Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          GFFKSuQme4+NxzhZo/RjU/+uRdS/oxw/TqTnyKPB11E=
Subject key identifier:   E3:41:1B:FE:7C:D0:83:3C:D6:CF:B6:90:78:D9:A7:D7:0E:EE:CF:2C
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       019922C3108F9BEF7564376240DE8F2BE79A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 06:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:33 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: FN9+qAeENgBXKU3g8Hbg6Yom/1RFnsCB5fCwHQXkOIA=)
                          2: HZJZK1LDGniWHSTreLFu2CqFoKw.roa (hash: 40ZMLNytGhjN7rMLqzH8llTGFye5F6mDvh5SBtZYngo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:10:8f:9b:ef:75:64:37:62:40:de:8f:2b:e7:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Sep  7 06:00:33 2025 GMT
            Not After : Sep  8 06:00:33 2025 GMT
        Subject: CN=e3411bfe7cd0833cd6cfb69078d9a7d70eeecf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2a:c7:8d:11:66:ec:b5:15:ce:ca:b8:33:06:
                    96:c9:eb:1f:bb:33:e1:aa:8b:f8:5d:be:15:28:98:
                    74:de:f1:5d:07:9a:49:16:4f:77:4e:4f:bb:78:13:
                    9e:eb:0f:95:22:c2:cd:82:01:59:bf:33:55:2d:80:
                    8d:b3:c8:68:1e:97:65:a3:7b:93:e5:8a:4f:f1:96:
                    09:d9:ed:b6:1d:6b:a4:25:8b:6d:c0:19:8c:76:d9:
                    47:8d:88:df:b6:69:c5:fb:7c:ae:82:fb:29:47:7b:
                    e6:16:76:21:09:0c:29:93:d4:27:7c:39:1b:88:99:
                    51:9f:db:71:64:3f:2b:81:c3:b6:8a:ee:4a:fe:4e:
                    a8:b5:74:e8:73:9c:2d:98:65:c5:6e:45:71:a8:b9:
                    52:fb:b8:08:27:23:48:6a:ef:5a:58:eb:73:97:17:
                    49:40:08:dd:11:a1:65:d5:43:eb:d5:49:f2:c6:00:
                    c5:8b:2b:3f:76:15:39:f0:e0:a1:3c:ef:ae:67:17:
                    8e:ea:ac:dd:de:5c:93:f3:55:44:c2:61:c5:26:40:
                    57:43:1d:73:19:6f:d4:71:5d:ac:99:11:93:1a:ab:
                    62:04:35:e1:bb:e0:0d:b5:b8:9d:2d:46:66:0f:a6:
                    1b:a3:91:86:ac:7a:e8:1f:e7:84:cd:be:49:a3:c6:
                    a2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:1B:FE:7C:D0:83:3C:D6:CF:B6:90:78:D9:A7:D7:0E:EE:CF:2C
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:06:7c:be:ec:d2:fe:67:5c:29:67:03:20:46:21:dd:9d:23:
         d0:8b:b3:f3:e8:dd:9c:e0:49:2e:0b:cc:bf:ee:82:23:62:39:
         91:47:8a:ab:e2:bf:8b:64:c3:21:68:b6:d0:10:a8:82:f0:78:
         c0:87:28:dc:26:49:a9:1a:a8:77:e2:3c:c6:1c:99:e5:5f:f4:
         74:a3:ba:c2:f0:68:ee:e0:86:47:69:40:9b:1e:f9:31:ee:73:
         45:82:fb:f9:81:be:0f:49:af:05:fd:90:d0:ff:c6:ac:cb:34:
         aa:d3:31:2b:d7:e9:8a:99:f1:8a:6d:5f:5c:e6:93:26:0e:11:
         49:3e:2e:8e:85:4f:d9:14:94:77:3c:c5:50:50:47:7b:42:84:
         2e:06:ad:36:e1:d6:cf:d2:22:5c:96:bc:78:cd:e8:39:30:fd:
         54:6d:85:a4:f8:5b:9a:79:96:c0:78:46:39:fc:d8:be:3d:aa:
         c6:30:b1:63:6b:cf:65:72:b2:7e:f1:b4:d5:fb:fa:24:18:fa:
         f3:23:6c:21:5d:41:48:ff:7d:d4:5c:58:ab:5e:dc:39:3f:23:
         b9:22:e3:ef:25:93:77:ae:ab:a8:b1:c1:1a:8a:80:68:b2:8f:
         ce:e7:14:c0:10:d7:9b:b4:9b:c5:23:45:55:e0:e6:70:8b:eb:
         ba:be:23:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:43:36 2025 by rpki-client