Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          8Sl1GWSTCla7DkJ/Dowwsv8ZkxxztsqqFZN8vyqWk5I=
Subject key identifier:   FA:A5:9E:B9:D0:9E:D2:17:80:44:F3:F2:58:F9:10:21:3B:07:17:3F
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019916F630666C921E478A3B3A583C4A877F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          0507
Signing time:             Thu 04 Sep 2025 23:00:56 +0000
Manifest this update:     Thu 04 Sep 2025 23:00:56 +0000
Manifest next update:     Fri 05 Sep 2025 23:00:56 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: HFGuo9UURCMPCY7pnjq0etIylMhDwLQu5BNV96c6O5g=)
                          2: bdIq5nOBWGITXlJ9zml2Pg0QFbI.roa (hash: k0q9hqwpfMQ2WeyDd3IadaGT9hLdAeghDeVvZBVh6H0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:16:f6:30:66:6c:92:1e:47:8a:3b:3a:58:3c:4a:87:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: Sep  4 23:00:56 2025 GMT
            Not After : Sep  5 23:00:56 2025 GMT
        Subject: CN=faa59eb9d09ed2178044f3f258f910213b07173f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:fa:dd:fd:1c:3f:27:f6:f4:27:00:f9:09:
                    6e:fc:fa:e5:4a:07:d3:a1:e9:83:e6:fa:23:e1:1e:
                    7c:14:19:06:d9:e2:d3:05:2b:cc:1d:de:d7:69:1b:
                    69:bc:79:22:a9:4f:b8:31:54:d7:ab:a4:72:27:1e:
                    ca:8e:8e:1b:80:87:4d:0a:37:94:4c:64:11:c1:12:
                    63:76:de:22:b2:ad:bd:be:82:b3:1d:cc:c4:27:70:
                    91:86:ad:75:d2:91:80:da:1f:67:41:e8:55:82:50:
                    30:00:05:0a:19:35:08:55:2a:4b:bb:f2:38:20:cf:
                    cf:24:8f:11:1e:e8:e2:26:f9:3b:e9:ea:7a:9e:89:
                    2b:fc:65:11:24:6d:64:6c:4d:f3:29:0e:34:e9:bf:
                    37:59:46:57:e4:aa:61:58:02:46:39:e6:6d:74:ed:
                    45:10:25:fb:d3:5e:99:14:22:8e:7c:0f:d0:d3:03:
                    86:34:cc:92:66:97:f7:f1:fd:9a:54:f1:74:eb:1d:
                    d4:ef:49:a9:5e:2b:67:e1:60:08:f6:ed:e7:fe:7a:
                    17:2b:87:0f:c1:f5:7d:f9:81:e6:f1:93:4d:99:88:
                    cf:5f:19:a6:01:1a:29:0f:aa:c7:20:6b:39:bb:07:
                    31:66:9b:42:6a:ec:9d:c5:8d:2f:59:2c:2d:ba:40:
                    6a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A5:9E:B9:D0:9E:D2:17:80:44:F3:F2:58:F9:10:21:3B:07:17:3F
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:80:ba:86:d2:f8:2e:37:36:53:7a:28:be:45:54:92:f5:af:
         7f:95:8b:36:79:45:f5:4c:3d:74:8f:2f:be:95:c1:b7:c7:ee:
         5d:98:d1:16:19:97:3d:91:6c:93:5e:5b:25:ff:c3:66:c3:be:
         51:7c:fd:96:0e:a8:3c:ee:40:8e:a1:36:e0:a4:25:57:29:c7:
         88:a9:33:e3:93:ac:3b:77:65:79:84:66:5a:41:91:f4:a5:0d:
         37:5d:0d:ac:93:46:9a:a6:7c:68:f2:0d:ec:72:31:08:3f:e1:
         81:00:8f:08:b8:4f:27:28:8c:48:be:a5:54:40:cd:d7:3c:98:
         d7:83:ef:c0:7e:d9:31:8e:dc:cb:6e:2b:5a:90:36:84:14:f4:
         16:9e:14:57:7f:97:5a:ad:6b:fd:1a:fa:94:18:de:e6:4a:9d:
         a6:cb:e9:cb:e6:ce:e1:10:75:1c:9f:2c:e8:db:f1:d9:6c:d8:
         9e:00:b3:3b:4b:b8:a6:91:f8:06:7a:c3:c2:d9:9f:6e:26:b5:
         4e:c0:78:62:9d:b3:99:75:bc:ab:20:3f:7d:7f:3c:8b:39:91:
         fa:a8:8a:56:00:da:e9:51:27:af:61:21:03:31:6e:7a:b7:1d:
         6a:ae:28:79:e4:9d:90:a9:ae:a8:62:c0:71:b5:54:b5:ff:21:
         89:2e:d1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:35:47 2025 by rpki-client