Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          R/bjfmM2JAixnXq269BBlR9HIue0av7LKYS/OXeDPfQ=
Subject key identifier:   E8:64:DA:EE:F2:C2:02:DA:ED:23:CB:A3:E9:82:A5:57:BC:B5:7D:A1
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       019931C84FACD52FDD8732863D5F98773D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          0392
Signing time:             Wed 10 Sep 2025 04:00:35 +0000
Manifest this update:     Wed 10 Sep 2025 04:00:35 +0000
Manifest next update:     Thu 11 Sep 2025 04:00:35 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: lOiptnQssEithr96efnzEaHgWEk00FYNBizrMRAbyg0=)
                          2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:c8:4f:ac:d5:2f:dd:87:32:86:3d:5f:98:77:3d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Sep 10 04:00:35 2025 GMT
            Not After : Sep 11 04:00:35 2025 GMT
        Subject: CN=e864daeef2c202daed23cba3e982a557bcb57da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ed:ac:79:2c:03:bd:f8:c2:11:81:04:29:1b:
                    d8:88:14:2d:e1:bd:d5:d7:b9:85:b1:e9:7f:23:f7:
                    75:ff:06:86:1a:6a:a8:0c:4c:67:01:b5:3e:f2:36:
                    85:a8:51:20:36:ca:56:75:ac:0e:8c:17:b9:f5:32:
                    51:d2:75:08:76:41:d3:57:40:d0:dc:59:2b:d9:42:
                    ef:88:ea:18:9a:41:7a:e0:c4:02:e9:e2:88:8d:71:
                    61:62:a4:f0:7a:14:38:c1:68:52:b4:10:b7:5a:96:
                    2f:1f:65:f1:3e:22:ca:1f:83:42:e7:4f:9c:ae:9e:
                    65:52:6f:f5:87:33:bd:53:52:54:48:77:53:a8:f8:
                    f8:b2:1b:dc:5e:fd:30:d5:20:e1:6b:6b:57:a0:36:
                    54:ad:8f:4b:9a:a7:b3:63:0b:ea:00:e5:87:69:4d:
                    63:f9:f8:39:11:79:2f:64:c2:cb:5a:eb:a5:8b:fd:
                    a8:4a:17:d6:e0:27:9a:74:d0:f9:48:34:15:f5:29:
                    e9:e7:7f:83:a0:35:6f:2f:f0:4f:74:39:c9:77:d8:
                    24:36:de:56:17:ba:99:bf:69:27:b7:83:2e:5e:ef:
                    85:75:8f:69:69:14:e0:4a:0c:c6:f4:6d:d4:ee:a7:
                    b8:a4:b9:2d:65:c5:39:68:a8:ba:53:54:83:e6:5d:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:64:DA:EE:F2:C2:02:DA:ED:23:CB:A3:E9:82:A5:57:BC:B5:7D:A1
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:97:52:d5:0e:af:e4:a6:15:44:f6:40:a7:e6:08:75:72:36:
         19:7d:d0:91:f8:28:c7:fb:39:d4:4f:c2:8a:50:b3:24:11:8b:
         a6:ad:66:9a:6a:14:e6:ce:df:36:f5:6e:7d:c6:ad:31:39:86:
         b1:6f:80:0d:0a:c8:dc:ac:25:f2:43:07:68:cc:d6:3c:b9:14:
         b8:1c:98:33:6d:21:84:a8:88:40:3e:e6:b1:2b:b8:19:5b:b9:
         e7:a8:76:d3:c4:3a:e8:a8:33:4f:3a:48:90:b0:da:ad:31:76:
         94:f1:ad:54:74:b4:4e:b5:77:17:91:a9:a9:25:62:d5:2b:93:
         78:e2:18:27:d2:5f:c3:15:9c:81:dd:56:f6:1e:c1:89:d0:1e:
         26:aa:89:6d:16:a4:9f:c5:ce:72:04:fd:52:4e:bd:b2:02:17:
         26:5e:74:4b:5a:aa:85:a1:44:ea:84:32:f0:ee:52:61:23:8f:
         f8:ca:72:09:e6:a3:45:90:1f:a7:42:d0:0e:b8:f1:b7:10:42:
         cd:7c:02:6c:12:b6:cf:58:59:b5:60:60:bf:26:71:a7:2d:ae:
         4d:2a:94:d1:58:80:3a:b6:d2:95:00:53:34:4e:84:84:fa:1c:
         d4:e1:14:d9:86:ba:7b:c7:fa:7f:9d:ce:ac:11:09:1f:e9:fe:
         ba:f6:87:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:32:20 2025 by rpki-client