Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
File:                     cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft (raw, json)
Hash identifier:          niEc+UAZaYR+3vqPe+iVt8P5BIh6wuAkRgMyH40iy6Q=
Subject key identifier:   E1:1F:49:E9:C3:FE:A3:BB:C2:86:C0:85:F8:1B:92:18:FB:37:69:96
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Certificate issuer:       /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial:       0199307F66C66B19F0F16533A11007732A55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
Manifest number:          1686
Signing time:             Tue 09 Sep 2025 22:01:19 +0000
Manifest this update:     Tue 09 Sep 2025 22:01:19 +0000
Manifest next update:     Wed 10 Sep 2025 22:01:19 +0000
Files and hashes:         1: 2ykyLUV8HJgn1salik1J3kOQxCQ.roa (hash: nDi3j9QWu/wqTdD6MOvj0Loav1zxTXnuS+2Or/nURsA=)
                          2: DF0LylBO293Rh5P_Xm-081JdxGQ.roa (hash: 405nlMqZVIUCURUtBGFImyyIgI7CPbrFiQZ6G44Cxus=)
                          3: Ki9qT7YB3e7mHbagrKcYG0NRPww.roa (hash: AoqiULKaxv21ka5UL631Ur1kFJT7xzfFRxQNsWV/3BE=)
                          4: cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl (hash: KUUw05MLw41MyYRcIb6uDLkYS0qgDTi94M2KqvDB1i0=)
                          5: ecSF9NE211OUQGVVY-gYrorVDo0.roa (hash: AFCEodkMI54VOYg+dE3fMMiMAl/LGN5jW0HDeqocDmM=)
                          6: syjiQ17dBmmkBrrPm3qMJQlfeQw.roa (hash: xvm/Qu4QjTYO005UFyYbS5lkq4TgWn4H6EMhyBLhJuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:7f:66:c6:6b:19:f0:f1:65:33:a1:10:07:73:2a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
        Validity
            Not Before: Sep  9 22:01:19 2025 GMT
            Not After : Sep 10 22:01:19 2025 GMT
        Subject: CN=e11f49e9c3fea3bbc286c085f81b9218fb376996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:87:e3:b9:40:85:4a:fc:4b:5c:aa:3d:b3:b7:
                    4f:3e:69:77:35:81:4c:a5:3f:b6:3b:f8:56:94:37:
                    50:1f:b6:dd:fd:a8:3a:25:f7:fa:cf:9b:68:e1:c0:
                    e7:ef:f5:45:d6:65:18:b2:f7:1f:5e:db:2a:f1:b0:
                    07:4a:59:ed:4b:f2:7c:57:f7:36:ce:c0:0f:ce:e6:
                    eb:84:c4:3d:8f:71:7d:42:e0:33:a8:36:1f:bb:3a:
                    87:6c:d3:f5:46:e1:ee:3f:eb:3a:d1:8e:4e:fb:14:
                    7a:93:b8:11:c7:11:12:5d:b0:a4:74:15:1b:16:53:
                    2e:ac:d1:d9:47:7e:98:f4:d2:6e:d2:4c:82:11:3f:
                    7e:99:0d:17:ee:e4:3f:25:bd:05:aa:b5:c9:15:6d:
                    d1:fe:d7:fa:9c:c1:f3:53:44:c3:68:09:11:65:7b:
                    cb:d9:2b:0f:e8:ec:7a:78:15:a4:9f:0c:b0:4e:3d:
                    bc:01:98:21:de:06:9a:ce:6f:83:e2:ad:dc:e9:d2:
                    90:f6:09:7b:43:4f:40:46:49:5e:39:5e:20:88:30:
                    45:e6:9c:03:ee:eb:86:54:a0:53:76:a8:65:6c:f9:
                    29:94:7b:4a:40:7c:86:cf:be:4e:06:15:e7:ff:bd:
                    00:7c:51:ab:04:ba:c7:d2:0f:67:6c:d9:b8:42:21:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1F:49:E9:C3:FE:A3:BB:C2:86:C0:85:F8:1B:92:18:FB:37:69:96
            X509v3 Authority Key Identifier:
                keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bf:24:40:ef:68:d9:2c:e5:dc:02:8b:97:92:fb:10:65:30:
         29:8e:8b:6c:d1:ff:46:36:c2:90:b5:4e:61:6e:80:3b:03:f7:
         d4:76:5b:4b:cf:e1:0b:58:b5:da:3d:6b:58:d7:1a:0b:91:10:
         b3:74:f1:49:76:e7:6a:72:54:8c:ab:ee:be:da:22:57:4e:f4:
         f2:46:bc:8b:c4:92:48:eb:d9:7d:7d:d1:a7:eb:40:11:22:e8:
         c5:18:08:37:e4:9e:ac:c6:b5:cf:78:1e:d1:7e:d7:2f:d0:c7:
         00:b7:74:ef:0b:7b:f4:e2:22:58:60:e6:2c:cb:78:22:55:c0:
         dc:fb:e8:cc:b3:4d:5d:1f:de:b1:11:dc:13:ad:86:56:43:7d:
         77:8f:77:4d:f0:64:b5:20:02:18:7d:92:6a:5e:ec:d1:dc:a0:
         d2:dd:db:0f:59:b6:81:d2:f6:05:4c:aa:81:90:4a:fa:61:20:
         f6:6a:61:d1:f1:57:68:cd:f2:9b:57:8c:c0:9c:48:02:7b:9e:
         a7:e9:f6:70:64:2c:4a:bb:60:6d:b7:9d:39:f4:31:83:13:d3:
         ad:79:4f:ec:c7:a9:11:9e:d2:ba:7d:59:0b:58:8e:85:72:af:
         b9:13:7b:ab:91:8a:8b:a5:3d:a9:56:24:4d:5b:cf:e4:f7:78:
         69:3b:dc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:26:36 2025 by rpki-client