Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
File:                     _v9e0ddTW8-gPh8oisLHdWobEWA.mft (raw, json)
Hash identifier:          GsO+a/cey9+SF6nLeA/DSrmH572Ljw8VuOIYTTcwBH4=
Subject key identifier:   D8:E2:99:D7:08:16:DC:34:C3:AF:36:46:28:04:CC:84:AF:BB:7C:0F
Authority key identifier: FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60
Certificate issuer:       /CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
Certificate serial:       0199233149C9D12E81E96E00C5ED820C1E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
Manifest number:          0126
Signing time:             Sun 07 Sep 2025 08:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:56 +0000
Files and hashes:         1: _v9e0ddTW8-gPh8oisLHdWobEWA.crl (hash: IbHotajCiPsFoL3TtS/jg8/p4LMfXcN1ki4Gbnw9A5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:49:c9:d1:2e:81:e9:6e:00:c5:ed:82:0c:1e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feff5ed1d7535bcfa03e1f288ac2c7756a1b1160
        Validity
            Not Before: Sep  7 08:00:56 2025 GMT
            Not After : Sep  8 08:00:56 2025 GMT
        Subject: CN=d8e299d70816dc34c3af36462804cc84afbb7c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:1a:7c:d8:31:00:aa:b8:06:33:17:80:eb:
                    33:2d:a9:11:2f:ae:a2:c2:f5:be:87:1e:08:8c:84:
                    c7:65:32:9d:12:f3:92:be:8c:21:21:76:33:a8:02:
                    cb:6f:60:cf:12:8f:a6:e6:2f:4f:6f:15:6c:08:58:
                    44:0b:92:39:22:dc:73:68:e9:65:a3:55:a3:15:7d:
                    3e:52:dc:08:55:b7:1a:97:d8:09:26:42:62:b7:12:
                    68:80:49:94:f3:cf:2f:97:fd:79:60:1b:1a:ce:1e:
                    d0:13:bc:77:b7:85:d8:42:1c:28:5f:e6:aa:46:a5:
                    fc:3c:d2:8a:45:35:fd:90:3b:d4:c3:5b:a4:80:3e:
                    61:76:c0:5f:66:15:4e:d9:0c:57:ea:43:54:82:b2:
                    bc:cf:ca:02:1b:b8:0e:1d:94:55:1c:4d:7e:35:1e:
                    8b:c3:59:bb:17:78:18:17:37:d5:bd:8f:51:c9:84:
                    cc:98:8f:c4:08:d7:fe:f3:16:9d:61:0e:c8:df:c8:
                    9d:77:e3:d9:5d:39:f1:38:79:e6:67:81:ba:9a:d2:
                    6c:60:f8:c3:3d:57:57:b9:b0:8f:5f:52:c3:1c:ad:
                    cc:0c:c8:a2:18:db:09:12:60:82:94:b9:32:b2:ae:
                    39:fa:39:3a:2f:54:9b:3e:d5:15:f0:a6:58:6a:38:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:99:D7:08:16:DC:34:C3:AF:36:46:28:04:CC:84:AF:BB:7C:0F
            X509v3 Authority Key Identifier:
                keyid:FE:FF:5E:D1:D7:53:5B:CF:A0:3E:1F:28:8A:C2:C7:75:6A:1B:11:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_v9e0ddTW8-gPh8oisLHdWobEWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ed7371-dde3-4c15-8be0-58a11bb893cd/1/_v9e0ddTW8-gPh8oisLHdWobEWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4f:59:6f:6e:c5:b9:a4:f5:07:dd:8a:6f:de:d8:48:9e:4e:
         82:11:96:24:08:a0:78:ad:ae:ab:dd:77:28:e3:16:33:33:6a:
         fb:62:01:4d:c8:b9:57:33:40:a4:c3:1f:79:53:2d:27:a7:71:
         88:58:12:dc:8e:c6:eb:c1:62:f4:91:0b:f8:d2:40:aa:5e:61:
         7f:27:9b:cf:78:9f:3f:a1:84:bc:b6:ea:3d:83:92:c9:f0:fb:
         ac:0b:3e:91:49:2c:5e:06:da:d3:7d:20:88:7b:01:81:e2:73:
         a7:2f:c9:e4:1c:fb:fe:4e:cd:d1:6d:99:0a:0b:12:b3:d2:f3:
         b2:55:61:05:68:fb:82:a5:13:35:98:cc:cb:04:be:7a:25:1c:
         48:97:29:c3:a8:b2:fe:fc:e3:ab:83:10:1e:af:4a:1d:25:ca:
         69:eb:94:6c:0f:43:43:bc:07:75:bb:11:1b:be:75:4e:73:ff:
         4b:6d:7d:eb:10:97:af:70:4b:f4:b3:78:9c:5b:06:16:08:9f:
         99:c8:30:93:c8:ff:cb:da:65:63:c9:12:38:10:d1:2a:75:f6:
         25:12:27:05:5e:b2:d4:3b:4d:89:fc:37:75:6f:da:1d:c0:b8:
         c4:d4:ac:d6:8e:8b:94:30:6d:81:78:9d:4a:a0:2b:07:a4:b0:
         6d:ca:52:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:09 2025 by rpki-client