Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          nY+SicslZKLnAqPwO9uxFGTzylsl639q030+7CQkakQ=
Subject key identifier:   8A:51:47:95:44:F5:61:16:C3:F0:82:35:BB:FC:C9:5C:D8:39:B0:8B
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       01984A779393E38E74E165419C109BC7D600
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 06:00:07 +0000
Manifest this update:     Sun 27 Jul 2025 06:00:07 +0000
Manifest next update:     Mon 28 Jul 2025 06:00:07 +0000
Files and hashes:         1: Guy7Gbz5rPMc4iFSpd_8frqdYqs.roa (hash: atB7rNB4GngxSgp2zRWRq0GhS+DcIAMSX9Cb0N8BlB8=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: XfCeK9DQuLYHykOfQ0d4bo4VlDvzA2ucv1HCsVci/tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 06:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:77:93:93:e3:8e:74:e1:65:41:9c:10:9b:c7:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Jul 27 06:00:07 2025 GMT
            Not After : Jul 28 06:00:07 2025 GMT
        Subject: CN=8a51479544f56116c3f08235bbfcc95cd839b08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3f:fe:92:4f:b9:0a:ac:d3:a4:75:8e:1b:ff:
                    b8:2d:c9:8d:bb:4c:df:77:5b:09:6d:c2:27:7f:af:
                    aa:7a:91:4c:8f:c4:19:7b:de:4b:7b:53:3f:d4:df:
                    a3:5b:94:fa:21:6e:f5:ac:45:47:5c:ae:cc:64:fa:
                    40:09:9b:c2:b4:cb:87:4d:83:a7:6c:43:7e:e7:c9:
                    7b:c6:46:8c:a9:f7:f7:d9:3b:37:1b:35:1f:d3:6f:
                    ce:f4:9c:96:03:d6:70:ce:65:90:21:fb:1a:c2:be:
                    84:71:02:80:07:a4:56:d9:d5:7b:e6:c2:0d:be:87:
                    12:ae:22:73:cb:1a:e0:d5:d3:ed:80:aa:f3:cc:f1:
                    c9:47:21:c4:29:f1:47:31:85:58:ce:73:97:86:8f:
                    93:ce:d4:4c:22:ec:db:5d:6e:68:3f:ed:35:44:48:
                    f7:ad:7d:b8:ce:96:48:a0:96:5d:c5:87:6e:4f:8b:
                    6c:27:82:29:7a:f8:93:79:ea:46:1c:88:a0:37:00:
                    ea:f4:b0:33:04:b8:07:72:2e:8c:3f:4b:92:7a:9c:
                    60:c7:84:56:86:a9:12:ab:46:8f:9d:9f:c2:bb:51:
                    19:67:1e:9d:9e:58:2f:9e:2c:ed:19:c1:25:7d:c4:
                    cc:87:d1:f8:03:43:c2:3e:32:65:04:af:c0:30:74:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:51:47:95:44:F5:61:16:C3:F0:82:35:BB:FC:C9:5C:D8:39:B0:8B
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:87:91:31:15:9e:75:d0:01:18:78:62:79:eb:7f:7e:90:f8:
         66:20:b5:8f:d8:de:26:f6:6c:01:e4:23:71:63:e3:80:5e:d6:
         e9:16:5c:41:5d:8b:01:5b:12:03:f0:d1:49:b5:d1:27:41:65:
         dc:5e:6d:d3:e8:f2:e0:32:ec:4e:2f:9b:fc:a0:8a:f0:80:d5:
         a7:e3:36:85:74:d9:07:71:b0:42:bb:75:08:60:7e:9a:8d:2a:
         d2:70:02:44:85:e0:53:c5:b9:a8:78:62:f6:64:92:c6:4d:e8:
         78:8b:bd:ec:04:00:47:79:35:b1:67:e3:88:5a:70:75:75:b7:
         2c:f3:73:bc:80:97:db:86:c4:b6:6e:fb:61:d2:d1:ee:e6:45:
         e3:d2:d2:b4:5a:a1:ed:7c:73:70:03:e7:0c:a2:9b:7d:bc:d5:
         f1:5c:6c:38:e0:d3:ae:fe:d4:c9:7f:48:49:9c:7d:e1:ef:2d:
         30:70:42:ab:48:48:77:03:38:d7:cd:1e:96:b9:3d:c2:b0:c1:
         27:f6:03:2f:e1:db:61:b0:a9:73:6e:0b:3d:9a:79:7f:c5:2f:
         fb:13:98:7f:7c:f2:b5:43:19:0a:80:03:4a:67:ce:58:24:e7:
         07:cc:2f:9d:35:06:2c:7f:e3:8c:76:d7:32:b8:71:a5:79:0a:
         e9:7a:c3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:48:56 2025 by rpki-client