Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File:                     U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier:          IA8P74sRd8WhXImnTUxFFO2ZxLKpbsMpKOXgr6lIMOw=
Subject key identifier:   E8:BD:7E:9B:39:DC:39:45:AE:45:B9:2F:6E:F8:E5:75:0C:6E:C9:65
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer:       /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial:       01992367D7CE8400FC54E76AB45BBA093FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number:          13BF
Signing time:             Sun 07 Sep 2025 09:00:31 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:31 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:31 +0000
Files and hashes:         1: Mym9d5dVDoOmCDQV51AwB-FfpCc.roa (hash: w5OUNkmnrUSeDRW2ANklyuAzFVL6KyBf5AcPHxY8618=)
                          2: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: jDH4uJU0xRDaIT0FAKdVdyUW/W2WQoVBP2+y3VG9Djs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:d7:ce:84:00:fc:54:e7:6a:b4:5b:ba:09:3f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
        Validity
            Not Before: Sep  7 09:00:31 2025 GMT
            Not After : Sep  8 09:00:31 2025 GMT
        Subject: CN=e8bd7e9b39dc3945ae45b92f6ef8e5750c6ec965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:00:ac:af:0b:c7:0a:b7:be:8a:dc:82:af:
                    9e:41:dc:07:b5:5f:ed:f1:64:4a:51:d9:a6:c1:fd:
                    8d:78:f8:a5:10:8a:e9:22:14:67:67:94:e9:11:3a:
                    b6:d0:51:73:e9:8f:de:1f:25:f0:1e:b1:c5:c4:38:
                    5a:7a:0b:ff:a0:74:63:6f:67:67:94:1a:fa:ba:3a:
                    61:ad:e3:9f:e9:4a:a0:73:ea:51:53:01:ad:30:9c:
                    e3:42:9b:23:d9:d2:3b:85:80:8a:f9:9a:27:88:a2:
                    9a:26:92:e6:e2:3f:4d:12:ce:d3:b2:76:9e:ff:db:
                    16:63:33:f3:fa:4e:e8:55:03:b7:15:22:e0:25:31:
                    e9:a6:88:c1:c9:76:26:e2:ff:7d:44:9e:82:dd:40:
                    0d:6c:d9:ad:5e:94:c6:97:77:b4:09:56:d0:b2:67:
                    fc:ae:43:2e:72:85:cc:c1:d0:eb:73:6f:b4:86:01:
                    c6:fb:dc:e9:3a:66:50:9f:78:59:51:b5:0b:25:2c:
                    f7:8d:39:61:cf:18:f7:fc:75:78:56:13:e6:10:29:
                    cf:93:75:8e:38:67:cb:0f:76:e6:0c:95:74:7b:6c:
                    07:d6:0a:92:4a:e5:8c:cd:21:cf:8f:9e:ea:d7:ce:
                    12:40:c6:cd:e2:0b:c2:60:79:cd:c5:fe:1a:1f:89:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BD:7E:9B:39:DC:39:45:AE:45:B9:2F:6E:F8:E5:75:0C:6E:C9:65
            X509v3 Authority Key Identifier:
                keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:15:03:91:3c:2c:80:9e:ec:5a:ec:90:66:72:de:9d:17:84:
         ac:d2:ae:6d:66:15:4f:d9:e9:7b:c8:cc:96:ce:e8:91:4e:ce:
         02:79:a4:be:0c:b1:cc:82:ad:9f:89:b7:0a:87:91:29:ef:4b:
         3b:7f:39:df:6f:2e:4f:77:c8:75:b2:63:3d:1e:1e:d1:51:2b:
         84:d5:d3:c9:7d:36:e8:3f:51:e1:f3:6e:d4:74:57:d1:c9:e4:
         0f:c9:10:7a:e5:19:71:2a:30:de:84:f3:48:a3:d1:a3:ba:f9:
         84:75:4a:ab:e2:76:c5:b2:f6:6a:f2:c5:f7:5b:1f:59:f8:f7:
         e3:9d:2f:c0:79:f3:07:ba:3c:57:6c:5e:1d:90:ac:b9:55:7d:
         63:25:a5:95:fb:87:e6:cd:4c:09:48:55:08:a2:fa:88:ac:82:
         3c:9d:d1:f0:f0:78:02:0b:66:e6:25:80:9d:23:43:55:e2:83:
         05:6f:71:9d:93:be:25:17:96:3d:48:69:14:c1:72:0a:82:c1:
         53:ec:57:b4:8f:b7:c3:0a:c0:bf:2c:8f:77:f0:55:f1:95:f1:
         ae:23:b5:43:dd:65:1b:35:2b:4e:5c:23:d9:2b:e6:91:db:82:
         4d:71:c6:4c:f5:2e:92:89:7a:cb:da:47:ff:a8:4d:cd:82:07:
         06:67:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:06 2025 by rpki-client