Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          OsasA4iOSJjyL1PsAPsJ1Tva53d6EHDIJep7Z8pIIsc=
Subject key identifier:   AD:A7:41:D9:52:35:F0:AB:00:B8:08:50:0B:6B:54:A6:CB:64:15:3C
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       019922C3144AD56223C8C8400DF130999EBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          1670
Signing time:             Sun 07 Sep 2025 06:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:33 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: kZ4N7AOooVdxZ+BITG4f23FMjso+iM1/MEqeMjr0Sqc=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:14:4a:d5:62:23:c8:c8:40:0d:f1:30:99:9e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Sep  7 06:00:33 2025 GMT
            Not After : Sep  8 06:00:33 2025 GMT
        Subject: CN=ada741d95235f0ab00b808500b6b54a6cb64153c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:31:3c:aa:6b:c8:60:a5:8a:ef:f7:1e:d6:
                    ad:d9:40:42:95:cb:6f:83:97:ff:b5:75:ec:3c:6e:
                    df:ca:c1:3a:b4:3c:45:9b:5f:9f:04:f2:db:0d:48:
                    20:77:74:39:6b:ca:da:6a:a4:77:cf:5f:2c:0e:b3:
                    a9:2f:cd:af:2e:ac:d2:1c:1f:8d:6f:24:ce:5e:ea:
                    9f:4b:4d:8b:eb:8f:a3:09:22:a3:56:78:50:f3:cf:
                    a7:ba:6b:ce:73:3d:1c:4a:e7:88:cd:de:be:2a:33:
                    b7:e6:76:49:bb:88:e2:39:3b:15:03:d6:fa:8c:91:
                    3a:7a:13:7e:bb:6b:52:f2:09:dc:bb:8b:6b:98:98:
                    3b:32:43:76:ff:99:75:c3:6e:0f:8b:62:4a:f1:04:
                    44:4f:08:de:9a:9d:f4:37:d4:83:72:bd:ca:b9:4b:
                    09:84:18:f9:70:d3:c2:49:91:9c:d1:de:3e:aa:24:
                    2f:bc:83:63:0e:29:f3:de:2b:14:ee:46:70:d9:e7:
                    67:4c:cb:52:eb:fe:76:1e:21:d7:e3:b7:0a:cd:d4:
                    ea:b9:79:4a:67:14:fe:df:5b:f0:c7:2c:43:b2:2b:
                    dc:63:07:f1:bc:a2:75:5b:93:98:30:0e:35:c3:9a:
                    5e:12:9d:1d:da:30:89:db:6a:68:ef:4a:7a:d5:80:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A7:41:D9:52:35:F0:AB:00:B8:08:50:0B:6B:54:A6:CB:64:15:3C
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:52:91:4f:9a:a3:11:e6:51:38:50:fa:84:46:6f:28:78:c6:
         8a:3e:d9:c9:13:21:a9:bf:7f:08:eb:a6:ac:51:fa:a3:d5:9d:
         9b:7a:77:bf:d6:7b:48:37:01:fb:68:2b:34:16:18:c0:a7:18:
         49:2a:d2:ce:09:58:8d:97:91:d1:ba:1c:d5:50:10:01:7a:77:
         ec:93:71:57:c7:f8:70:a5:84:44:24:e0:ec:07:15:73:81:46:
         3f:89:72:df:74:96:3f:cb:44:cd:2e:2f:ae:05:49:ec:34:f7:
         89:c2:36:4f:79:6e:3f:eb:a5:48:e1:6c:46:a3:98:2c:8c:82:
         12:71:73:26:36:f8:4e:b5:75:48:c8:73:9a:69:0c:d3:d7:a3:
         a8:94:f5:40:10:b3:58:f1:cc:d1:e0:62:66:b9:b9:aa:08:32:
         ae:cc:bc:31:89:6c:8e:57:fd:af:41:03:33:c7:69:db:17:00:
         05:f1:0b:10:a2:80:a2:92:cc:9e:05:67:8e:70:7e:5e:40:11:
         3f:df:03:dc:ab:05:b8:3c:57:60:0d:1a:74:13:23:71:19:16:
         fc:ee:26:24:43:ed:6d:b4:d6:72:4f:91:43:3b:d1:e3:ca:ef:
         d8:ad:6a:ad:77:c2:c6:35:f9:e1:d6:07:32:5f:b0:b3:d8:77:
         a0:e6:2d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:55:30 2025 by rpki-client