Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File:                     b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier:          MJ1OzlCtcj+jBNyAUPPjg71rGo/QB5jR5R6Yw0a8fCY=
Subject key identifier:   94:41:A7:82:28:98:77:64:92:A0:BC:FF:DD:14:86:7B:0B:42:A1:9D
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer:       /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial:       019922FA911D6A9C71706A8769388C01BD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number:          147E
Signing time:             Sun 07 Sep 2025 07:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:10 +0000
Files and hashes:         1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: kG6BksICOKPn6h64O2DJnTV3Oe2uLaiTdfclNLIq6RE=)
                          2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:91:1d:6a:9c:71:70:6a:87:69:38:8c:01:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
        Validity
            Not Before: Sep  7 07:01:10 2025 GMT
            Not After : Sep  8 07:01:10 2025 GMT
        Subject: CN=9441a7822898776492a0bcffdd14867b0b42a19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:59:f5:67:2e:da:0f:ab:bc:c7:78:18:8d:cc:
                    1f:4a:ef:19:72:e0:78:6a:11:5f:21:0d:37:15:06:
                    d2:8a:30:02:03:07:25:c0:08:15:ea:80:b6:99:6a:
                    bb:63:37:fc:37:b3:bc:81:74:5e:2c:48:e5:3e:03:
                    53:5c:e5:6a:b8:d4:d5:0f:32:47:ae:20:25:04:aa:
                    09:25:d4:08:de:f0:67:17:62:13:68:82:a0:b2:63:
                    7d:e5:3e:19:b5:07:97:96:27:f3:bb:9d:2f:2c:1c:
                    0a:29:37:c2:1d:a9:22:b6:fc:d6:de:92:35:4b:73:
                    79:69:e5:c5:67:8b:03:f5:fd:69:6c:61:6f:9d:b3:
                    51:e6:3c:01:d1:1f:db:fa:fc:19:bc:ea:cf:2f:a7:
                    78:9d:06:c8:67:1d:43:4a:01:c7:cf:e5:05:ef:69:
                    2f:42:d6:44:5b:55:18:88:ff:aa:5c:c6:bc:96:2c:
                    0b:93:01:9c:28:fd:a8:52:2e:85:be:07:b5:1f:df:
                    c0:01:25:7f:b5:92:ca:d5:9b:fe:fc:12:48:29:87:
                    80:d9:a0:a5:ab:ba:4a:a9:a3:37:ce:40:cd:0a:e2:
                    07:2b:4e:59:5e:f1:c4:41:07:33:82:eb:a3:74:4a:
                    fa:ca:fe:62:20:96:e9:f8:51:fc:85:5d:18:f1:1b:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:41:A7:82:28:98:77:64:92:A0:BC:FF:DD:14:86:7B:0B:42:A1:9D
            X509v3 Authority Key Identifier:
                keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:50:e1:4d:00:96:85:d8:7c:3b:0f:7a:52:1d:5f:8e:bd:
         f7:2d:71:9b:f4:93:cb:f4:83:ff:3d:fc:63:f9:10:ed:4d:30:
         5d:34:6d:2f:07:d6:5a:b3:23:3f:b7:64:0a:25:29:4b:e6:27:
         9f:54:b7:6c:3c:fb:d0:56:3a:01:8b:0a:66:a4:42:d1:d3:cb:
         d9:14:99:5c:74:9c:7b:f8:4e:c7:72:f0:07:db:68:91:c2:f9:
         f8:a4:16:90:d8:7d:f4:7f:79:46:f9:85:2c:e4:46:55:4b:f4:
         a6:cb:e7:40:26:2d:0a:0a:42:7f:46:b9:68:25:35:fd:d7:a7:
         a2:bc:dd:da:05:34:4d:d1:22:20:a2:26:bd:eb:3d:9f:17:a7:
         ff:7c:27:61:ef:00:52:b1:f7:1e:0a:13:05:a7:77:c3:39:83:
         74:6e:ac:ad:7f:6c:6f:b1:67:46:50:0d:82:82:f7:e9:18:f8:
         45:70:fc:46:54:67:a6:1f:0c:cb:f9:bd:9c:8e:d0:67:45:36:
         cc:dd:b3:77:61:e4:bd:4f:8a:30:f6:4b:3e:f6:b5:2b:69:b9:
         0e:4b:11:d2:19:99:db:e4:ca:c6:43:6c:d7:c5:0d:1f:7b:ff:
         4e:4b:0b:bb:90:ba:43:37:29:f4:27:cb:ed:4f:78:86:e8:a5:
         0d:55:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:33:03 2025 by rpki-client