Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
File:                     nWuXdMlIdsmDId4yAbEbdaE1jRk.mft (raw, json)
Hash identifier:          QF1jEKY1P+khn3IgyrzfeCHyfNsBy525gyoQ+f4wxmc=
Subject key identifier:   91:4A:FF:E0:55:4D:A0:70:47:BA:02:0D:80:AD:F9:87:48:08:F6:A9
Authority key identifier: 9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19
Certificate issuer:       /CN=9d6b9774c94876c98321de3201b11b75a1358d19
Certificate serial:       019926D6E831800F3E3A7AAD6BE218A9A606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
Manifest number:          11A3
Signing time:             Mon 08 Sep 2025 01:00:42 +0000
Manifest this update:     Mon 08 Sep 2025 01:00:42 +0000
Manifest next update:     Tue 09 Sep 2025 01:00:42 +0000
Files and hashes:         1: 5yK2af_g5CTlXz9q-R5Ey4S2raY.roa (hash: LxU9aJpGxPnyOcQ82YucJ2+C9wvejuknSWDM/RouRtA=)
                          2: HXLS-XKu3_p7nhpZ2K8scEyS_rc.roa (hash: 8XJ8ceqUC/FtGHEdtNIo+tnT3APlE19braxx2C56keI=)
                          3: NQOelXfnh9zNy4F5hN9_tYjE3Bs.roa (hash: qXIyT3lUz5bJt0IF4d25cysT8WLakbijoLlu5EAXUys=)
                          4: _fuT4R68BHlPpUP6HiVZDSmxINI.roa (hash: bvu+tWo4UXme3jTLsLEJ6SMX9XI3uAoVhAKkTxW9r90=)
                          5: boOUh_OegScUQI0rJ0GXkth8K70.roa (hash: h8bMxthrp6BSgypE0yBkUmIOsuBuRoBa/El8mfbO7Rs=)
                          6: dencvyi0TxmMkZDQCX9rZJN2RzU.roa (hash: B52p98p3HEzzhef7/oXAaRqNFYHk2h3tC+DtHUn18nc=)
                          7: nWuXdMlIdsmDId4yAbEbdaE1jRk.crl (hash: Ycb64RlNjdl3OFRwvxc4nCkci3sLLjLHRwhsFh1O1ys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:d6:e8:31:80:0f:3e:3a:7a:ad:6b:e2:18:a9:a6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6b9774c94876c98321de3201b11b75a1358d19
        Validity
            Not Before: Sep  8 01:00:42 2025 GMT
            Not After : Sep  9 01:00:42 2025 GMT
        Subject: CN=914affe0554da07047ba020d80adf9874808f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:ae:26:68:3a:8d:86:13:68:7d:f3:7b:91:
                    f5:8b:d3:18:60:64:e5:40:c1:1e:2d:48:4c:e3:4d:
                    49:bf:82:03:64:ae:59:ce:fe:8b:4d:bc:20:a1:3f:
                    44:a0:1f:73:83:ec:12:53:26:65:72:ba:88:ca:6d:
                    7f:9d:64:5b:dd:e3:44:54:23:85:68:90:a6:f4:e2:
                    db:65:93:46:04:89:a4:8d:fb:ad:68:b1:9d:62:70:
                    f8:ac:17:90:e7:7f:07:c8:a1:a9:ff:76:c1:2d:7d:
                    30:c5:3c:4e:03:dc:76:21:11:a5:51:1f:61:38:56:
                    34:23:7a:c8:54:6b:99:a2:46:d0:7b:9b:ef:1f:fc:
                    5c:aa:e7:19:9c:40:0e:eb:33:0e:47:8d:8e:33:70:
                    71:f2:37:a2:8c:d6:a7:d0:46:6a:96:02:e9:b0:8f:
                    7b:d6:49:9c:27:17:1c:89:45:65:d7:17:8b:ef:53:
                    5a:39:32:8f:ef:f5:f9:81:5f:68:1c:83:f7:69:9e:
                    fa:7e:e0:9f:72:8a:47:32:f6:f5:07:be:90:95:73:
                    27:35:00:94:3a:ed:09:4a:f1:7e:46:17:0e:f8:38:
                    26:04:45:19:e2:58:fe:a4:f8:6e:a8:11:32:4a:49:
                    08:66:b3:bb:7f:59:f5:26:eb:72:f6:70:39:76:67:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4A:FF:E0:55:4D:A0:70:47:BA:02:0D:80:AD:F9:87:48:08:F6:A9
            X509v3 Authority Key Identifier:
                keyid:9D:6B:97:74:C9:48:76:C9:83:21:DE:32:01:B1:1B:75:A1:35:8D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWuXdMlIdsmDId4yAbEbdaE1jRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/40cb9c-c426-48ab-9968-a56bdfadb81e/1/nWuXdMlIdsmDId4yAbEbdaE1jRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:bf:3b:15:d6:f9:d6:5a:3d:26:46:49:07:1a:8f:d9:3e:31:
         d1:81:9a:f3:e3:49:8c:ff:ab:53:5c:60:38:60:43:87:86:fd:
         f7:60:aa:ff:ff:cc:46:d8:50:9d:56:ec:aa:0e:cd:27:a4:a8:
         da:fb:41:d1:77:ae:31:1f:c4:cc:73:8b:12:32:a2:88:02:42:
         88:72:37:21:84:71:07:77:a0:86:cd:d3:3d:80:9f:6d:59:3d:
         41:46:ba:a8:e9:7c:be:a1:11:68:ad:01:94:f8:4d:33:df:fe:
         9c:9e:57:ba:53:0d:47:58:cf:26:86:e6:48:eb:85:c4:ee:d9:
         b0:dd:e3:94:41:a5:b5:c0:5a:de:0f:c1:60:65:3f:0d:06:92:
         47:5b:9e:20:18:d6:11:15:24:26:85:c2:a1:99:c7:30:30:a3:
         22:b3:c2:ff:e4:ef:d7:4e:e8:cf:ff:39:04:56:95:97:08:4a:
         56:13:23:78:c8:ac:91:f5:6d:c6:61:87:46:24:d2:71:22:71:
         b1:11:7a:b3:27:53:3a:6f:ac:8f:ce:b6:36:ef:fa:f9:a9:9c:
         39:de:d0:e8:b5:99:3a:b7:05:bf:5b:b4:8a:0c:8a:64:29:ad:
         79:8b:bc:24:a4:7b:b6:af:74:68:e1:82:3a:07:6d:1e:90:e3:
         34:f6:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:54:46 2025 by rpki-client