Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
File:                     m0FaAwWfspWkuWyc5erbWP6Y-oY.mft (raw, json)
Hash identifier:          T9QxNssUxTfMJhBxux2RYu9kCg10FG8wnsP6FVwKHeM=
Subject key identifier:   4F:41:12:96:17:E8:F2:61:DA:55:69:17:6C:4B:0C:B4:33:3B:F3:61
Authority key identifier: 9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86
Certificate issuer:       /CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
Certificate serial:       01983E3CC1E482328C6EC84BCA6CE8810B21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
Manifest number:          083E
Signing time:             Thu 24 Jul 2025 21:00:25 +0000
Manifest this update:     Thu 24 Jul 2025 21:00:25 +0000
Manifest next update:     Fri 25 Jul 2025 21:00:25 +0000
Files and hashes:         1: 00e-JENKJtNxBi-As1sYUq5EX18.roa (hash: YsSrS2JJTX4eWuRZQoJnhVIIQfCJDpSvv/nCINRxU3I=)
                          2: m0FaAwWfspWkuWyc5erbWP6Y-oY.crl (hash: Ha+DeSCgFZTJ4Ti7/4dBSgrLI2amNG1a4wGhfGoUsJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 14:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:3c:c1:e4:82:32:8c:6e:c8:4b:ca:6c:e8:81:0b:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b415a03059fb295a4b96c9ce5eadb58fe98fa86
        Validity
            Not Before: Jul 24 21:00:25 2025 GMT
            Not After : Jul 25 21:00:25 2025 GMT
        Subject: CN=4f41129617e8f261da5569176c4b0cb4333bf361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fe:14:61:04:ca:6a:56:b3:f3:62:72:e9:2b:
                    05:19:e5:2c:cf:e4:6b:ea:b7:39:93:4b:ea:65:04:
                    50:1f:37:8a:ef:4a:b3:cb:fd:c0:91:4a:9c:c9:bc:
                    0b:b4:38:8f:3c:e5:55:ef:e7:59:f4:e4:06:18:55:
                    45:a6:ef:4a:f7:b2:c3:65:59:46:f5:0d:7d:95:39:
                    bf:fc:54:37:f0:31:36:12:82:79:0c:12:9b:74:d8:
                    cb:14:af:7f:97:4c:65:08:6e:8b:7c:8e:25:96:5e:
                    29:f5:4a:3b:50:37:a5:ab:ca:aa:3e:ae:40:3b:b8:
                    33:98:b6:60:54:ac:00:22:ee:c5:ce:5d:4a:41:9e:
                    ce:c5:9a:24:da:d7:ef:41:7c:7e:bc:2d:b5:ab:60:
                    6d:06:d4:78:e1:07:b4:19:26:db:a3:9b:47:82:b0:
                    1f:4e:e3:00:01:48:70:aa:de:78:52:ef:fa:fe:6b:
                    b3:d7:b6:f7:f4:8b:15:9f:d8:58:32:a3:2d:5a:e2:
                    2a:5e:50:31:07:09:48:46:e9:66:bd:0d:31:bb:c0:
                    ce:85:5e:d6:cd:89:13:e4:89:ba:5e:28:cb:cd:31:
                    34:5e:8b:20:bf:05:e4:9f:52:4d:f3:09:bc:14:05:
                    a4:82:d0:91:81:74:9f:07:31:1b:4e:36:7a:bb:a0:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:41:12:96:17:E8:F2:61:DA:55:69:17:6C:4B:0C:B4:33:3B:F3:61
            X509v3 Authority Key Identifier:
                keyid:9B:41:5A:03:05:9F:B2:95:A4:B9:6C:9C:E5:EA:DB:58:FE:98:FA:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0FaAwWfspWkuWyc5erbWP6Y-oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/85612a-de33-434b-8471-1801b544b9fe/1/m0FaAwWfspWkuWyc5erbWP6Y-oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:d6:ef:b2:f7:08:2d:c4:9a:4c:58:cd:62:37:6b:56:d9:
         ee:84:8c:40:75:f6:96:e0:1c:c1:77:83:cd:83:e2:57:90:a6:
         91:10:d2:a7:96:e2:ca:45:5b:95:60:09:f8:b5:c1:1f:26:f6:
         48:ca:e5:b8:61:70:d3:98:25:67:1f:70:00:f3:c8:42:e4:cc:
         4a:0f:32:cf:c1:2d:6b:72:7a:92:a9:2b:94:7c:a7:de:cc:9c:
         75:45:42:28:6f:e7:d3:45:b1:b8:2f:68:bb:e2:64:ca:07:e5:
         42:e2:bd:7a:85:77:66:eb:c0:32:dd:43:1d:9a:8f:eb:31:a6:
         16:70:e8:ce:d3:cf:9a:45:d4:37:9f:7f:92:e5:41:74:c0:93:
         8e:c1:3f:eb:9a:e2:7b:a4:41:52:07:0d:b7:fe:12:c3:aa:9d:
         06:4f:8d:20:bc:f6:54:15:8f:e5:04:33:80:eb:6a:e9:3d:35:
         56:4f:b4:66:7b:71:f1:4b:6b:d8:89:dd:ae:81:15:e1:2d:97:
         ea:4e:f6:01:1f:16:03:63:e1:44:9e:cf:00:5e:9b:5f:8d:1e:
         aa:9b:de:a9:66:1d:37:31:d2:35:c0:ba:11:22:aa:a2:94:81:
         82:c1:96:b9:ac:3e:c7:48:1b:d4:45:da:11:51:b4:72:ab:ad:
         83:93:b7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 23:37:36 2025 by rpki-client