Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
File:                     gePml83W4iWsWxFhzfcE3pz8JlU.mft (raw, json)
Hash identifier:          x8Q8VD1jh+A+pckLdf+prScNF1cXLVz96EEkPbgDuKk=
Subject key identifier:   3B:CC:9C:53:0C:32:9A:4D:AF:8C:64:A2:9F:2A:75:5A:1F:B1:30:93
Authority key identifier: 81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55
Certificate issuer:       /CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
Certificate serial:       0198469B683141F7A4595370C638E1433649
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
Manifest number:          09D2
Signing time:             Sat 26 Jul 2025 12:00:46 +0000
Manifest this update:     Sat 26 Jul 2025 12:00:46 +0000
Manifest next update:     Sun 27 Jul 2025 12:00:46 +0000
Files and hashes:         1: gePml83W4iWsWxFhzfcE3pz8JlU.crl (hash: +Oxqq0AHTjUYVCw+xEAirIRZUh27c7tBq+2JSKWBkBk=)
                          2: z2a61Gj6rvrVvZkUxnDVYoDePIo.roa (hash: fvPf2Sq/vTgc0jy8x0X8WEqIuNGU5IX5ZX53TRDJUSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:9b:68:31:41:f7:a4:59:53:70:c6:38:e1:43:36:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e3e697cdd6e225ac5b1161cdf704de9cfc2655
        Validity
            Not Before: Jul 26 12:00:46 2025 GMT
            Not After : Jul 27 12:00:46 2025 GMT
        Subject: CN=3bcc9c530c329a4daf8c64a29f2a755a1fb13093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e4:5e:ac:10:33:18:c2:eb:b1:e4:a9:09:15:
                    f7:bc:d1:c7:35:59:87:26:42:0d:5a:06:44:8b:ff:
                    d2:6d:cb:e4:ab:9a:aa:14:42:ca:5c:51:92:56:84:
                    26:2f:97:54:76:85:4b:4a:0b:ef:94:91:f4:3f:77:
                    9a:bb:5c:7c:88:49:05:00:a3:41:53:3c:a4:7d:90:
                    1b:5d:df:95:c6:17:26:ac:d7:36:49:f1:5f:15:d1:
                    9e:a7:87:d7:36:b4:ec:96:84:df:53:54:6c:53:6c:
                    71:86:43:8b:bb:85:83:ed:fe:20:7f:e7:2c:d8:3b:
                    8e:f1:3a:a4:31:33:a6:25:bf:ad:77:e5:92:54:29:
                    9c:1e:b7:d6:2e:f5:8e:c9:61:0d:07:fe:17:5c:3d:
                    d8:6e:c1:15:49:3d:f1:14:31:49:4a:dc:0c:25:8e:
                    a5:2c:ba:79:42:40:71:2a:7b:27:63:05:b7:38:a5:
                    3e:06:f6:f6:04:86:6e:69:b0:7e:67:18:45:06:f4:
                    37:5c:e6:e7:45:c8:22:72:15:9b:9d:75:41:cd:80:
                    71:e5:29:d8:ef:ae:4f:71:ea:d7:6b:97:19:00:8b:
                    2b:0b:5a:a6:9d:66:4c:bb:eb:a5:1a:3a:6f:2e:5f:
                    b2:6d:46:53:48:3a:38:7f:d7:42:27:60:e3:91:10:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CC:9C:53:0C:32:9A:4D:AF:8C:64:A2:9F:2A:75:5A:1F:B1:30:93
            X509v3 Authority Key Identifier:
                keyid:81:E3:E6:97:CD:D6:E2:25:AC:5B:11:61:CD:F7:04:DE:9C:FC:26:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gePml83W4iWsWxFhzfcE3pz8JlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/fccc7e-b511-451f-b982-dc85864aea89/1/gePml83W4iWsWxFhzfcE3pz8JlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:35:a9:44:7e:b9:96:a7:fd:36:00:03:81:85:3b:d5:d0:5e:
         1f:01:95:c7:67:30:d6:41:e4:1f:4d:17:64:53:4d:ac:5b:4e:
         75:93:3b:52:c2:6a:ae:40:43:ff:98:43:11:0b:00:b0:8c:3a:
         5c:e4:e8:29:85:a9:98:25:85:e1:54:40:9f:78:fb:f1:5e:15:
         76:4e:3f:09:97:b7:c3:40:d8:51:0c:b8:f9:94:91:37:3f:ad:
         52:2c:3b:2a:40:84:57:3d:56:8f:50:dd:44:fc:e7:16:29:e6:
         de:2e:ca:cd:62:cf:f7:c2:bf:d3:26:a6:f2:4e:41:55:66:60:
         fe:3c:30:a4:18:ea:fe:f4:c9:40:81:68:29:51:87:d0:04:18:
         b4:c7:d7:90:4d:9c:9b:f0:95:ee:64:91:f9:e3:ec:fc:a5:11:
         ea:1a:38:33:1f:93:99:ac:ca:91:fc:db:15:1d:44:c7:5e:77:
         63:e5:96:76:77:26:45:c1:24:ca:fd:60:a1:8d:8f:f3:c4:e8:
         ee:0e:36:a6:2e:88:34:94:10:74:ac:bf:c6:0a:f7:42:24:3e:
         68:d5:30:2e:3f:5f:f3:df:5a:31:cf:38:6d:e4:83:98:03:6a:
         fc:59:e3:01:45:d3:2e:2a:71:48:c2:0a:11:59:8c:54:b2:19:
         e2:ab:23:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:50:26 2025 by rpki-client