Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File:                     1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier:          V/ITe1ePeLk2uzMSKoyzj5VjdAZMLWOkJJLy2D3QzkU=
Subject key identifier:   94:06:48:0F:E1:27:A4:E4:C0:EE:54:CE:D1:23:C2:C3:80:C5:F2:D3
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer:       /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial:       0199239F75E203729ECB2AD29E7EF4E6D675
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number:          0352
Signing time:             Sun 07 Sep 2025 10:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:16 +0000
Files and hashes:         1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: +8rBvs8kkfS84QLRngO4kRsZx+STuYeS1Dj6x3gvAhU=)
                          2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:75:e2:03:72:9e:cb:2a:d2:9e:7e:f4:e6:d6:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
        Validity
            Not Before: Sep  7 10:01:16 2025 GMT
            Not After : Sep  8 10:01:16 2025 GMT
        Subject: CN=9406480fe127a4e4c0ee54ced123c2c380c5f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:80:6d:3c:7b:b3:51:a4:16:d1:06:ae:a2:50:
                    25:3e:0e:6f:6a:94:e0:a4:31:73:d3:05:5c:e9:32:
                    9d:7a:1f:a1:9e:b1:03:97:86:02:a6:d0:5d:44:64:
                    c0:9d:20:fc:15:53:98:af:20:61:52:1e:47:58:37:
                    62:39:5b:ba:ed:27:9d:4a:c5:66:cb:56:4d:f3:da:
                    f3:77:df:89:ce:ec:4f:66:0f:1d:2f:dd:b9:79:ca:
                    cd:b1:c5:28:ee:2a:43:d6:d9:88:bc:43:4c:e5:2c:
                    ad:c0:d9:32:6c:e5:6d:54:5a:1b:83:04:0a:d7:3d:
                    41:a3:3f:08:51:67:6a:1d:d0:8a:6e:c2:46:40:12:
                    15:9a:3c:b4:74:53:71:75:b4:e8:7e:a8:59:2b:40:
                    12:80:c4:83:f8:ca:69:3f:36:bb:f7:5d:fb:5e:89:
                    44:22:52:1e:9b:49:77:8c:59:fc:f7:bc:3d:f2:9e:
                    43:fa:05:93:45:70:cb:bd:28:d7:d9:18:46:3f:ae:
                    fc:14:dc:a2:26:56:36:fc:c8:a9:a9:12:bf:19:0c:
                    41:d1:cd:74:32:86:91:b0:2c:1e:e6:5d:80:39:df:
                    67:63:5b:bb:7c:14:3c:e7:83:e9:f7:0d:12:8b:9d:
                    b5:75:2e:6b:7d:31:91:ce:20:e8:87:50:5a:8b:e1:
                    1c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:48:0F:E1:27:A4:E4:C0:EE:54:CE:D1:23:C2:C3:80:C5:F2:D3
            X509v3 Authority Key Identifier:
                keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:6a:23:ec:1f:f6:10:39:e8:06:44:98:35:25:07:20:a5:
         01:35:3b:03:76:76:08:d4:93:53:bd:cb:d3:6b:15:47:11:2c:
         27:cd:06:89:35:76:9c:1b:dd:da:7f:27:c5:54:2a:15:f7:d8:
         a7:fe:4f:c3:7f:1b:26:ef:b5:dc:e7:03:f0:cd:60:03:16:cb:
         5b:be:f5:97:1a:dd:c4:e5:3a:53:ea:eb:6c:1a:53:f1:17:fd:
         86:94:f3:f1:f9:db:95:40:16:35:3a:4f:23:f4:6a:bb:7e:e2:
         43:68:1a:ae:59:9a:58:30:b9:4d:1c:26:9c:df:4d:20:50:e9:
         86:99:33:66:e6:6d:a5:26:69:51:25:5a:25:d0:6c:ab:77:6c:
         bb:ef:6f:5d:c3:cd:56:a5:59:93:29:ed:14:e8:3b:f3:b4:56:
         2b:66:ae:f9:fd:a0:c8:48:a4:2e:38:90:2e:ca:cc:2a:ee:44:
         35:87:88:a2:52:fe:0a:05:d5:1d:78:f3:c1:1c:9c:d4:0b:63:
         91:6e:6b:a7:1a:c4:70:e2:65:40:8e:ac:6d:7c:14:49:09:68:
         76:3b:c7:0e:03:1a:fa:50:f3:5d:08:b4:5f:31:54:5c:90:d5:
         94:5c:2a:42:67:4c:b4:23:c0:ca:0c:9a:cd:de:a4:e8:ba:c0:
         9b:8d:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:06 2025 by rpki-client