Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          J9A1kl1sloUarm50yx6BvrVw7/nkQ4B3TGZ5PJI8KkY=
Subject key identifier:   AC:B4:EF:C9:6E:41:D7:6C:C9:67:4B:BC:4D:DE:E5:A6:1B:F0:FF:AB
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       0199172D376C018006660A291384833C9694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          11F2
Signing time:             Fri 05 Sep 2025 00:01:03 +0000
Manifest this update:     Fri 05 Sep 2025 00:01:03 +0000
Manifest next update:     Sat 06 Sep 2025 00:01:03 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: OpaCxW+pLFcuc7Ccx88BFyeZSMafd8uRh5Oxj7U4h9k=)
                          2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Sep 2025 19:46:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:2d:37:6c:01:80:06:66:0a:29:13:84:83:3c:96:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Sep  5 00:01:03 2025 GMT
            Not After : Sep  6 00:01:03 2025 GMT
        Subject: CN=acb4efc96e41d76cc9674bbc4ddee5a61bf0ffab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:30:c9:e9:73:47:a4:63:cf:54:3d:db:ab:b1:
                    6e:e8:eb:fd:af:00:6a:fa:6c:5a:1a:13:4d:8b:15:
                    2c:ee:ba:07:62:75:a9:cd:78:07:95:26:90:2b:21:
                    82:6b:c2:47:b4:76:26:c1:6c:e7:15:6f:cc:0e:73:
                    28:1b:e0:70:b5:85:82:f0:43:c6:56:c0:a5:da:0b:
                    38:92:56:2f:0a:25:83:5e:8a:72:3c:ac:ec:2f:72:
                    16:3c:91:0f:79:e1:42:e4:1c:4a:46:5b:66:11:e8:
                    cd:98:6c:69:a3:6f:1c:5a:33:27:2d:b3:b2:d5:b3:
                    96:76:15:ec:28:cc:be:5a:f7:f7:56:2e:1f:aa:d1:
                    12:b6:a6:57:f7:bc:d7:05:73:d1:d5:f1:61:7d:96:
                    5a:5c:7e:01:55:69:8a:0b:12:36:ee:07:af:cf:a9:
                    a9:ec:0b:47:3c:06:1a:cd:35:22:46:4b:62:e9:5a:
                    1d:5a:e8:db:07:ad:06:c3:90:d5:84:65:52:14:c0:
                    d5:80:7d:14:76:17:5d:49:76:1a:6d:3c:97:8a:a0:
                    11:81:47:1c:d1:b9:70:d7:e9:80:27:57:d7:66:70:
                    c3:10:c7:9a:5f:6d:ad:4a:97:10:ec:84:f6:5f:b6:
                    cd:16:06:61:4a:81:b3:78:65:8d:30:d7:6f:94:39:
                    e0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B4:EF:C9:6E:41:D7:6C:C9:67:4B:BC:4D:DE:E5:A6:1B:F0:FF:AB
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:2f:13:dc:8a:12:ed:eb:38:b0:8d:54:b8:69:4a:2f:a4:c8:
         0b:27:b6:b8:29:91:f9:87:f4:60:e0:c2:d9:84:64:59:6e:05:
         56:d3:e5:8d:2c:b7:92:c1:77:54:b7:15:01:b6:33:11:43:d0:
         23:ac:5c:a0:0b:f1:17:79:f3:06:24:3a:30:30:fe:8c:a9:5e:
         5c:80:09:3d:11:8f:dc:1c:c8:8c:d6:d8:b6:52:fc:32:5b:aa:
         87:64:75:4c:39:fd:40:64:4d:9d:9d:2b:7d:47:7a:43:46:54:
         fe:8e:62:4d:d7:08:1c:9f:ec:76:16:18:5c:26:5c:17:2b:83:
         bd:bb:70:92:60:c1:55:0c:1d:f5:9f:a7:38:ba:69:d7:80:36:
         b2:47:6c:3d:a2:fc:d7:4b:17:91:74:ab:d4:10:e3:d6:43:62:
         d1:5c:d9:4b:25:ee:34:4b:12:4b:36:24:fd:de:2b:ff:ba:c4:
         20:bc:40:b2:73:08:ca:67:62:42:bb:8b:71:e6:45:a5:dd:d6:
         76:2a:7c:71:dc:40:26:47:3d:79:cd:84:d3:bd:21:a8:be:d5:
         9a:e8:76:bb:73:16:aa:23:9b:b5:01:be:82:a4:2d:21:3d:bd:
         f6:e6:76:04:b4:ec:67:f6:10:db:a2:29:e8:fb:21:af:97:a9:
         60:75:a9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:26 2025 by rpki-client