Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
File:                     my5v1Q3cgXq7rFpk98ahJUaFnOI.mft (raw, json)
Hash identifier:          xrenBKWwO6OYvuMaxVUHWVuphLBCHMKrFuo+n/NCXrI=
Subject key identifier:   E1:1C:3E:D0:86:DB:FF:06:4D:AA:1C:8C:FF:8A:3B:23:F4:55:E5:E4
Authority key identifier: 9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2
Certificate issuer:       /CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
Certificate serial:       019922555A43F44BDA1AA1285B184738E183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
Manifest number:          1468
Signing time:             Sun 07 Sep 2025 04:00:42 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:42 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:42 +0000
Files and hashes:         1: jyUtfXExJkIeWPFE-JODMPcR0NE.roa (hash: IvazoNxGfM9C2jqRgwqUMFSQjgy5bfUJvRSuAgaM680=)
                          2: my5v1Q3cgXq7rFpk98ahJUaFnOI.crl (hash: ZBRBAMZbG2F0pKdwNtCDQBq4yhGjSsIZzu6ptbi/pXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:5a:43:f4:4b:da:1a:a1:28:5b:18:47:38:e1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e6fd50ddc817abbac5a64f7c6a12546859ce2
        Validity
            Not Before: Sep  7 04:00:42 2025 GMT
            Not After : Sep  8 04:00:42 2025 GMT
        Subject: CN=e11c3ed086dbff064daa1c8cff8a3b23f455e5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:0c:81:5b:70:7d:b0:76:7a:ee:6d:18:0f:
                    b1:73:55:cd:ab:27:9b:d4:1f:f1:58:d2:e3:46:44:
                    20:1c:ff:12:13:d3:b9:b7:d8:8f:1c:b0:12:19:eb:
                    e9:cd:9b:5e:29:9c:32:ba:8f:e8:63:7c:f0:97:83:
                    b5:70:2c:e4:5b:20:92:b4:a7:a0:4b:8f:c3:ed:36:
                    c3:42:f0:c8:0e:de:86:a3:54:ad:f5:f0:27:61:a0:
                    ef:ad:23:3b:79:70:74:bd:e4:87:1b:e3:4d:f3:ce:
                    5d:6c:67:75:da:c2:35:2f:98:52:35:aa:39:21:f5:
                    cf:f4:56:1c:53:11:b1:95:8c:fd:6a:b7:c2:24:34:
                    75:c0:cd:da:c4:af:ee:90:47:73:6e:38:c0:a1:f0:
                    6e:df:17:86:0e:09:4d:07:34:de:df:16:9a:71:a9:
                    9e:0b:d5:c1:ab:5b:83:83:84:8b:5c:77:72:8b:27:
                    e5:81:4a:5a:ad:08:0a:48:4e:f8:50:04:2b:3b:6d:
                    39:ff:2e:f7:de:19:e0:88:38:82:47:9d:44:4d:d3:
                    a9:f7:a9:c7:00:3f:05:a2:4e:60:b6:2c:48:8a:a1:
                    f7:07:63:95:b2:4d:9f:8b:27:e2:42:2a:bb:d0:ea:
                    1e:0c:0f:d1:5a:c2:58:02:31:52:21:dc:f1:01:a5:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:3E:D0:86:DB:FF:06:4D:AA:1C:8C:FF:8A:3B:23:F4:55:E5:E4
            X509v3 Authority Key Identifier:
                keyid:9B:2E:6F:D5:0D:DC:81:7A:BB:AC:5A:64:F7:C6:A1:25:46:85:9C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/my5v1Q3cgXq7rFpk98ahJUaFnOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3ba2d9-74ce-4881-b23f-7cb0723da0bd/1/my5v1Q3cgXq7rFpk98ahJUaFnOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:05:1d:30:78:d2:60:1a:d4:55:e1:65:26:f2:dd:b5:d3:ef:
         5c:ff:92:e8:15:c1:fd:fa:0d:5f:2a:68:ce:b3:18:dc:5f:de:
         38:94:6e:2a:db:9c:ec:46:df:2f:85:2f:9e:a8:8f:4a:63:3e:
         3d:56:38:df:a2:e9:ff:d2:f6:b4:55:91:a7:8a:40:05:c6:73:
         33:a3:aa:9d:7d:7a:13:f1:45:23:64:f5:a5:14:e0:75:27:74:
         f1:85:ab:3e:8c:22:72:cf:7b:eb:b2:c6:67:9f:28:c5:b5:9c:
         9b:0d:f8:42:5d:91:28:3c:26:0c:5b:20:84:33:66:6d:3e:7e:
         d0:e1:f8:0d:ae:25:30:7c:2d:d2:44:da:c6:75:72:77:90:36:
         cd:4a:a7:98:55:80:4d:35:e2:57:4a:5b:d5:5f:ea:d4:1b:fc:
         a7:44:a0:c2:30:d7:1d:ce:4c:a3:fe:e2:37:7a:5a:01:38:80:
         fa:6b:97:1c:04:bb:5a:69:84:ab:2f:7b:41:3a:dd:a7:b1:79:
         b3:68:5f:6e:52:5b:18:ee:82:53:23:bb:e9:44:fc:83:2a:00:
         37:6c:8f:14:63:14:a6:7f:d3:f0:67:b8:45:ce:24:a1:3b:3b:
         44:64:4f:43:b4:eb:ce:e8:b9:15:31:08:68:1a:f9:19:a9:d5:
         c4:20:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:26 2025 by rpki-client