Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          EwSWTN33GqLgKE0QMos7k4O/s0l13uYIi+4bMQYVZTI=
Subject key identifier:   44:D5:A3:2B:F3:13:29:7A:F6:1C:31:C4:A9:26:9D:49:11:CC:3B:AB
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       01993A26A92E535045F961485A671E3263EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          1001
Signing time:             Thu 11 Sep 2025 19:00:36 +0000
Manifest this update:     Thu 11 Sep 2025 19:00:36 +0000
Manifest next update:     Fri 12 Sep 2025 19:00:36 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: UFiY3C2lQqj/XCabLQkN3jxVV7vX/ars8YSmfkz1Bhk=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3a:26:a9:2e:53:50:45:f9:61:48:5a:67:1e:32:63:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Sep 11 19:00:36 2025 GMT
            Not After : Sep 12 19:00:36 2025 GMT
        Subject: CN=44d5a32bf313297af61c31c4a9269d4911cc3bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:73:9e:d9:7c:55:cb:22:3c:57:ef:b8:4e:3b:
                    7e:44:25:32:bb:f8:cc:1f:b5:f4:cf:2a:ae:8a:ba:
                    16:82:0d:20:da:8d:f5:a6:00:a5:d4:3f:ff:68:a7:
                    84:d6:49:81:da:8a:8e:af:82:fa:f8:7f:b6:67:3c:
                    65:85:9b:bc:ca:d9:c1:5c:f1:06:7d:04:8a:31:cd:
                    7b:6a:ef:87:a4:58:f7:44:80:f0:83:00:f7:33:24:
                    c4:2b:68:06:c3:f5:a4:69:6a:8e:7c:47:24:99:a6:
                    8c:37:8a:35:f0:fc:9c:75:13:07:ab:97:eb:42:87:
                    7c:5f:54:82:f4:5e:e4:79:7f:28:e6:d8:0f:ad:3d:
                    83:f9:ee:59:c5:d5:5f:6f:fa:cf:36:f8:42:48:f7:
                    0d:03:9c:c5:10:34:47:97:af:8c:aa:03:0f:60:4c:
                    e4:ea:4f:2d:1d:7c:b2:90:96:32:42:c8:a1:db:d3:
                    a3:26:7e:9d:cd:30:8d:ff:81:76:34:19:3b:f3:60:
                    2d:92:69:a6:fe:b6:d1:58:b0:9e:1a:52:21:52:f6:
                    1a:0d:f5:51:e5:d6:09:07:0d:2e:01:72:76:f1:5a:
                    f7:ab:67:62:2b:f6:6c:5a:65:fe:ff:cc:96:0a:9c:
                    1f:d6:04:e5:c6:76:73:f6:45:79:e5:d4:3a:61:c4:
                    e0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D5:A3:2B:F3:13:29:7A:F6:1C:31:C4:A9:26:9D:49:11:CC:3B:AB
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:83:e3:ba:38:fe:d5:09:d3:44:95:55:96:78:a8:cd:9c:
         8f:2d:e1:84:b3:a7:8d:93:e3:44:bb:7f:fa:3d:f9:20:45:8a:
         10:a4:9e:5f:93:77:e2:5a:ba:9b:7a:ae:12:8e:68:a1:d8:33:
         0a:38:53:90:9d:3c:ab:77:f6:11:39:69:75:f7:cb:ed:c1:fd:
         ba:97:ac:d0:ca:3b:00:3a:b4:a5:19:3c:07:27:94:11:c8:4c:
         1b:9b:cc:ae:b4:98:17:1c:0b:ee:7f:9f:08:2d:04:42:8e:9f:
         97:da:99:fd:96:04:76:48:44:8a:07:17:a4:8d:fa:85:e6:46:
         98:c0:75:ac:84:b0:ab:21:d3:c9:b0:2e:65:07:0d:48:1f:0e:
         1e:a7:27:58:8c:14:0d:c6:b4:4e:55:24:ae:ec:b6:8a:2a:17:
         2b:c2:18:b6:06:80:90:3d:c7:80:86:c4:e8:0e:76:13:78:b9:
         3b:eb:d2:b6:2e:0c:d6:15:de:8c:9c:d4:0d:84:9d:10:b5:fd:
         8e:63:de:cd:f5:10:6e:89:33:2a:fc:39:63:05:8d:ea:2a:2d:
         77:2a:60:b8:75:16:6a:82:d0:1b:2e:d0:f0:c6:23:2f:e9:10:
         29:37:ff:f4:9a:eb:d2:d7:ad:80:f8:f2:30:62:b7:a9:9b:96:
         72:5a:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 03:30:26 2025 by rpki-client