Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
File:                     r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json)
Hash identifier:          ZGy/iLonAthVwUpFCnd45SiX2PWN7T+togKOeEwz2d4=
Subject key identifier:   E6:C3:BA:8E:94:3B:93:1D:74:BC:F9:CE:28:83:82:D3:88:9E:DC:25
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Certificate issuer:       /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial:       019935012E61147EDB4EC54EA94A698B2F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
Manifest number:          0130
Signing time:             Wed 10 Sep 2025 19:01:33 +0000
Manifest this update:     Wed 10 Sep 2025 19:01:33 +0000
Manifest next update:     Thu 11 Sep 2025 19:01:33 +0000
Files and hashes:         1: HIQgSnhii2MmaCB9iCEZZjQs0es.roa (hash: ZmTRYjwIZuazrIV6CyDdqn6baHfY786spUlKnzCEtrI=)
                          2: UF3nc4j8ES6AUmPlDCdXrI1nxDQ.roa (hash: hD495WJ9hxFC82eHTfptFvgoXg3HInB/uKq3sNI4Hm8=)
                          3: bBGQxULUfgQ-36zlMXfyfxhMgv0.roa (hash: gb5ulfRe2yG9hXwqyCkBkrrYHVbdMbZmAMmYnD1gFm0=)
                          4: mqFsim5-hi0MZTcLot58PVfSTYM.roa (hash: eHkkkj65fxN14PVyu/eH+6Rea5ciEBRsLvLo2M2czPQ=)
                          5: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: 6DSttlgUKN5hiVIeJC1ZfY019i+s2KS6N+6Dd80GL2Y=)
                          6: zL5-bAaGKrg00nXa4Fn138IIxZ4.roa (hash: M0v0JdyOR6B67NfHINIqXbYt7Qf8KStgSSSkak8wlls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:01:2e:61:14:7e:db:4e:c5:4e:a9:4a:69:8b:2f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
        Validity
            Not Before: Sep 10 19:01:33 2025 GMT
            Not After : Sep 11 19:01:33 2025 GMT
        Subject: CN=e6c3ba8e943b931d74bcf9ce288382d3889edc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:41:a4:41:f2:da:1b:3f:e2:13:b3:c0:cb:f8:
                    97:c0:9c:e0:a7:7e:4f:b7:27:07:3b:72:ed:c0:6e:
                    ec:0c:4f:a5:19:cd:7d:88:af:56:e4:c1:dc:eb:3d:
                    c6:15:ad:82:3f:59:05:e3:e5:af:01:0f:d4:f6:fb:
                    cb:15:b4:9b:9f:45:5c:d8:db:7a:76:73:22:59:ee:
                    b2:99:94:64:2b:f0:25:49:15:ce:9d:93:35:03:b3:
                    c1:77:14:12:84:2f:fc:08:3b:28:b2:47:5a:41:49:
                    9d:47:1f:41:e1:ea:97:e1:04:cc:f5:f3:79:7c:ea:
                    f4:32:79:e0:89:36:a2:ed:d7:77:77:72:fe:a0:67:
                    5a:56:a5:69:ee:3d:d5:ae:df:d0:3f:52:3b:9d:3e:
                    7c:c7:36:bf:25:29:ad:8a:d3:c1:35:18:3b:0f:05:
                    27:ad:c2:3c:24:0a:f3:4c:13:eb:f3:5d:4a:28:25:
                    8d:23:17:fc:72:ea:73:bf:ec:06:aa:b1:0e:78:35:
                    cf:6d:fc:9d:40:be:83:6e:1c:1e:d7:4a:e0:0d:ed:
                    b2:db:d7:7b:25:13:66:03:1a:c9:b1:e2:03:75:78:
                    20:48:eb:04:37:96:b4:83:49:09:d8:98:c0:21:e6:
                    ae:8d:92:0a:87:66:2e:2c:55:4f:2d:5b:a3:1a:9e:
                    86:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C3:BA:8E:94:3B:93:1D:74:BC:F9:CE:28:83:82:D3:88:9E:DC:25
            X509v3 Authority Key Identifier:
                keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:36:d1:ff:7e:22:29:79:60:b8:51:15:a6:5f:a5:f5:02:
         98:ae:21:6c:7c:88:0f:69:0b:7c:f9:1b:3d:b3:a2:73:ac:11:
         33:9e:74:5e:e1:48:df:33:6a:9d:34:ac:08:70:ec:8b:e4:35:
         ea:c1:80:3f:f4:a0:f0:86:90:76:71:94:a6:6e:29:1d:d5:ce:
         a8:43:d2:65:1f:43:00:d7:40:69:e0:e8:9e:8c:a8:80:b3:99:
         46:c4:5f:80:54:f3:55:c4:2b:1e:8d:92:f2:51:bb:bb:8d:e5:
         45:a4:10:fb:8e:33:08:5f:da:a6:bb:fb:35:b0:4d:8b:80:ce:
         e3:41:63:ad:55:8c:0f:90:35:93:10:cb:01:3f:15:fe:fc:8f:
         c9:27:01:5b:d1:dd:09:ba:b3:86:6f:45:8f:c9:71:3a:fa:83:
         d7:88:d5:83:b0:08:67:12:d1:11:c9:8e:bd:7c:74:5c:94:ab:
         b8:e2:14:70:0e:44:98:05:54:8e:86:17:ab:0a:df:9e:79:ce:
         26:60:1d:ad:9d:4a:0c:67:a4:2b:91:56:25:a3:bf:18:71:c3:
         9a:f9:93:b0:51:31:56:15:c1:6e:ab:b4:ec:33:ae:49:b0:23:
         2a:9e:1f:2e:fb:62:13:6d:79:0c:22:a1:4f:d8:77:f2:87:aa:
         e5:75:8a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 04:12:55 2025 by rpki-client