Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File:                     A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier:          6p/DkrNxUVynk5N94El8MsxMY4VKjkLL6Eh58JBEwoU=
Subject key identifier:   C0:89:3D:41:4C:CE:81:04:FE:04:6D:CC:B2:72:89:8F:86:48:0A:37
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       019961341F63D5E4A494781652B01B005503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number:          0AA6
Signing time:             Fri 19 Sep 2025 09:00:29 +0000
Manifest this update:     Fri 19 Sep 2025 09:00:29 +0000
Manifest next update:     Sat 20 Sep 2025 09:00:29 +0000
Files and hashes:         1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=)
                          2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: mX7miEQxR6r4eVQYQjB8OCLw7j1IFl6XYyjXX0KSc9U=)
                          3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=)
                          4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:34:1f:63:d5:e4:a4:94:78:16:52:b0:1b:00:55:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Sep 19 09:00:29 2025 GMT
            Not After : Sep 20 09:00:29 2025 GMT
        Subject: CN=c0893d414cce8104fe046dccb272898f86480a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:4d:b8:8c:64:72:64:09:91:a8:ca:43:dd:
                    cd:38:c1:c5:65:86:11:2b:95:62:21:a9:a1:8e:8e:
                    b5:40:f5:66:db:f9:27:b1:1f:cc:55:7b:0c:c3:df:
                    83:78:6b:8c:c5:6b:2c:c0:0e:bc:f2:bd:92:d5:54:
                    c3:95:2d:9d:2a:8c:7a:36:20:48:66:ad:66:73:4e:
                    49:d3:09:70:56:5b:d1:d8:f4:a6:54:49:e1:98:09:
                    8a:68:92:cd:d3:8a:f8:78:d8:f0:a3:88:fe:ad:43:
                    d1:35:21:b1:08:69:35:39:c3:a5:53:4d:80:ac:e0:
                    be:39:ee:4c:9f:ec:6a:85:4e:23:a6:33:09:db:e3:
                    a6:e6:d8:96:1f:c3:03:9f:0b:60:08:52:0b:f6:5e:
                    a7:24:c2:b5:45:c4:12:df:09:d7:6b:b4:b4:ae:38:
                    a8:25:1d:3c:f3:ef:7e:53:0a:2a:90:99:83:48:35:
                    39:a0:20:8a:ef:57:b4:1f:79:af:c9:79:c6:81:bc:
                    ed:35:06:9a:b8:57:6e:79:c2:34:99:f1:41:9b:3d:
                    a7:9a:59:79:9e:4d:bb:93:b6:33:bb:d7:8e:2a:28:
                    60:16:35:17:f1:bb:0b:78:64:c1:9c:d7:78:15:e1:
                    51:6b:c8:d2:40:3a:9d:bf:6f:75:70:e8:a3:80:26:
                    99:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:89:3D:41:4C:CE:81:04:FE:04:6D:CC:B2:72:89:8F:86:48:0A:37
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:ab:6d:37:76:81:26:e5:f1:9e:e6:79:eb:be:4e:5e:d2:91:
         f3:37:68:8f:a0:33:53:06:e6:c0:be:1a:c6:5b:1c:8f:66:e6:
         07:02:43:94:74:f8:7c:fd:d6:88:1c:5d:c8:bb:a9:f7:6b:3c:
         db:45:2d:1c:28:48:d5:ab:d1:d9:c4:91:f1:64:33:9b:85:42:
         63:57:08:a6:6c:61:c5:2a:94:1d:57:04:b7:aa:d7:77:75:47:
         ef:54:8e:6f:bd:bb:f6:27:2f:d2:c7:c2:aa:db:bb:d5:ad:e5:
         3c:d0:82:4b:8b:09:74:15:79:24:8e:67:68:08:6c:2a:54:d5:
         12:5f:82:64:f5:41:0c:9b:c0:1c:e8:75:53:ec:e6:c1:36:23:
         ee:e8:45:cf:5f:e4:e7:c0:69:54:3b:df:08:ef:29:19:42:01:
         0f:b3:ea:71:15:87:5a:e6:be:45:ed:59:88:17:1b:cc:4b:53:
         cb:cb:20:c5:6d:d6:16:74:1a:77:ca:19:6a:3b:0a:16:4d:29:
         e9:8e:ad:96:68:55:79:c8:12:f5:4e:40:e9:5f:c6:a2:6f:08:
         50:8d:37:ec:79:3b:b6:bb:b5:5d:f9:e0:35:1c:be:7d:42:03:
         3a:46:4f:e5:23:55:41:97:e5:c5:49:1b:1d:f6:d5:55:f7:19:
         ef:41:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 16:29:51 2025 by rpki-client