Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
File:                     9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft (raw, json)
Hash identifier:          4lohFWpeiduCXvtJK91LvTIt1pJzW34Yuv4Z4OSEC2w=
Subject key identifier:   37:46:EA:51:21:1A:76:E9:42:04:3F:D9:6D:2F:4F:5D:A8:AC:3E:FB
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Certificate issuer:       /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial:       019933805CD43303C7FA793F12EE4199E865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
Manifest number:          08CD
Signing time:             Wed 10 Sep 2025 12:01:14 +0000
Manifest this update:     Wed 10 Sep 2025 12:01:14 +0000
Manifest next update:     Thu 11 Sep 2025 12:01:14 +0000
Files and hashes:         1: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (hash: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=)
                          2: 9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl (hash: mpjHtJexoYztxW/vIgRuXivUC/B5P2W6bQeCtMiu1Pg=)
                          3: dBTi9V6Lj09iolupOZhzala-GHE.roa (hash: XgE5C6MotJsfB/9tY52qQR/CvntbYT/9aocAmt0KwNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:80:5c:d4:33:03:c7:fa:79:3f:12:ee:41:99:e8:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
        Validity
            Not Before: Sep 10 12:01:14 2025 GMT
            Not After : Sep 11 12:01:14 2025 GMT
        Subject: CN=3746ea51211a76e942043fd96d2f4f5da8ac3efb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:83:df:20:ff:a1:67:99:2e:8a:ae:aa:97:
                    52:0e:7d:85:fa:07:30:37:e8:a0:db:9b:4a:8a:75:
                    30:99:39:fa:0c:35:53:18:2e:28:9a:18:96:c5:15:
                    60:24:0c:15:67:9d:4c:9f:3e:b6:22:13:cb:83:3f:
                    d8:0a:1b:c6:9d:44:4d:a8:4a:b2:f0:94:25:49:48:
                    27:f8:08:5b:c1:60:af:f6:75:d8:08:0d:cd:00:36:
                    27:e3:91:fb:d2:e9:88:3e:8c:7a:0a:d3:96:c2:bb:
                    63:89:5f:ac:33:3c:52:0f:d0:8d:76:ab:f1:35:c3:
                    ec:10:5c:a9:9c:75:ca:d1:a7:51:27:c8:f6:0b:d6:
                    fc:42:96:94:1e:35:74:1e:7f:4e:e9:1b:f6:8a:51:
                    f4:1f:1c:c6:3d:bb:62:85:6a:ae:40:0f:24:f9:02:
                    46:83:80:1b:af:44:11:f4:55:d1:69:51:b3:73:ba:
                    3d:22:de:34:74:8f:70:f4:f8:b5:6b:7a:8f:91:8b:
                    92:65:88:4d:3d:81:c6:88:a4:ef:a5:d4:65:a2:1c:
                    79:bb:8c:76:13:5f:d0:16:27:d4:50:53:8f:0b:42:
                    f8:75:4f:73:37:65:64:b3:74:d6:6a:bf:aa:ad:9c:
                    e2:e6:7d:6a:ef:ab:d5:19:aa:7c:9b:f3:15:d6:d5:
                    b3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:46:EA:51:21:1A:76:E9:42:04:3F:D9:6D:2F:4F:5D:A8:AC:3E:FB
            X509v3 Authority Key Identifier:
                keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:28:c5:27:7a:0a:a0:08:b4:2c:bd:71:e4:c1:c9:6e:11:c6:
         f1:8f:43:9a:b9:9a:b1:0f:21:69:d2:1c:a2:c6:ba:62:54:9f:
         55:41:24:20:c1:af:4f:cc:0b:4e:cf:26:ef:1c:e8:c0:b2:24:
         5c:30:23:85:4a:b5:f0:97:be:fe:bb:bf:a2:30:ac:87:88:08:
         6e:7f:09:d1:38:48:b1:79:a6:9d:6f:d7:25:e5:3c:79:35:a1:
         f0:63:bd:0c:7b:3d:f3:3b:44:2f:7e:db:26:5c:27:63:4c:51:
         09:18:ee:55:e7:29:6f:08:7d:30:75:c4:b7:4b:43:76:21:0e:
         3b:c4:21:71:e4:e8:49:b8:59:30:19:ff:7f:7e:f3:75:70:9d:
         44:9a:49:85:f2:f1:2e:84:f1:95:4a:45:0e:6e:75:90:bb:51:
         a5:91:d6:36:17:fa:52:c2:6b:89:4a:e3:28:c4:29:f9:8e:51:
         da:dd:87:3e:e5:3b:ba:01:e4:44:35:f8:e5:50:b4:a9:0c:43:
         14:25:12:89:3e:5c:54:73:00:7e:40:25:4c:3c:d5:02:fe:02:
         08:09:f5:bb:64:2c:63:ee:22:60:0a:ec:70:17:72:00:7b:d0:
         f2:85:a5:2e:92:90:62:6f:bb:f3:81:bd:4a:00:36:3d:43:74:
         5d:c1:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:14 2025 by rpki-client