Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
File:                     63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft (raw, json)
Hash identifier:          UxtIeb3HXAeUbddSshunwOiCMxBtdMfkRdMGoPNn1QA=
Subject key identifier:   63:C9:A4:BE:8B:5C:22:5B:5E:C2:F9:4B:3D:B6:26:3D:28:C5:4E:9E
Authority key identifier: EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D
Certificate issuer:       /CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
Certificate serial:       0199239EE4D4988090558A3E1B49B42D13A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
Manifest number:          09D2
Signing time:             Sun 07 Sep 2025 10:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 10:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 10:00:39 +0000
Files and hashes:         1: 63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl (hash: aUcsI+DQTad6ThatrT55Jja1AsvBdR+Db4e94iQcIq8=)
                          2: GgwfFTO4uP8S6Zfl4qD7wrkk97Q.roa (hash: F3vmPojHcPZ/pLNRoH2QfGVNUxhfBZ4t6IZ3+YyXKWU=)
                          3: _JRrp8FLIzN3Wcs3_-BVtmFxo2Q.roa (hash: Q8m6C2FVj5mzjX13rNX4ocgoM6UgNDM4e2TXd5eI9uA=)
                          4: cTqqZ8EZL5CVbn9iDxm1gMobbtQ.roa (hash: q8ilyeI7HJCy0KwqUBGDpRhrf43OmwTjYcPx/gS2klY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9e:e4:d4:98:80:90:55:8a:3e:1b:49:b4:2d:13:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb78358a6a97d19b2f5afff1cfc793fbb4eafc9d
        Validity
            Not Before: Sep  7 10:00:39 2025 GMT
            Not After : Sep  8 10:00:39 2025 GMT
        Subject: CN=63c9a4be8b5c225b5ec2f94b3db6263d28c54e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fd:7a:85:41:4a:17:1b:eb:55:41:aa:65:b6:
                    f0:86:b2:23:3d:2f:34:ce:0a:9a:c8:55:13:5b:38:
                    49:70:80:ce:68:a2:52:8f:95:45:29:79:00:bb:3c:
                    bf:45:48:4e:e0:fc:73:5d:6e:d1:fe:8e:92:fb:4b:
                    12:50:a9:82:a9:86:90:56:9a:d1:a6:02:c6:d1:92:
                    d3:85:a5:59:1a:b3:59:d4:07:5e:29:1c:65:83:6b:
                    09:39:f4:fa:03:37:ad:28:28:81:52:3e:4d:c3:15:
                    b7:22:6d:23:9a:cb:f0:a0:37:46:41:78:0c:99:9d:
                    50:20:fa:f2:a0:9f:68:18:eb:11:84:80:5a:14:8d:
                    ba:70:7e:76:19:92:c8:b9:9c:2d:4f:df:f2:19:31:
                    41:a5:58:6b:f1:08:67:2d:3a:c7:5a:e1:34:da:6f:
                    2d:8b:b2:45:d5:31:55:d1:18:f2:00:b9:5b:08:92:
                    35:d5:79:28:98:ab:35:33:64:da:73:db:d9:27:73:
                    50:c2:ea:7e:c3:7a:1d:3b:7a:9b:28:c3:ce:5c:bb:
                    42:01:a6:e4:33:9e:21:b0:6e:b2:92:68:e6:65:6c:
                    b6:38:0e:93:cf:c9:b0:ea:22:9f:e8:6d:78:47:30:
                    fe:f9:72:d8:8e:53:f6:b2:3b:5f:a1:e2:96:d2:43:
                    d9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C9:A4:BE:8B:5C:22:5B:5E:C2:F9:4B:3D:B6:26:3D:28:C5:4E:9E
            X509v3 Authority Key Identifier:
                keyid:EB:78:35:8A:6A:97:D1:9B:2F:5A:FF:F1:CF:C7:93:FB:B4:EA:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63g1imqX0ZsvWv_xz8eT-7Tq_J0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/468b75-5994-48fb-a85d-4a5eed1ee5bc/1/63g1imqX0ZsvWv_xz8eT-7Tq_J0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:b6:59:5d:b4:df:bb:da:11:b0:28:2f:d1:7a:da:2e:4b:34:
         a0:79:fd:80:3c:b8:12:3f:14:1e:3f:63:ea:13:7f:17:a5:ad:
         30:93:36:85:df:2e:44:98:cf:67:f4:7d:78:97:83:a6:49:20:
         6b:89:32:54:fd:eb:bb:82:15:29:fb:a5:fc:cf:6d:f9:08:e2:
         6d:b2:da:e6:08:4a:61:6d:89:53:bd:93:b9:c6:20:83:75:6e:
         3b:42:1b:c5:d5:e9:46:a7:b2:bb:86:00:6f:e6:5b:7b:17:e6:
         d9:88:d5:ad:02:3d:73:5e:3d:86:51:0a:80:ae:10:ce:c0:3c:
         e6:02:57:a0:fc:35:c7:6c:f9:b3:59:3b:b4:7b:ef:4d:2b:12:
         d4:5e:f5:57:1b:de:39:d3:1c:8b:7d:1a:f9:40:bd:9b:f5:91:
         87:bf:9c:c9:73:96:1f:19:22:21:ba:6a:04:f8:21:ce:94:c4:
         88:9c:4b:b8:f6:10:0d:cc:0d:6c:63:7e:4c:f9:94:79:59:4b:
         84:57:a8:8f:31:ee:16:1c:c6:43:35:3b:ef:bf:98:69:6f:7c:
         fa:31:d5:6a:95:da:c1:e3:70:b6:65:1f:21:de:94:12:cb:01:
         b4:cc:a8:b8:0c:8c:f0:59:0d:c6:45:dd:b9:81:c5:f6:29:90:
         68:3a:0d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:10 2025 by rpki-client