Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          AGNLCU+2hKfKie/Jnc4p5NaXqI0Oet5GXLH+DUM7MXA=
Subject key identifier:   32:13:9F:05:B3:8E:6B:02:ED:67:EA:65:03:C1:4F:0A:C7:9D:0D:91
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01995BA1F12D0A79440AB7D152E95EDC8D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          1483
Signing time:             Thu 18 Sep 2025 07:02:43 +0000
Manifest this update:     Thu 18 Sep 2025 07:02:43 +0000
Manifest next update:     Fri 19 Sep 2025 07:02:43 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: OiHrdlPkR4c7Ij55mbGGVcdHZAVoduynq5Oq8inQfOE=)
                          2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=)
                          3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=)
                          4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=)
                          5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 07:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5b:a1:f1:2d:0a:79:44:0a:b7:d1:52:e9:5e:dc:8d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Sep 18 07:02:43 2025 GMT
            Not After : Sep 19 07:02:43 2025 GMT
        Subject: CN=32139f05b38e6b02ed67ea6503c14f0ac79d0d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:28:2d:1d:bb:07:a7:de:0a:28:55:44:ca:
                    1b:4e:2e:61:97:db:55:87:42:ec:30:2c:2b:93:f9:
                    65:4a:3e:1d:2b:a6:65:b6:59:97:78:92:21:66:04:
                    2a:9f:ec:ba:99:75:f1:58:6c:1a:1e:ec:db:9c:46:
                    6f:86:3a:a7:e8:4b:c9:16:83:ef:46:58:b6:84:d5:
                    f3:2d:cb:88:16:f6:4c:56:ba:db:c8:d9:08:7f:72:
                    bc:e6:b5:fb:86:6f:3b:a5:04:37:3e:6f:3d:2a:2b:
                    34:52:c8:96:d3:9b:75:71:de:35:5d:37:a1:34:62:
                    00:b1:3e:e1:5c:88:6d:cd:a0:cb:54:18:1a:01:b4:
                    5f:fa:38:79:00:60:dc:8d:77:4b:11:c3:03:fc:5b:
                    59:44:89:27:11:41:47:84:82:d0:24:e4:db:ad:98:
                    e1:86:29:e6:c9:49:eb:49:0d:3b:c1:57:96:4f:e1:
                    61:f5:1a:f9:cf:e9:7b:8d:be:db:ec:83:35:10:7a:
                    0d:02:1f:17:8b:97:23:ea:64:ef:78:7e:f0:78:ba:
                    b1:54:6e:18:4a:a6:13:2f:61:c5:13:4d:94:3a:46:
                    9a:c2:43:57:fa:47:0f:b6:cf:e3:ea:c3:f1:08:ff:
                    04:08:88:c5:e3:fd:64:96:f6:80:7a:09:f0:1a:8e:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:13:9F:05:B3:8E:6B:02:ED:67:EA:65:03:C1:4F:0A:C7:9D:0D:91
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:45:40:3e:8a:5b:33:9d:72:c0:0c:e3:b3:d9:c4:dc:ca:9b:
         e4:06:0f:36:07:13:20:94:4b:dc:a1:7d:05:93:f0:13:11:df:
         cc:d6:d4:e4:b3:f6:69:c1:f2:c9:93:1b:96:08:87:92:1b:8f:
         74:f5:c1:3d:fb:54:72:56:cb:4c:44:8a:88:fd:72:bd:ad:48:
         00:6a:75:fa:e1:cb:74:18:b8:34:cd:a9:44:ee:0c:aa:8c:0a:
         63:28:8b:40:b8:34:8b:38:8f:c7:cc:e5:af:6b:6b:cd:ba:20:
         34:0e:fb:f8:1b:53:39:6a:89:f2:a2:5a:35:62:18:b0:8b:b1:
         b7:1d:55:52:53:7c:58:b0:49:75:cf:8e:e4:b1:d3:43:ef:d2:
         c3:83:58:cc:b2:cf:01:5b:72:d5:03:db:77:a1:c3:31:87:42:
         18:f6:60:6d:57:ac:e6:af:c1:1f:5d:42:9a:92:7d:08:28:c6:
         d8:07:cf:24:91:3b:e2:5e:e5:b5:85:c3:11:16:a8:2c:7b:22:
         81:ca:92:27:56:9d:bb:df:e0:e7:08:cf:2e:8a:af:48:07:1d:
         86:e9:14:b9:db:f2:59:ad:66:c3:54:be:a0:13:2f:fa:27:d2:
         5e:47:b2:0d:79:8b:ef:7e:4e:e7:bb:8c:bd:49:82:be:c3:bd:
         69:50:c1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 12:02:21 2025 by rpki-client