a:5d:1c:20:ce:61:02:86:1e:88:a5:ea:9c:d1:08:
                    35:b2:19:85:56:64:ff:3b:5e:91:a6:ea:17:1c:5a:
                    eb:ba:15:80:1a:54:33:79:cd:20:bf:dc:df:0d:f8:
                    14:0b:4e:2f:8b:4f:71:7d:d3:aa:c6:51:2e:19:d4:
                    20:d3:a6:13:08:fe:19:eb:f6:5c:60:72:ee:2b:04:
                    67:20:de:56:52:2e:c0:2e:ff:83:70:b1:b7:e2:ad:
                    09:70:28:8b:16:58:76:7c:ed:b0:dd:4e:9d:ea:ee:
                    19:66:04:51:1e:ac:cb:a2:f1:6b:e0:8c:6c:b9:02:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:0A:31:45:3A:60:78:CC:8B:EF:17:09:54:A2:89:BF:5E:AB:16
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:e2:a2:8b:a4:0c:99:2d:54:98:01:96:4c:d7:1c:e6:f1:
         c6:aa:da:1a:a2:90:97:01:b4:02:48:a7:fd:2d:1c:82:af:ec:
         52:ae:1a:03:be:18:ac:09:91:1e:d2:1d:1d:8f:fb:90:ee:8e:
         5c:03:d3:e4:e1:1b:28:62:24:52:68:49:1f:6b:a8:78:27:d3:
         ea:01:15:2a:6e:b3:e0:92:6d:ee:8c:9e:99:2e:0a:2e:ed:da:
         8c:c8:ee:4e:12:d2:ff:26:2b:9a:f4:a7:11:8c:10:95:ae:dc:
         a0:7a:81:a0:b3:8d:50:72:5b:f2:bf:59:d6:ed:c1:4f:9d:9c:
         c4:98:17:28:fc:48:02:de:b2:fc:03:4b:7e:80:01:ed:df:07:
         be:44:aa:6a:3b:b9:b5:12:8f:12:01:70:ae:6c:a2:52:fa:5a:
         da:73:a2:d7:64:16:4a:92:79:d1:af:57:0b:0f:12:08:23:c1:
         d7:f6:0a:ac:2d:ae:ce:58:2f:ce:e6:8e:6e:07:1c:5d:d6:c0:
         98:a7:8d:62:30:c4:47:3e:8e:14:6b:a8:8b:e8:be:83:be:3d:
         d5:20:d6:d5:40:5f:19:51:89:bf:44:e0:70:41:2b:0f:79:e6:
         24:22:01:34:6e:26:2e:0a:84:e2:72:d1:f7:aa:10:d9:73:36:
         da:e6:b5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:27:12 2025 by rpki-client