Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
File:                     C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft (raw, json)
Hash identifier:          Rwf5SXCaNuKDEMuUlSMFw/flPSJzLUmgFOfvIBOLwkU=
Subject key identifier:   2F:A2:EF:25:9D:24:D9:0C:AF:51:2B:90:36:10:C4:35:0D:1E:D8:36
Authority key identifier: 0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90
Certificate issuer:       /CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
Certificate serial:       0199221E91973613C5124243AAE8D5603773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
Manifest number:          069F
Signing time:             Sun 07 Sep 2025 03:00:52 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:52 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:52 +0000
Files and hashes:         1: C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl (hash: 24Jk4HhVjsEqeffyu++KtDJNgiWiBI0WDVL+6a1tpJU=)
                          2: dy6V06G8CC2FK34EGVuxtzegKH4.roa (hash: gPhDzrN8RIm6TShQaGb5YzX92bCG0Thu0kMn08thu4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:91:97:36:13:c5:12:42:43:aa:e8:d5:60:37:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b58c921cb3e9c81ddc316ff039cb9c36d2a4390
        Validity
            Not Before: Sep  7 03:00:52 2025 GMT
            Not After : Sep  8 03:00:52 2025 GMT
        Subject: CN=2fa2ef259d24d90caf512b903610c4350d1ed836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:ad:85:67:a9:2f:0f:88:ad:f2:ed:97:11:
                    ba:41:4b:51:0f:b0:8f:2a:2b:ab:b0:75:dc:97:55:
                    c1:ea:fe:c7:e2:51:76:06:4d:94:be:cd:dc:9a:6d:
                    25:cd:4e:41:9c:77:8c:06:e0:68:ac:0d:73:c3:7d:
                    03:79:c0:ca:d6:2c:4d:5d:40:e4:67:3e:99:be:66:
                    5b:18:f4:dc:36:8b:53:ae:ed:38:eb:ef:bd:0d:42:
                    90:19:a6:00:1d:92:40:54:a3:0a:a8:73:f9:fb:66:
                    ba:29:c4:ca:74:cc:7f:26:2e:2e:9a:ae:e8:b2:29:
                    8a:71:81:ae:fb:29:52:99:68:1c:03:32:34:ee:e4:
                    e9:55:56:9c:c6:3b:1d:63:ad:7e:52:02:32:66:89:
                    b3:0d:bf:24:35:8e:15:f8:da:a7:73:a8:c1:d6:7e:
                    40:ae:eb:2d:07:89:35:11:c8:ee:da:db:12:fb:ce:
                    94:c0:5c:78:ce:4e:6b:ac:45:ae:a4:7a:94:8b:33:
                    e9:6c:4b:7e:ec:02:b6:8b:60:42:be:b8:f4:2d:4f:
                    b1:d8:63:b1:e2:49:d7:8e:55:50:96:cf:bb:b5:0a:
                    f0:70:cb:39:06:52:97:f8:1f:bc:cd:e1:74:54:20:
                    3b:e9:07:c2:35:ba:11:17:d6:2a:90:77:ab:d9:83:
                    44:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A2:EF:25:9D:24:D9:0C:AF:51:2B:90:36:10:C4:35:0D:1E:D8:36
            X509v3 Authority Key Identifier:
                keyid:0B:58:C9:21:CB:3E:9C:81:DD:C3:16:FF:03:9C:B9:C3:6D:2A:43:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1jJIcs-nIHdwxb_A5y5w20qQ5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f4ab5f-e6c2-48b8-94ec-49178296de86/1/C1jJIcs-nIHdwxb_A5y5w20qQ5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:de:db:ef:6d:32:7e:aa:51:5f:6c:36:13:c1:96:0d:bc:1d:
         8f:46:b8:14:cb:98:a4:13:80:8d:e5:7c:17:1a:c7:eb:9a:a0:
         14:ea:a5:48:b0:50:ff:49:d0:5a:90:aa:22:c3:64:d7:91:27:
         05:90:a0:e5:66:91:0e:6e:a5:b5:b9:13:f0:1e:db:85:ab:0d:
         c5:12:e6:b8:e9:ca:3f:b1:32:12:7a:c1:f9:af:f5:b3:66:53:
         41:1c:50:77:c5:35:ba:75:08:8f:4a:97:9b:49:7c:7c:21:0a:
         d0:2d:23:3c:84:81:ef:4a:f2:e0:81:cf:38:de:cf:de:04:9b:
         42:6c:fd:3b:c4:7d:d8:c3:f1:93:1b:0d:cf:78:ad:67:5b:d1:
         bc:b7:b8:71:f0:55:41:8f:e9:20:de:6d:f7:d6:82:c9:02:ef:
         a3:d5:9a:fd:52:4f:dd:81:86:39:f3:68:03:1f:35:a0:6e:70:
         43:a1:66:62:0d:f2:27:dd:e1:4b:16:ec:23:cb:a9:00:a2:f1:
         d8:be:3b:c8:fe:77:c6:44:58:93:18:4e:05:b2:39:82:80:ab:
         ac:db:c3:fa:77:93:63:5a:10:e3:68:2e:75:f9:43:f6:fe:73:
         91:11:3f:93:91:f0:8f:bb:e4:88:83:86:6d:dd:02:22:38:94:
         5f:db:07:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:47:28 2025 by rpki-client