Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
File:                     mfyNwqfBufMroZV_9JLcC6TyYP8.mft (raw, json)
Hash identifier:          WsRLD4MIJJgHpSP5hovIHIHPiepQTyDsyYNMBnchv1M=
Subject key identifier:   B4:BB:B5:04:25:D2:EC:62:F4:98:8D:0B:B1:B8:9C:0F:8B:78:25:5E
Authority key identifier: 99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF
Certificate issuer:       /CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
Certificate serial:       019922FAF835204F6565FE21DBCF7A62566E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
Manifest number:          DA
Signing time:             Sun 07 Sep 2025 07:01:36 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:36 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:36 +0000
Files and hashes:         1: bwcXy3FYmHBMxUWqGbTAjvoGjVE.roa (hash: i13BZ7NJZZP7VgcQkDsp+e+5aBIM+z4sday3aP/ehUI=)
                          2: mfyNwqfBufMroZV_9JLcC6TyYP8.crl (hash: z3/RYwiiZ8dO2v2WtxQHeaG0uDDeWIyIv6xjxI7AbpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:f8:35:20:4f:65:65:fe:21:db:cf:7a:62:56:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fc8dc2a7c1b9f32ba1957ff492dc0ba4f260ff
        Validity
            Not Before: Sep  7 07:01:36 2025 GMT
            Not After : Sep  8 07:01:36 2025 GMT
        Subject: CN=b4bbb50425d2ec62f4988d0bb1b89c0f8b78255e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d2:48:ef:a4:14:b6:9d:f1:ac:b1:74:49:c4:
                    36:37:73:dc:5f:56:f2:ed:4d:54:a0:01:83:6e:ea:
                    0a:8e:2a:cf:09:f5:18:6c:75:d8:90:01:99:aa:01:
                    22:a1:70:cd:ed:15:02:ef:7b:04:71:b7:11:79:47:
                    28:80:1e:2f:7a:a6:b8:06:93:b4:d8:84:ec:bc:b1:
                    74:5b:e3:05:fa:2c:ce:8f:bf:7c:ed:75:84:16:1d:
                    ae:f9:35:29:9c:c1:03:c3:a3:90:0e:69:c7:ba:2a:
                    d2:49:37:3a:10:6a:9f:8a:76:f1:e3:71:b2:ce:99:
                    2e:f6:11:b5:50:e0:b4:41:24:8d:e4:be:9f:6e:1f:
                    d8:25:fb:62:89:0c:38:c8:ff:20:91:bd:30:9f:76:
                    2c:b4:e1:a5:7c:80:99:3e:1c:30:bf:fa:78:50:bd:
                    c4:79:ad:2b:bc:62:d8:bd:a0:a8:40:30:30:3f:26:
                    08:90:33:42:47:70:b8:a4:a3:2a:41:6b:80:ed:2b:
                    cf:63:12:d4:d8:d1:8e:d2:55:d2:d8:81:77:be:d8:
                    0b:e9:ed:87:87:7a:f2:c5:e4:57:8f:14:de:02:d1:
                    f7:6f:7d:8e:32:bc:dd:ac:df:ac:91:d9:04:41:e9:
                    d8:3a:24:05:52:96:d7:92:77:ca:a3:5c:dd:d1:06:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BB:B5:04:25:D2:EC:62:F4:98:8D:0B:B1:B8:9C:0F:8B:78:25:5E
            X509v3 Authority Key Identifier:
                keyid:99:FC:8D:C2:A7:C1:B9:F3:2B:A1:95:7F:F4:92:DC:0B:A4:F2:60:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfyNwqfBufMroZV_9JLcC6TyYP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5205b8-98cf-4042-a0ce-e4c6741c802c/1/mfyNwqfBufMroZV_9JLcC6TyYP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:63:8d:0c:5e:d7:27:4f:b3:29:2d:63:8f:78:77:df:a1:
         bb:cc:07:ff:05:02:39:b1:64:96:50:06:55:cd:6b:b8:f2:31:
         8a:64:a7:5c:fe:e0:4e:43:8e:8d:05:94:89:60:42:6f:17:aa:
         ae:37:0d:4c:0c:6e:e2:98:37:cb:88:fd:10:3b:35:a4:73:fa:
         48:0c:35:09:d7:c5:93:c6:83:92:d6:2b:35:28:89:da:4b:b6:
         af:39:d8:c9:34:ba:33:08:6b:65:05:f3:22:a1:73:90:37:fc:
         19:19:f2:a0:b2:77:dd:bb:98:b2:0f:1f:a4:0e:39:1d:20:c9:
         95:86:fb:81:45:62:75:8b:da:a1:85:df:1e:24:2c:e0:e3:bd:
         b1:d1:42:89:e7:e2:5e:38:d6:2b:dd:f6:af:da:58:77:1a:bf:
         4a:6a:d8:5f:8c:12:66:28:b0:4f:08:2f:29:07:bf:b0:a8:1c:
         5d:62:4d:7d:73:01:21:96:6b:7f:72:a5:90:28:f6:12:d7:67:
         23:9b:03:b9:2d:0c:19:a5:b9:74:93:f7:e8:36:fa:f0:ab:58:
         b3:cf:e8:35:2b:26:85:74:d2:69:06:96:57:d9:14:9f:d8:68:
         1e:0d:b2:74:c8:f6:2c:d8:f2:08:a0:f8:c6:4b:d6:0b:d4:b9:
         2d:78:ce:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:08:18 2025 by rpki-client