Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          Qo7v6fL4fRgfSpiKiDmNVPkj6IJa6I5Qz9rAkoCZjvI=
Subject key identifier:   E3:82:A4:83:2E:2A:EF:A3:17:A7:3E:4A:5C:AA:6B:C7:4A:DC:F4:C7
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019921B20AE4CA0AFD3AC82A213B1CD61B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          1671
Signing time:             Sun 07 Sep 2025 01:02:20 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:20 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:20 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: Tsz8tTYH9oel3yIhIrhR+qXZGRmucjWiX5+R9ISMPtM=)
                          2: GM9qrO2uL8x1ZY0DdW6CbnXZWBw.roa (hash: +PS0Zeo/h7j5Rz8hACgz8q1qwFa7bESNHkPZUu+sEMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:0a:e4:ca:0a:fd:3a:c8:2a:21:3b:1c:d6:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Sep  7 01:02:20 2025 GMT
            Not After : Sep  8 01:02:20 2025 GMT
        Subject: CN=e382a4832e2aefa317a73e4a5caa6bc74adcf4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:7b:4a:1d:57:85:2d:23:81:8f:38:1e:28:
                    51:e3:f2:d2:22:2c:8b:99:ea:c0:07:99:c8:f3:55:
                    80:84:70:36:e3:fa:3c:3d:4c:9f:f2:74:bb:3f:0d:
                    42:0e:95:5c:1f:de:c9:f1:1e:86:0c:6a:28:e7:03:
                    fb:65:f1:33:56:dd:37:b8:d8:34:95:3f:bf:71:ba:
                    e7:00:8b:18:fe:64:a2:89:f4:8d:ea:9b:74:04:03:
                    07:28:de:0f:47:5b:c6:60:a7:3c:be:a6:17:2b:e3:
                    6d:8f:a9:1c:1f:52:15:98:bf:19:90:f7:17:97:e4:
                    30:99:a9:3b:9d:5f:93:c8:f6:56:2d:88:47:c9:1e:
                    71:9f:2d:2f:be:c9:d6:6a:c0:1d:4e:82:95:a0:5c:
                    b2:67:61:f8:a1:be:eb:f2:b0:04:89:78:98:2a:9d:
                    37:db:ae:ed:e1:38:26:b3:9b:06:20:3f:a7:0f:74:
                    63:c0:0e:c5:6f:4d:07:59:9a:c4:fc:f6:52:06:78:
                    0d:5d:2a:09:a1:80:56:36:a6:b1:8e:96:db:28:06:
                    ac:78:42:e5:63:33:06:19:1a:eb:0f:90:01:9f:c1:
                    ed:62:4a:00:46:a6:1d:a2:4e:b2:80:1e:cd:9b:b4:
                    4b:66:5e:97:27:84:57:f4:c4:49:70:59:8e:db:ea:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:A4:83:2E:2A:EF:A3:17:A7:3E:4A:5C:AA:6B:C7:4A:DC:F4:C7
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:06:a3:96:a4:42:81:94:c4:3f:87:68:5c:f2:0f:1f:cc:c8:
         ed:ae:ee:71:82:1e:fd:36:a6:b3:a1:50:5e:3f:ef:0f:33:15:
         95:3f:4b:7d:b5:5c:29:7f:6b:64:e3:c6:72:be:88:a1:9e:99:
         ad:9d:89:c7:39:6c:87:7e:a6:e9:4e:ff:84:12:6e:34:6a:f9:
         c6:3e:b0:d0:b8:18:f2:b0:0e:09:54:85:7f:42:b1:2e:c0:96:
         cd:8e:d5:61:4b:7b:ef:48:8e:7f:b4:47:1e:20:76:64:90:b8:
         83:c2:ff:5b:4f:ee:32:32:5b:14:4b:1f:88:60:03:64:45:ed:
         05:c6:52:12:d3:7c:8a:44:2c:3e:d0:ef:5d:ca:cc:ce:3c:34:
         63:bc:c3:12:2c:d8:9e:b6:3f:62:fc:02:95:9d:1c:38:99:62:
         dc:8f:df:99:cb:e1:17:9b:4f:19:dd:e4:5e:0b:99:57:6b:25:
         b8:cf:a3:17:08:81:71:98:17:05:6c:f9:a6:ac:f5:fd:4c:99:
         64:c0:f2:d5:47:35:ab:42:eb:51:f9:63:6f:da:ea:a2:cb:14:
         27:96:0b:dc:aa:e8:49:91:35:93:62:40:24:c9:53:80:9c:22:
         aa:c9:b8:1a:61:7a:d4:32:d4:ba:5d:29:10:cd:30:99:eb:d0:
         a8:95:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:04 2025 by rpki-client