Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
File:                     9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft (raw, json)
Hash identifier:          xQTMW37IGJNXoEQE3vXcE7l6mz513mV4PUZch6MNESQ=
Subject key identifier:   BE:9B:92:7C:23:9F:8F:50:B0:9B:8D:E4:B3:D9:51:39:9E:7D:C1:07
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Certificate issuer:       /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial:       019926D7715A4A5EFEFC21A47178AF354D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
Manifest number:          1677
Signing time:             Mon 08 Sep 2025 01:01:17 +0000
Manifest this update:     Mon 08 Sep 2025 01:01:17 +0000
Manifest next update:     Tue 09 Sep 2025 01:01:17 +0000
Files and hashes:         1: 9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl (hash: LUClHDZGKsIWpzlBs2QHhE/NuP9dJsr2rIe4ZxYzK8k=)
                          2: CisyPBICFzRGOCGtK3vxthiuGEs.roa (hash: 23mIhFxKDvJAL2KMAVi2LJugT4q2VWIVs7Cdef8DgOI=)
                          3: FkuC_69RdWLx1Y0srRO2lTt2Qn8.roa (hash: V2QfXGuoABf0nSRm/Oq1C+rnj29jR40BHTTOPTu5Dlw=)
                          4: XT0-w6dqifmy2ffwrG4-p0z6yak.roa (hash: qA90Am+RQnnMQJCKqDmSo8CLarebFr+1kMjhOvQOjTU=)
                          5: qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa (hash: OxgWBiFLszYpiPd1r9svRtI7919M0gEvC+i3wC1jk18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:d7:71:5a:4a:5e:fe:fc:21:a4:71:78:af:35:4d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
        Validity
            Not Before: Sep  8 01:01:17 2025 GMT
            Not After : Sep  9 01:01:17 2025 GMT
        Subject: CN=be9b927c239f8f50b09b8de4b3d951399e7dc107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:6d:a6:ee:88:ee:33:97:1e:99:51:77:f4:
                    43:ae:fd:b7:fb:58:1e:f8:dc:09:da:02:d6:4a:53:
                    10:02:8f:b2:27:9c:30:4b:18:4a:70:30:d7:0e:2d:
                    cb:07:da:b3:94:0b:c1:26:5f:27:bd:15:86:ff:90:
                    63:0d:f7:5b:b1:95:4a:8c:59:90:99:74:90:32:62:
                    6e:d5:fe:0a:64:28:3f:87:ff:92:22:af:d8:34:c2:
                    9c:df:02:1c:0c:3c:4c:5d:44:26:d2:2c:44:37:68:
                    14:13:f6:50:3e:47:ab:a5:7f:18:5e:c8:dd:3a:7b:
                    bb:42:12:a1:99:a5:1c:a6:dd:70:3c:1d:92:7e:59:
                    72:45:ff:4e:23:3e:f3:f7:c7:0f:5e:54:52:6d:0b:
                    48:c4:da:a1:48:be:72:10:f1:f3:43:b3:bb:0f:fa:
                    a2:43:e3:34:ac:93:9c:e5:2b:01:a6:9a:a6:b3:e8:
                    c0:26:3f:e1:8c:98:28:70:aa:3d:d3:d7:5a:f5:b4:
                    ce:08:c7:89:5e:2a:9d:b9:2a:bb:62:99:d3:7c:af:
                    6f:c0:33:c1:b1:7d:52:36:57:2d:5c:95:f1:41:89:
                    a5:7e:0a:ee:a1:29:5b:36:f9:e8:e4:7a:f9:70:81:
                    80:d9:b5:0a:76:82:f7:d0:c6:27:a4:44:79:ac:5b:
                    8f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9B:92:7C:23:9F:8F:50:B0:9B:8D:E4:B3:D9:51:39:9E:7D:C1:07
            X509v3 Authority Key Identifier:
                keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b5:83:cf:ec:47:ee:35:d8:7f:bd:0d:13:3c:00:ea:8e:32:
         34:89:b6:fe:7c:2a:1a:bb:5b:c8:70:ec:8a:d4:e0:ae:df:c8:
         ae:7d:6b:a6:57:27:f5:74:05:2c:6d:ed:ff:a0:bb:67:2f:e1:
         d0:e3:0f:c2:08:ae:52:56:b6:35:d6:1a:37:c4:44:da:ae:05:
         02:28:a9:22:45:d6:13:cc:b6:38:1e:70:e1:4a:86:81:04:5a:
         16:5b:57:aa:f7:09:0f:4c:65:36:6b:dd:e4:3e:91:2a:8a:88:
         7a:31:09:b9:ac:0f:c8:4b:1e:f9:2d:c6:10:04:aa:c1:08:f6:
         e7:0c:75:1a:4c:03:22:2a:6e:07:45:52:10:2d:b1:f6:88:50:
         7d:5d:b2:89:3e:40:fa:bc:19:3b:ff:e1:e8:7d:9c:be:2b:c7:
         4f:6f:f6:18:ca:8b:74:7a:4a:8a:ea:bf:fa:86:63:1a:45:72:
         7e:6c:9a:eb:f6:3d:bb:41:ed:ed:62:52:59:39:7f:35:f8:27:
         a1:6d:c3:50:30:58:f6:c2:cf:10:58:2d:df:28:82:cb:67:04:
         ef:9c:6a:e1:bb:53:df:79:28:7c:27:7c:6d:23:ef:b0:f9:21:
         2c:66:a3:6e:81:a1:e2:06:4f:95:29:f4:e9:85:11:aa:1f:9c:
         4f:ad:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:36:52 2025 by rpki-client