Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
File:                     80YWUeW-JFCXcpdbqYxw7G7jzXs.mft (raw, json)
Hash identifier:          Fyn1zAvzwedDlSQKSDM4CASH7LTtTr9QllUC3P0wil4=
Subject key identifier:   25:17:A6:B3:94:71:58:56:2F:21:40:B6:23:F9:14:53:28:9D:CD:0E
Authority key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Certificate issuer:       /CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Certificate serial:       0199221ED91C73C82CFBCA178EC4A00E33BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
Manifest number:          D6
Signing time:             Sun 07 Sep 2025 03:01:10 +0000
Manifest this update:     Sun 07 Sep 2025 03:01:10 +0000
Manifest next update:     Mon 08 Sep 2025 03:01:10 +0000
Files and hashes:         1: 80YWUeW-JFCXcpdbqYxw7G7jzXs.crl (hash: r0+gfPzstH5IY8wAtNCMxYj5Vtf7CcuicbGZiU/9YJ4=)
                          2: fo6AzO5DMZbEdyeTgxz228bW1-E.roa (hash: al64jxtISPerL/dv+x+BvAqZkIG0XvlrHsMW1HD1s0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:d9:1c:73:c8:2c:fb:ca:17:8e:c4:a0:0e:33:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
        Validity
            Not Before: Sep  7 03:01:10 2025 GMT
            Not After : Sep  8 03:01:10 2025 GMT
        Subject: CN=2517a6b3947158562f2140b623f91453289dcd0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:63:cc:f3:56:35:b5:3f:c2:d1:e4:a1:6b:30:
                    90:a8:a9:72:c6:be:63:65:ad:9a:d9:15:dd:35:b7:
                    18:23:98:54:2f:95:98:1f:fc:0d:4b:fb:b8:fd:96:
                    0f:af:a8:df:3d:77:32:ef:82:02:14:35:ce:3a:f1:
                    08:18:8e:19:d2:d5:67:d7:54:d1:55:1e:d1:ae:a9:
                    d5:8e:ab:7c:22:4e:4f:2e:93:6d:d0:7c:76:5a:5d:
                    80:cc:21:86:bf:fb:e3:09:bf:6e:8e:9b:b5:f9:2f:
                    54:1c:3a:1e:d8:7d:1b:e9:e2:f9:76:56:0b:19:26:
                    2a:eb:b0:15:59:4d:bf:7c:31:fc:fc:8b:00:7a:14:
                    fa:51:38:7b:39:20:62:70:b3:62:74:a7:f3:a0:5a:
                    c9:f2:10:59:e1:17:43:c2:01:cb:c8:d0:7a:81:39:
                    ec:04:d7:41:ba:32:30:4c:3a:7d:46:17:0d:ea:b3:
                    fc:e2:39:c4:99:8a:fd:ea:3a:02:f2:05:f0:17:35:
                    29:5c:dc:b2:8c:8d:5a:7e:46:32:32:64:9f:44:99:
                    5b:da:f5:1f:ff:f9:40:2b:0a:4e:81:a7:99:8d:c7:
                    a6:24:23:8b:2a:50:cc:f4:86:2c:9c:5c:4a:0e:55:
                    a6:e9:54:05:31:ad:c1:2a:06:ab:14:b6:d4:99:74:
                    e4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:A6:B3:94:71:58:56:2F:21:40:B6:23:F9:14:53:28:9D:CD:0E
            X509v3 Authority Key Identifier:
                keyid:F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:b9:07:be:f0:be:d8:40:6f:60:a6:1c:cf:ca:b8:7a:2b:
         12:1f:a5:90:2a:09:b6:81:19:49:20:c9:d4:7f:25:94:9a:dc:
         fb:33:c6:ab:3e:a9:fb:be:e8:a0:bd:90:3a:8b:5e:b3:d0:4e:
         63:c9:88:c9:04:d1:df:11:a2:6f:aa:6b:2e:ad:ba:26:81:5f:
         97:5e:6e:e1:84:af:eb:7c:f7:db:a9:7d:83:58:c2:2e:1a:95:
         98:23:b6:38:36:af:ef:ad:7e:38:8b:be:e0:f8:33:59:52:21:
         5f:af:7c:87:0c:77:f9:0b:05:7c:e4:e4:09:55:cb:bd:6e:83:
         4f:f8:e9:83:98:d3:72:79:bf:68:27:25:bc:ad:94:5c:20:02:
         16:18:5d:9a:f4:51:69:fc:55:d6:31:5c:56:4a:ec:86:f0:a3:
         ee:5f:5a:a7:b1:96:1a:e9:1a:d2:97:9f:b6:c6:03:9e:3f:d3:
         7a:33:85:23:08:79:30:63:8a:e2:fe:26:7a:1f:04:2a:b4:e6:
         98:bd:9f:cd:93:03:28:94:c1:78:d3:70:cd:6c:69:4d:86:5d:
         f2:2f:da:df:88:49:82:04:13:74:11:75:d0:82:e6:04:79:f5:
         98:4d:e5:f4:87:12:a8:85:30:a7:2d:ad:b3:04:5e:bf:10:47:
         58:ad:b5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:40 2025 by rpki-client