Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
File:                     Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft (raw, json)
Hash identifier:          gI+TjZfd1LPPdp2UhFjE3t72mix88R/kfXQVSPK6Mrs=
Subject key identifier:   16:7D:7F:C9:A7:BA:99:B0:2A:62:4B:B2:F8:94:65:84:E6:79:1F:DF
Authority key identifier: 2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8
Certificate issuer:       /CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
Certificate serial:       019923D616E36B68CE108655838693E64D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
Manifest number:          081C
Signing time:             Sun 07 Sep 2025 11:00:57 +0000
Manifest this update:     Sun 07 Sep 2025 11:00:57 +0000
Manifest next update:     Mon 08 Sep 2025 11:00:57 +0000
Files and hashes:         1: Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl (hash: c79ifiDBrGPlPAOpUehW/VhqJafjFDKkhPzKbVxAu2E=)
                          2: s4AKgCvHin14a0p0jz13CHksENw.roa (hash: DlLpWWLv6d9rLbZVSY1skYH3NFUrKLxB2CHWlEQtKgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d6:16:e3:6b:68:ce:10:86:55:83:86:93:e6:4d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dcf6f361307095c283b0d89140568aa4ec8d4a8
        Validity
            Not Before: Sep  7 11:00:57 2025 GMT
            Not After : Sep  8 11:00:57 2025 GMT
        Subject: CN=167d7fc9a7ba99b02a624bb2f8946584e6791fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:b9:0c:b1:3f:14:77:98:ed:96:60:a6:9f:
                    8c:0b:94:97:4d:0b:90:80:26:8f:9b:54:9b:28:ba:
                    46:9f:e3:68:cd:df:8f:7e:b7:14:43:be:09:ae:48:
                    95:10:41:62:9b:82:3a:5e:7d:54:bf:47:27:82:40:
                    d5:c3:45:c7:74:aa:e0:fc:a5:6b:9b:35:67:24:49:
                    0a:54:2f:c2:7a:66:e9:a7:14:5e:31:b0:fb:6b:87:
                    b0:39:c8:9d:e5:5e:2b:19:09:ae:37:a9:c5:ce:7f:
                    32:e1:72:e5:e5:5f:27:d0:20:fe:02:29:6f:a7:a3:
                    4d:35:15:cb:86:a6:63:a7:93:f8:3c:79:eb:16:57:
                    e6:74:d3:1a:ba:c8:73:74:2f:0d:3e:02:e6:50:ac:
                    67:94:f9:6a:8e:ab:1e:dd:28:fb:ed:b2:25:f5:66:
                    4b:a3:f3:41:ee:ec:e6:90:11:03:2c:c6:50:4d:e2:
                    d6:84:2a:31:b2:21:25:e2:a0:3f:fa:ba:5b:34:e9:
                    a9:3b:45:27:31:54:b4:30:18:f8:7c:4b:0c:21:25:
                    c9:a0:96:c5:1b:45:ca:1c:90:40:9a:5c:52:c0:e2:
                    82:9b:c3:7b:a2:81:da:fb:8a:7b:1d:1d:bf:5f:90:
                    0f:35:2a:5a:0e:38:d2:1a:9b:c1:f8:11:0c:35:12:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:7F:C9:A7:BA:99:B0:2A:62:4B:B2:F8:94:65:84:E6:79:1F:DF
            X509v3 Authority Key Identifier:
                keyid:2D:CF:6F:36:13:07:09:5C:28:3B:0D:89:14:05:68:AA:4E:C8:D4:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/9707c5-ac32-4905-a83c-5fd69018782f/1/Lc9vNhMHCVwoOw2JFAVoqk7I1Kg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:be:bd:e1:8a:04:35:b0:37:27:3c:9b:57:28:a0:07:1a:06:
         d1:1a:20:ea:86:d4:2b:86:d2:02:98:c3:6f:5f:84:b0:12:79:
         38:98:91:fc:ad:53:35:66:68:31:d1:12:7d:fe:c5:3a:5d:6d:
         0b:8d:3e:95:71:f0:21:55:d4:4e:d0:60:cd:75:03:6c:fe:94:
         78:92:9b:d2:23:94:2b:aa:9b:86:2e:a3:1b:c8:0f:bd:52:c7:
         a0:7c:e1:62:53:1d:29:a6:7c:b5:59:ed:6b:ea:7e:60:3b:a1:
         f7:f8:54:f6:dd:2a:12:00:78:41:4e:4d:31:49:b4:91:ca:d3:
         46:ab:6a:c4:ed:5e:1d:3e:c6:09:a0:88:e2:7e:4f:1a:54:2b:
         80:fa:14:3b:e7:da:84:16:69:0a:57:18:e5:6b:d1:d9:8d:36:
         df:65:c3:bc:89:e9:79:5f:20:ad:67:6a:b9:2f:e0:fd:a5:44:
         c2:74:42:a8:99:c6:2a:ab:8e:07:5b:52:dc:69:10:bd:46:57:
         db:b4:62:cf:a6:95:8d:2c:69:d7:64:cb:88:56:64:01:14:a6:
         53:2d:ef:a1:b4:6b:64:d0:df:15:e0:cc:25:60:cd:e8:3a:69:
         cf:2f:82:09:c8:95:13:77:20:e5:2f:9d:e6:06:f1:70:97:9e:
         dd:d5:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:17 2025 by rpki-client