Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
File:                     CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json)
Hash identifier:          uL7w7ZWimz8azJUcFbUz+ofQ4gQHsms6Fm5W55kePgQ=
Subject key identifier:   57:EE:7E:2B:76:90:12:C8:58:61:5B:66:61:81:FB:8E:BB:0D:1D:91
Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC
Certificate issuer:       /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
Certificate serial:       0199228CE11E00ACFCD828E45E63A1080E5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
Manifest number:          49
Signing time:             Sun 07 Sep 2025 05:01:21 +0000
Manifest this update:     Sun 07 Sep 2025 05:01:21 +0000
Manifest next update:     Mon 08 Sep 2025 05:01:21 +0000
Files and hashes:         1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: KBvSV4zHDQTBI91V0aANKtWk6/cHGfaKj+q8+c+Gbts=)
                          2: mIMZrEW18-_5KGhaxhfyAse2jaU.roa (hash: 6Qvzu2ngRsyEUpj0qpA3Dkp0CWaU4iSnWXbsJngfWw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:8c:e1:1e:00:ac:fc:d8:28:e4:5e:63:a1:08:0e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc
        Validity
            Not Before: Sep  7 05:01:21 2025 GMT
            Not After : Sep  8 05:01:21 2025 GMT
        Subject: CN=57ee7e2b769012c858615b666181fb8ebb0d1d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:89:db:ea:cb:47:4a:ad:e4:38:1f:13:15:
                    64:ad:78:c6:40:0c:82:db:7d:52:20:6e:7f:6b:1a:
                    03:21:3b:12:bb:e4:d4:60:f8:bd:4e:8a:b5:cd:f8:
                    85:e6:6e:de:03:b7:e2:2c:82:f9:86:53:63:ec:fb:
                    35:61:5f:6b:91:d7:6b:53:70:d2:01:56:ab:66:d5:
                    af:3c:e7:cd:1d:fa:58:3d:30:8c:c0:35:33:54:ff:
                    e6:29:73:36:d4:1c:00:17:bb:e3:9d:58:5c:4e:2a:
                    e8:95:16:3b:f7:04:9f:a4:bb:49:2e:2e:c8:30:5c:
                    42:8b:9a:f1:ab:36:43:4b:74:8f:50:9e:3c:41:3b:
                    7a:c1:fc:80:05:ce:27:7e:07:2f:ba:51:94:1e:33:
                    f0:49:65:17:57:28:10:6c:d8:48:c4:72:10:d5:f6:
                    4a:2d:3b:fd:8c:63:79:b4:56:6d:b8:7c:6f:17:eb:
                    d9:84:23:94:40:a8:ff:e3:a8:9b:dc:72:44:0b:96:
                    66:9d:43:0f:93:58:eb:8e:3d:53:c2:07:6e:a7:45:
                    f0:52:f4:4b:55:18:77:5e:c2:fe:39:47:8e:a4:26:
                    05:42:39:b5:75:6b:64:de:f7:07:4e:b9:50:9c:a6:
                    96:5c:2c:98:97:18:0e:9b:1a:18:fe:e7:50:95:0f:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EE:7E:2B:76:90:12:C8:58:61:5B:66:61:81:FB:8E:BB:0D:1D:91
            X509v3 Authority Key Identifier:
                keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:80:77:55:13:7b:e5:7c:58:93:58:bf:e0:4b:be:a5:e5:ae:
         e7:7e:db:dc:05:db:82:50:9d:a3:03:83:9c:d2:08:5b:73:25:
         1b:81:46:29:92:fe:11:8e:f6:b0:e5:01:83:aa:b5:51:71:08:
         27:68:d8:8c:f8:7d:6f:17:7d:53:ad:85:3a:64:15:4c:f4:3a:
         fc:1a:29:32:cf:dc:96:2f:41:dd:c5:63:ff:ef:f9:00:df:d1:
         44:8d:e5:ca:77:61:35:2c:c4:a0:ed:c3:e6:fd:08:60:46:7c:
         9e:45:ff:c9:19:20:e7:69:cb:e2:23:84:1e:cb:8b:51:ff:82:
         e2:d9:2e:03:4b:9a:0f:7c:74:df:cb:19:22:e7:f1:69:a5:10:
         34:17:95:31:93:74:ba:0d:78:0d:46:21:f4:73:a3:04:66:e6:
         f6:32:e4:27:fd:19:bf:ea:6d:ac:d6:6f:90:97:5e:47:90:37:
         dd:b1:7f:cc:f7:b4:5e:13:d4:2b:ee:7f:4a:c8:1e:f7:eb:4e:
         5a:2b:1c:89:64:8f:49:93:06:9a:46:50:16:b9:00:7a:29:9b:
         06:aa:cb:ac:75:ed:bf:a4:d1:a8:23:c0:cf:a2:f7:38:43:44:
         89:34:ad:8b:cf:cf:47:02:96:e2:fe:f3:67:fc:fc:33:9e:b3:
         2c:7f:3f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:46 2025 by rpki-client