Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
File:                     R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft (raw, json)
Hash identifier:          Dgx6hF2n5clIFmybBRxvn9ZEU7/8tSsR84HqH7zYqho=
Subject key identifier:   5A:8E:02:F2:D6:CA:98:32:30:CF:E1:A9:4E:76:57:61:B9:25:CF:22
Authority key identifier: 47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34
Certificate issuer:       /CN=47e5d333dad9d62d5328d12578a31def42af8f34
Certificate serial:       019921B1DCE24C9434B9F3859749E62B6A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
Manifest number:          08F1
Signing time:             Sun 07 Sep 2025 01:02:08 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:08 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:08 +0000
Files and hashes:         1: I_0zk_rD0Gdq5jU6WeRSly4SVcs.roa (hash: JHLttM3n9KjjQEXLZtpKJI1GYGGri8Vj45nM2EhgE4A=)
                          2: R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl (hash: aFkgl/npf7jKyp4zxaesIwm1jwChfJCSjITLRIREWcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:dc:e2:4c:94:34:b9:f3:85:97:49:e6:2b:6a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e5d333dad9d62d5328d12578a31def42af8f34
        Validity
            Not Before: Sep  7 01:02:08 2025 GMT
            Not After : Sep  8 01:02:08 2025 GMT
        Subject: CN=5a8e02f2d6ca983230cfe1a94e765761b925cf22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:3e:fe:5c:07:01:13:d0:cb:ce:13:25:71:
                    f0:e6:c4:80:d7:ec:70:ea:40:07:cd:94:f2:11:f6:
                    a7:23:43:fc:05:94:48:39:fb:b0:e4:49:e3:6e:a1:
                    40:27:3a:74:92:fa:82:f2:34:03:ef:92:68:20:96:
                    c2:10:0c:0b:67:a6:3e:5f:c3:13:8f:a0:00:33:32:
                    6c:60:05:a1:1f:ee:94:1e:b7:91:be:63:13:f5:f1:
                    d1:bf:84:79:91:f2:fc:9b:a5:ef:05:3b:c6:38:5e:
                    9a:ec:14:70:ab:32:48:49:7a:a5:9c:28:8a:63:fb:
                    4a:10:f4:e2:c7:fd:0a:bb:cf:e9:49:43:cb:e1:66:
                    8b:56:6c:72:1c:71:cb:82:48:e6:c1:44:f8:1d:d5:
                    ee:9e:1a:bc:40:36:a9:09:86:1b:dd:e9:05:86:c8:
                    1d:7b:b5:20:cb:c8:da:4e:00:3f:0b:cd:b6:a2:0d:
                    5b:d1:9c:35:dd:cd:64:ec:3d:ad:33:49:9b:9e:03:
                    30:36:6c:b1:eb:a4:01:52:33:47:f3:dd:27:bc:20:
                    3a:0b:91:9f:50:e4:9d:e1:c1:80:77:29:f8:06:9d:
                    84:a4:d8:b0:db:e0:b2:e5:6a:14:99:ad:87:9e:dd:
                    57:d5:f4:ca:55:e1:fb:aa:d1:9d:e9:aa:f1:7e:a0:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:02:F2:D6:CA:98:32:30:CF:E1:A9:4E:76:57:61:B9:25:CF:22
            X509v3 Authority Key Identifier:
                keyid:47:E5:D3:33:DA:D9:D6:2D:53:28:D1:25:78:A3:1D:EF:42:AF:8F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-XTM9rZ1i1TKNEleKMd70KvjzQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d661d4-c624-4a0c-9069-352cfc369ef3/1/R-XTM9rZ1i1TKNEleKMd70KvjzQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:73:f1:72:f6:33:cd:85:38:37:ea:f9:11:68:5e:22:53:10:
         4f:db:9d:23:eb:40:f8:2f:6c:97:b4:84:ed:a8:85:02:c8:b5:
         96:9d:b6:b1:e0:4e:4f:b8:e0:cd:09:47:03:55:96:82:5b:21:
         9e:12:7b:32:64:21:1c:94:e0:00:3f:f4:6e:09:70:e9:ca:09:
         04:9d:96:d9:d4:1a:11:40:df:e0:dc:e1:04:58:c8:0c:d5:4d:
         6d:21:89:b6:ec:40:bd:fb:17:f8:ad:15:47:18:16:32:2c:3b:
         33:3b:a8:8e:c5:58:73:64:84:5f:d1:5b:98:ef:b5:8e:bc:a5:
         64:e2:05:fa:a0:19:d6:3e:7b:13:ff:92:37:8a:7d:a5:0a:24:
         a3:a9:43:6b:40:89:66:5e:18:88:68:69:45:ad:e1:a4:0f:6a:
         f6:1d:b2:af:46:91:45:51:c9:0e:57:24:a8:6b:3d:ab:86:8a:
         dc:ce:6f:71:2e:70:64:46:bd:ff:f5:12:84:5e:89:dc:e7:f6:
         54:20:ce:94:17:cb:47:57:c9:d6:0d:9f:59:6e:6e:08:6b:d1:
         76:57:1d:9a:e7:e9:8c:0c:c5:ac:00:ea:0c:62:9a:d3:87:db:
         dd:e9:75:1a:81:5c:2a:43:18:28:f6:da:33:3a:14:d9:a1:55:
         15:59:da:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:37 2025 by rpki-client