Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
File:                     9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json)
Hash identifier:          UamwgoF3Qm3TYmrWkefD7mc1DUcA7n0XM2oEUqlnmZs=
Subject key identifier:   FD:15:87:EE:29:79:18:FA:C8:D4:0A:6E:04:58:30:F9:EB:3A:02:E1
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Certificate issuer:       /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial:       01992C6B9C2FB2289488A673251C2C3D1745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
Manifest number:          05FF
Signing time:             Tue 09 Sep 2025 03:01:13 +0000
Manifest this update:     Tue 09 Sep 2025 03:01:13 +0000
Manifest next update:     Wed 10 Sep 2025 03:01:13 +0000
Files and hashes:         1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=)
                          2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=)
                          3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: bu+I7h3mR1Bm4X5MPlBh4ZhUqrcG6aJ2NuBJfppZnP0=)
                          4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2c:6b:9c:2f:b2:28:94:88:a6:73:25:1c:2c:3d:17:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
        Validity
            Not Before: Sep  9 03:01:13 2025 GMT
            Not After : Sep 10 03:01:13 2025 GMT
        Subject: CN=fd1587ee297918fac8d40a6e045830f9eb3a02e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9c:d8:ac:e7:7f:66:c3:f2:e5:35:a9:20:37:
                    8c:55:a3:f1:1d:ff:ee:0c:87:da:70:14:bd:4c:32:
                    71:c6:79:2a:0a:72:14:36:e6:32:a4:6a:b9:78:7c:
                    fb:a7:1a:b8:92:cf:8e:b4:12:64:53:81:b0:be:71:
                    b2:3f:50:4e:69:5e:ed:98:69:13:f0:f5:7c:88:90:
                    73:40:74:e1:a9:90:a2:4e:d5:71:71:f3:90:3a:30:
                    2b:58:d2:3b:36:0e:f2:54:f1:a0:03:c4:e9:eb:d2:
                    10:5e:c8:e5:74:5b:de:f7:8b:2a:7e:15:fa:5a:1d:
                    14:3c:ea:3a:85:77:81:1a:09:94:3a:a9:0b:09:e7:
                    bf:72:bc:a1:4d:c3:a1:90:93:bc:f3:71:c6:f5:06:
                    89:ac:60:e0:20:46:e1:1c:25:11:c2:1a:a1:ed:19:
                    2c:0f:52:85:c3:1c:bd:b1:db:68:be:fb:2d:09:4a:
                    7e:27:af:90:48:64:d3:38:8b:6a:cf:ed:6c:f7:c8:
                    73:b4:53:2b:66:7c:e5:ae:07:6a:5c:84:2b:5c:62:
                    45:a9:4b:d8:ea:2c:65:99:f7:3d:8e:ec:be:a8:7c:
                    95:6c:bc:fc:74:92:e5:b5:84:50:5a:10:6b:af:cd:
                    cb:35:25:26:dd:3d:33:9b:ce:12:e6:46:a1:77:2f:
                    16:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:87:EE:29:79:18:FA:C8:D4:0A:6E:04:58:30:F9:EB:3A:02:E1
            X509v3 Authority Key Identifier:
                keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:8e:91:cf:36:ac:a2:cd:38:ae:5c:a0:1f:e0:9f:2f:73:
         ef:0e:1f:02:e3:f6:87:e4:56:bd:46:85:2a:4d:70:f5:08:52:
         75:bf:d9:d1:c3:82:51:03:24:a1:59:e7:62:a4:63:62:0d:2f:
         16:4f:35:90:19:96:12:f3:3c:df:97:42:d5:b3:15:83:28:7d:
         d2:33:c5:3f:a9:2c:ca:35:bf:9c:0c:3e:ca:d7:82:8c:81:61:
         08:25:0e:a6:37:32:9e:bc:c9:8d:77:b3:a4:d9:bd:a3:67:23:
         e0:c5:1e:c1:e5:e8:4b:6a:95:1a:35:97:b0:ea:18:57:6b:a5:
         9c:85:7a:48:c2:af:12:68:e6:26:fc:cb:f8:30:17:19:6e:dc:
         2d:46:56:e6:e6:20:44:02:7a:02:7c:e8:a1:e3:bf:ae:0a:b1:
         ed:3d:0d:ce:be:22:c4:a6:a5:94:23:d2:1c:cd:3f:d2:9d:f7:
         91:49:1b:c3:48:e7:27:1b:f8:67:62:bb:60:07:d0:b4:ea:38:
         9b:ca:d9:6d:4b:d5:28:dd:8b:85:53:15:e7:29:b2:14:5a:f2:
         71:6a:d0:06:d7:77:9d:84:98:6a:0c:da:15:24:54:c4:f7:ad:
         10:90:dc:a6:b3:56:00:90:7b:30:40:bd:59:9d:c4:ab:c5:b8:
         89:a2:3d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:08:34 2025 by rpki-client