Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File:                     ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier:          XRoKxL73FoH6aL4Ap08SpJhhF92fa7DQnYwcRT4iXQU=
Subject key identifier:   4E:FB:4A:E3:CD:FC:AC:EE:E0:A5:16:65:0D:28:A9:8D:56:EC:65:E4
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer:       /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial:       019921B124F1EE7266B4664E9D2882724EF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number:          04FE
Signing time:             Sun 07 Sep 2025 01:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:21 +0000
Files and hashes:         1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: Cu+UB2xDn1bHTtN5FOg1izS5X0gqGqTQt/gdDlKEeXw=)
                          2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:24:f1:ee:72:66:b4:66:4e:9d:28:82:72:4e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
        Validity
            Not Before: Sep  7 01:01:21 2025 GMT
            Not After : Sep  8 01:01:21 2025 GMT
        Subject: CN=4efb4ae3cdfcaceee0a516650d28a98d56ec65e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:23:4d:c1:b5:19:a0:bd:bd:54:a3:cb:47:1e:
                    10:8d:eb:60:67:bc:e3:a2:61:9b:8f:26:29:9c:65:
                    e7:da:17:16:de:93:af:c3:c7:e8:27:85:78:ba:ce:
                    8e:c4:a3:24:ef:d0:b0:7d:e9:12:63:28:d9:2e:5c:
                    7d:c6:9d:e6:e1:2c:a5:5d:2f:91:b4:ea:f6:80:38:
                    66:c1:39:f4:01:45:f9:15:ee:9a:ed:28:94:97:e6:
                    e1:c9:8e:79:73:14:13:61:23:8b:24:36:c9:d2:7a:
                    1c:93:b5:9b:85:e6:e8:c1:db:a5:d9:2a:12:36:90:
                    4d:15:ee:8f:a1:c0:05:04:3a:0a:e9:05:eb:88:fc:
                    9a:68:e0:6d:82:3f:f5:8a:15:2f:17:28:b6:46:89:
                    59:3d:a8:92:e7:03:24:c4:97:b4:4d:a2:e0:87:ea:
                    f2:36:ff:85:4a:dd:d5:46:53:d1:b8:2a:0a:41:10:
                    ea:5f:88:43:c5:bb:a6:48:10:28:af:0b:ec:2e:1c:
                    8e:2c:19:f1:52:7b:e9:7f:ae:56:31:20:ce:d0:11:
                    2d:65:ed:42:1b:a9:ec:ab:79:a7:95:dc:8d:65:24:
                    74:e9:af:95:45:23:63:6b:f9:c7:10:f1:0e:a5:58:
                    17:41:1c:10:15:19:8d:67:62:13:19:69:6b:b5:ae:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FB:4A:E3:CD:FC:AC:EE:E0:A5:16:65:0D:28:A9:8D:56:EC:65:E4
            X509v3 Authority Key Identifier:
                keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:d3:a2:e5:c9:b5:39:1b:c2:9d:27:f8:3b:fb:a2:76:fb:
         76:15:cb:1c:df:40:b3:a1:e3:91:4a:69:3c:e0:d4:4a:f1:06:
         92:94:49:58:35:f6:e0:e2:fa:24:15:2e:75:81:69:f4:db:bb:
         c0:9c:bb:c2:d9:64:04:65:4d:99:a4:26:9a:2b:ca:6a:4b:f9:
         fc:ee:60:a6:86:61:b5:3c:67:6e:0c:3f:5c:a5:d1:26:fa:42:
         f5:c8:30:b8:d0:ec:3d:91:f9:40:ee:46:51:74:b6:85:14:1a:
         b7:46:ed:82:d4:a0:d2:ba:52:68:f8:7b:48:d3:dc:dd:1a:ce:
         97:ae:7b:7a:b7:93:0c:29:6a:5f:a8:00:be:14:f9:fd:a1:2c:
         c5:f6:09:93:26:2c:77:8c:23:64:6a:ad:f7:bb:ab:3b:9e:0c:
         15:22:75:72:45:28:f2:8c:6a:af:89:1e:10:0d:fc:9a:25:94:
         a7:88:97:51:57:fe:77:08:90:c8:04:59:5c:1d:b0:28:d1:7c:
         3f:de:88:12:5c:82:28:7c:2c:b6:be:77:4a:7a:7b:8a:2f:bb:
         de:11:f2:be:d0:ad:7f:5d:6b:6a:23:b7:f7:40:33:78:2e:79:
         55:34:88:3c:6e:6b:c9:e9:cb:6c:7d:c0:21:4b:12:d0:ef:c2:
         64:4a:10:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:27 2025 by rpki-client