Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File:                     I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier:          5LplaPsd6g4DGqCDa5Hwu8QgzP3XYyWNq1WVDS8NAys=
Subject key identifier:   AB:A9:99:7C:B1:3E:5A:B8:B1:52:20:82:BF:0B:B5:CF:B6:30:36:38
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer:       /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial:       01992256073B95D74C75673D8FFCAC94765E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number:          1F
Signing time:             Sun 07 Sep 2025 04:01:27 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:27 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:27 +0000
Files and hashes:         1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: fZ0r246/6O6NbDMAZ25bzUD0qU/jwsDgtZr6BpKX6SE=)
                          2: PwxQMG9ujj6pfZhzC7G_kz3NsYA.roa (hash: 09V39ykqveB1AyZv1j7X/quqHqzhf0uH/toO7YLzAy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:56:07:3b:95:d7:4c:75:67:3d:8f:fc:ac:94:76:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
        Validity
            Not Before: Sep  7 04:01:27 2025 GMT
            Not After : Sep  8 04:01:27 2025 GMT
        Subject: CN=aba9997cb13e5ab8b1522082bf0bb5cfb6303638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:62:d4:33:8d:b9:65:f9:fd:06:ea:8b:86:
                    1a:6f:03:16:c6:13:15:ff:4e:87:4e:af:b3:c9:7b:
                    20:c1:73:1f:29:2f:c0:cc:92:ca:df:9a:d4:21:12:
                    3b:e9:23:0e:fe:57:f1:f0:f5:37:22:68:68:9c:22:
                    91:5d:3d:e9:2c:86:03:25:9f:79:1a:3b:ab:08:1b:
                    93:03:dc:1c:f5:4d:8a:fd:24:27:71:ac:73:55:df:
                    ee:45:2c:14:f4:a9:4f:90:36:f5:76:20:15:f5:19:
                    db:a7:6b:07:f9:d6:71:60:f3:39:51:fd:cf:dc:cd:
                    34:44:a7:8e:78:30:5e:a8:27:18:06:a9:41:52:7a:
                    5c:31:8e:17:18:85:e7:c6:7e:0e:28:ed:04:a1:3c:
                    39:a6:5b:5b:a9:d0:4a:cd:c4:24:97:41:e6:b2:e0:
                    fe:d2:8b:5c:9a:70:68:46:4c:61:6c:44:7f:bf:6c:
                    cb:ec:e2:81:7a:bd:e7:f8:f7:c5:24:0d:8b:8b:19:
                    52:40:40:c9:01:03:13:b6:b9:5f:e3:33:d8:d2:c3:
                    ac:7e:86:1e:f9:99:d4:93:05:e4:e2:a5:2c:49:d7:
                    cf:96:36:c0:83:e1:54:f4:ea:8b:61:d8:a6:79:e0:
                    46:24:da:58:9f:b6:a8:84:d9:be:10:3d:fb:87:f1:
                    fa:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:99:7C:B1:3E:5A:B8:B1:52:20:82:BF:0B:B5:CF:B6:30:36:38
            X509v3 Authority Key Identifier:
                keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:0a:f7:b9:1a:8a:4f:3f:45:aa:69:ad:b8:74:45:44:4f:ed:
         68:f5:c4:70:0d:76:ca:e0:d3:c9:df:f2:cd:3a:af:2c:4b:97:
         f0:2d:01:2e:2d:13:b7:7c:9a:6b:84:34:58:8d:e0:59:fd:29:
         f7:6f:5a:cf:84:37:16:c4:56:fb:d4:c4:b1:a1:97:51:5e:a9:
         7a:64:6c:ea:a1:cc:88:7d:a2:53:c2:48:b4:db:39:45:e5:05:
         e2:ba:22:7a:38:c1:5d:bb:a7:73:77:52:5c:65:55:f2:fa:ad:
         e1:e8:33:6e:7a:97:18:c2:81:67:00:df:f0:be:d0:58:d0:3c:
         59:81:ea:1a:e4:25:8d:ef:6c:77:bc:26:e6:20:00:6b:d4:c9:
         2d:d7:30:56:53:d9:c1:82:ea:b2:47:7a:37:a3:12:93:5d:f4:
         f6:62:cd:d7:fe:ab:b5:cb:28:b9:69:19:2b:b7:bf:f8:b3:3c:
         f4:92:b6:b2:d7:f6:36:f4:70:23:dc:03:9f:6a:ad:26:66:d3:
         e8:ba:33:ed:6c:a4:4d:36:78:b3:de:be:64:5d:58:d2:5a:a9:
         c0:16:02:7f:cc:51:23:c6:1d:12:76:85:cb:f0:25:94:4f:b9:
         00:fc:ca:34:f1:2b:99:92:36:e5:c4:99:f5:f0:09:48:ad:78:
         41:9c:71:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:45:04 2025 by rpki-client