Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
File:                     AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft (raw, json)
Hash identifier:          Gy6jeZWcOMLbFi18fYbx0yXBrgaDsZA7sHPmh0hJlcE=
Subject key identifier:   F6:10:0B:64:07:04:68:B7:91:A2:A8:25:D9:73:74:8C:D0:EB:AC:0B
Authority key identifier: 01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24
Certificate issuer:       /CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
Certificate serial:       019929A1730711AD335AD5E82541E2E33487
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
Manifest number:          1608
Signing time:             Mon 08 Sep 2025 14:01:10 +0000
Manifest this update:     Mon 08 Sep 2025 14:01:10 +0000
Manifest next update:     Tue 09 Sep 2025 14:01:10 +0000
Files and hashes:         1: 1-V8d9umP0McsFhAezBGsGExpglU.roa (hash: CUsrGluvA/qkzyOPwb3wxAIF8Xp3/wYNAg7YgPlNKrk=)
                          2: AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl (hash: aWZ0Yy+D90KdpsPHN0Z51RKx+x1gjRyVvri+qNWD4SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 14:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:29:a1:73:07:11:ad:33:5a:d5:e8:25:41:e2:e3:34:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=016dae23d2e2eb64c96853480e0778cbd3fd5624
        Validity
            Not Before: Sep  8 14:01:10 2025 GMT
            Not After : Sep  9 14:01:10 2025 GMT
        Subject: CN=f6100b64070468b791a2a825d973748cd0ebac0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f2:13:7b:e4:a1:d2:4d:a3:7a:cd:50:2c:19:
                    85:64:18:3b:04:ef:86:f8:27:40:ec:3b:19:1b:29:
                    2d:25:ba:bd:1e:cf:5f:71:98:8c:f1:4f:72:a2:3c:
                    32:e5:43:43:90:59:c4:b4:b8:c1:cd:6c:38:ff:ed:
                    9e:1d:7f:35:39:90:d4:8b:d8:fd:66:8e:01:f4:bd:
                    63:ac:17:1a:21:08:fd:bd:bd:d0:06:e5:5e:60:23:
                    43:17:68:dc:7c:52:34:2b:03:77:58:09:4a:a1:2c:
                    38:84:9f:38:54:59:81:25:2b:de:1c:5f:c1:4e:3d:
                    6f:7d:9a:28:07:ba:5d:37:06:75:a2:e9:41:b5:90:
                    e6:9d:0e:09:ca:4c:3e:45:a7:a3:f6:86:07:06:eb:
                    df:7a:c0:fa:ec:f8:7b:9d:44:0d:24:bc:14:c8:cb:
                    01:20:56:f4:4e:d8:00:e6:ea:44:7f:d4:31:b7:67:
                    d7:e2:c6:02:39:f7:40:d6:cf:b5:15:4a:33:0a:0d:
                    00:f2:83:25:a7:7d:50:98:f7:a3:d1:ab:0f:7a:79:
                    75:5d:9a:a0:78:d4:f9:7d:17:59:70:61:e0:44:5d:
                    d0:67:db:d6:2e:79:ab:fc:a3:68:92:b4:9f:c2:90:
                    dd:e7:5f:b2:c7:de:5a:d5:f2:da:d6:b7:80:ad:79:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:10:0B:64:07:04:68:B7:91:A2:A8:25:D9:73:74:8C:D0:EB:AC:0B
            X509v3 Authority Key Identifier:
                keyid:01:6D:AE:23:D2:E2:EB:64:C9:68:53:48:0E:07:78:CB:D3:FD:56:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AW2uI9Li62TJaFNIDgd4y9P9ViQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/b63337-35e3-4c5e-a3e2-181597c3107e/1/AW2uI9Li62TJaFNIDgd4y9P9ViQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:b6:1d:36:89:b5:8e:e2:fe:67:0f:46:b5:b8:9e:d8:e3:16:
         65:08:22:81:12:06:69:8a:50:23:3b:d6:dc:69:1a:d2:1c:ae:
         1d:37:bd:35:e7:c7:cb:58:49:f8:b6:d4:7d:23:57:5d:f3:fe:
         85:6a:14:e4:1d:6e:31:f4:45:10:0b:ce:5f:a7:05:30:8b:8a:
         21:8b:cc:0d:0c:fa:4d:d5:17:6a:e2:34:f2:b6:de:3f:eb:34:
         04:8c:b0:c4:80:53:c7:e3:b1:03:94:f4:b7:68:68:6d:e6:99:
         e0:5c:92:ed:b9:2d:d6:14:36:b0:b1:3c:c5:8e:09:bc:71:6d:
         bf:26:3e:4f:3b:22:62:de:c4:b8:b1:bf:55:dc:5d:2b:8a:2f:
         bc:71:67:83:55:dc:44:38:7a:e2:f0:de:2e:a9:85:6b:17:b9:
         72:0c:20:09:df:ba:b7:c7:cb:b1:40:41:15:e1:ef:5b:da:c2:
         8f:d8:c6:36:e6:f3:3b:9d:c6:08:42:e7:3d:06:e8:4e:01:72:
         c6:ea:77:90:bb:07:4a:56:c6:39:9a:33:66:80:f9:cf:16:fd:
         9c:02:e9:6e:a9:20:96:72:0d:4b:3b:96:66:ed:e1:a4:fe:12:
         9a:00:e1:b4:20:29:17:f4:8c:17:48:a9:9a:90:48:11:13:36:
         a8:af:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:05:57 2025 by rpki-client