Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
File:                     nTW9eP7OI2XlsT9SOIfS2NakU_k.mft (raw, json)
Hash identifier:          zcEowx+VoqY9Ai+ecUc6sXFDuHzWbAkPxnrEWLN+uNQ=
Subject key identifier:   15:AE:9D:4A:EC:81:3E:F0:08:BB:FD:99:1E:E4:5E:0B:C2:F0:65:55
Authority key identifier: 9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9
Certificate issuer:       /CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
Certificate serial:       01992330F30180B4443C1D72B876B8EAD52C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
Manifest number:          94
Signing time:             Sun 07 Sep 2025 08:00:34 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:34 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:34 +0000
Files and hashes:         1: nTW9eP7OI2XlsT9SOIfS2NakU_k.crl (hash: yqJzYf89C+FnVpYG3vvwUhh4FtXOofC33UrOFBaD158=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:30:f3:01:80:b4:44:3c:1d:72:b8:76:b8:ea:d5:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d35bd78fece2365e5b13f523887d2d8d6a453f9
        Validity
            Not Before: Sep  7 08:00:34 2025 GMT
            Not After : Sep  8 08:00:34 2025 GMT
        Subject: CN=15ae9d4aec813ef008bbfd991ee45e0bc2f06555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:6d:32:63:f5:60:64:be:63:9d:48:81:2e:20:
                    49:9e:b5:65:9c:1c:e1:b2:e2:26:d1:e0:bf:11:e9:
                    dc:c9:21:02:24:cc:76:be:9c:b0:51:37:c7:c7:4a:
                    be:26:32:e5:cc:13:b8:3d:f2:f8:c0:f7:23:07:fa:
                    55:3e:50:71:a2:fb:88:ce:de:34:05:5b:45:38:69:
                    45:2d:e3:e8:91:b3:21:a9:fb:9b:23:30:aa:48:78:
                    40:1d:90:cd:89:05:1a:07:41:77:4a:61:ec:5a:6b:
                    15:1c:7a:85:36:f9:22:33:da:81:3b:98:05:bb:ec:
                    50:42:ac:a2:c7:d5:b3:4f:7f:89:97:48:dc:13:fc:
                    a7:a1:97:7b:38:3d:8e:59:74:83:ca:03:dd:ab:86:
                    ce:eb:63:bc:8c:92:91:33:ee:cc:e4:21:2b:8d:60:
                    2f:08:80:59:1b:4b:87:af:84:78:7e:c0:aa:fe:d2:
                    6d:43:05:5a:47:f2:ad:8a:f4:0d:70:de:e1:2d:2b:
                    22:39:99:09:c6:53:4d:ce:da:b3:2c:ca:18:23:e4:
                    de:b8:40:fd:54:80:bc:39:0d:4f:17:22:7d:df:d1:
                    c9:df:7b:14:a3:08:af:e9:dc:6e:8a:74:90:95:a8:
                    8e:14:c8:32:cf:c0:39:58:b7:a1:91:93:a3:bc:60:
                    32:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:9D:4A:EC:81:3E:F0:08:BB:FD:99:1E:E4:5E:0B:C2:F0:65:55
            X509v3 Authority Key Identifier:
                keyid:9D:35:BD:78:FE:CE:23:65:E5:B1:3F:52:38:87:D2:D8:D6:A4:53:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTW9eP7OI2XlsT9SOIfS2NakU_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5ee153-21a9-41e9-a599-6c442324ca3c/1/nTW9eP7OI2XlsT9SOIfS2NakU_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:31:d9:53:8d:ea:5b:f7:d7:56:05:59:79:fe:c2:e9:6e:72:
         2a:af:e8:04:c9:80:e5:5a:57:2a:f6:df:93:9d:b5:a8:e9:ff:
         0a:30:96:6c:52:0f:2f:fc:b5:2d:d8:10:3e:e3:bc:78:28:3d:
         8e:2b:cf:50:eb:e0:54:38:26:f1:7f:36:e4:1d:ba:87:ed:31:
         69:4e:49:85:8e:29:a8:e8:22:e1:ef:74:30:3c:5b:fe:ac:06:
         8f:45:86:81:01:18:69:0e:4a:e6:61:0b:af:7a:1e:e8:25:12:
         98:f2:82:23:c9:73:35:14:2c:7f:a6:bb:29:b0:fa:5c:eb:2a:
         73:36:e6:42:6d:57:9b:c7:0e:ac:99:40:f7:b9:f8:01:7a:7a:
         38:b0:27:8a:1f:ac:11:ea:e9:57:7f:83:e2:b4:e5:9d:14:d5:
         77:91:33:85:37:b2:f4:8b:9e:d6:48:01:f6:3c:8f:95:5b:7b:
         38:e9:bd:a3:83:15:77:16:0e:d7:08:f3:0b:a9:f2:32:e5:e4:
         e5:eb:df:d2:1e:fe:99:2d:20:be:84:55:90:f4:7b:fc:59:ad:
         13:57:0b:af:06:fb:96:85:38:2e:c4:b9:8c:e8:80:ea:ac:ce:
         9a:d2:3b:e5:f8:7d:7b:59:04:9e:10:0d:31:07:bd:10:f2:0c:
         b0:ea:41:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:43 2025 by rpki-client