Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File:                     mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier:          G//K55QDeizYkRfnsnUu0T/uBldY9iqnHSHp+kCBDCg=
Subject key identifier:   66:6C:BD:15:78:55:9B:29:7E:43:39:31:43:12:A0:A5:33:BA:80:83
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer:       /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial:       019923310B70A25FDADC5A226E72C6F523E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number:          0641
Signing time:             Sun 07 Sep 2025 08:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:40 +0000
Files and hashes:         1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
                          2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: GGlOzhnMWAO6Jr4/zHAVupbiTXVbiFeLI3m/WYZ+NRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:0b:70:a2:5f:da:dc:5a:22:6e:72:c6:f5:23:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
        Validity
            Not Before: Sep  7 08:00:40 2025 GMT
            Not After : Sep  8 08:00:40 2025 GMT
        Subject: CN=666cbd1578559b297e4339314312a0a533ba8083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:fd:22:30:5d:5c:67:df:8f:b8:21:33:3a:
                    d9:78:79:f8:05:0d:9b:1c:e9:1b:54:37:f9:5f:51:
                    83:52:c8:dd:19:b5:89:a0:bc:08:a0:ca:09:1a:e2:
                    f6:9b:73:00:a1:af:fe:78:64:a1:04:2a:48:4e:3c:
                    85:17:f1:b9:9e:59:85:4c:6b:c6:45:2c:32:c2:92:
                    fd:be:38:a3:cd:50:70:6f:9f:16:f8:80:03:aa:10:
                    c2:43:cd:6f:60:97:67:38:ff:89:13:52:c7:ed:1d:
                    03:76:6a:41:25:dc:71:9d:5a:5c:82:a2:80:01:26:
                    9e:d8:65:1e:b1:1b:48:6c:11:06:74:56:22:5a:cd:
                    c3:b1:15:14:c2:41:21:33:fb:67:45:db:ca:83:2b:
                    76:80:5d:b3:50:c6:47:37:a6:94:2d:55:97:c5:78:
                    53:69:ef:8d:c2:a8:45:89:58:e0:5a:32:b5:4d:e6:
                    b9:cb:b4:47:1b:9d:7e:0f:65:c4:be:93:9c:47:b3:
                    6e:ab:66:27:89:54:55:6d:87:c3:95:8f:d3:d3:b1:
                    6c:06:38:15:16:b1:8f:52:61:0a:19:ee:a8:12:2f:
                    0c:99:41:7b:2a:61:ef:3a:09:26:ea:0c:67:40:b0:
                    19:02:54:e6:51:fb:8c:a7:4c:52:34:88:ea:95:51:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6C:BD:15:78:55:9B:29:7E:43:39:31:43:12:A0:A5:33:BA:80:83
            X509v3 Authority Key Identifier:
                keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:33:93:c9:98:8a:41:12:29:de:c4:4e:11:6e:ba:5a:aa:16:
         74:c9:6f:96:f3:e8:e4:e4:20:6b:eb:5a:3a:92:fa:69:49:47:
         ef:78:f0:e0:6a:ac:57:55:f2:02:01:64:b2:5c:bd:da:9b:54:
         6c:dc:c5:07:fd:d9:87:bb:e0:a4:72:c5:3b:6e:34:b9:5f:0e:
         3c:9b:b6:50:95:c2:c8:39:fd:95:43:46:22:a7:ba:0c:6d:c5:
         94:31:94:85:6a:c0:c8:88:33:86:b8:fe:e3:63:f6:c8:ea:c0:
         fe:a9:b1:38:12:02:1c:5f:4d:cf:03:27:62:42:e6:81:db:08:
         4e:20:91:5e:8b:e3:a7:32:19:21:7b:c2:1e:18:e3:e0:b8:65:
         72:d8:8b:6b:23:a3:34:5c:73:c6:0c:b1:f8:01:a0:12:39:dd:
         fa:75:b5:82:63:4d:a5:39:a8:bc:4d:91:f8:f3:b2:2d:f4:cf:
         d4:a1:d8:7d:e0:c1:87:c4:78:c8:a7:65:57:f3:58:63:88:5c:
         32:3e:d7:13:01:52:05:46:ef:76:36:ce:2e:3a:fa:3e:fa:1f:
         a2:40:58:56:32:f8:d7:98:90:cd:3e:c3:5e:49:ab:4c:1e:67:
         22:18:a0:dd:29:40:6f:3a:f4:54:63:75:02:19:f1:2d:38:ff:
         f2:f8:7d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:57:01 2025 by rpki-client