Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File:                     4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier:          5I0VCRFSf4thn8ZNYBOHpZHe/kzXBmGprUhwDZOn93A=
Subject key identifier:   96:6D:AA:C1:2F:BD:35:6F:D5:8C:06:79:93:BE:83:1E:07:7F:D8:9A
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer:       /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial:       01992367C3799510ED9CBFE096F5AE30CF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number:          82
Signing time:             Sun 07 Sep 2025 09:00:26 +0000
Manifest this update:     Sun 07 Sep 2025 09:00:26 +0000
Manifest next update:     Mon 08 Sep 2025 09:00:26 +0000
Files and hashes:         1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: 8q3vDA78bipC6BFHXjs7aA3gtDGlNOg30Og38GksLy4=)
                          2: OcyVVi-jBM0G3opoob8aVpqeL7k.roa (hash: Lmj/ERqEQsOvuljDrquPNBuk7nAamhzs4Ctv+M+OeMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:67:c3:79:95:10:ed:9c:bf:e0:96:f5:ae:30:cf:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
        Validity
            Not Before: Sep  7 09:00:26 2025 GMT
            Not After : Sep  8 09:00:26 2025 GMT
        Subject: CN=966daac12fbd356fd58c067993be831e077fd89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:eb:cd:d9:57:fa:d8:15:b8:ea:ae:65:7c:80:
                    f6:44:ac:73:05:df:f2:22:93:d5:2e:ba:31:01:05:
                    95:4b:a7:c2:c5:1c:c6:98:34:d2:d6:6a:a9:53:4e:
                    98:1d:44:48:a5:01:5a:bd:df:cd:6f:36:31:21:16:
                    d2:c3:c8:b2:52:79:33:e4:dd:35:49:0d:11:a4:d6:
                    46:61:1b:8d:c4:11:72:3c:e5:50:6d:e1:3c:3a:4c:
                    a1:cb:fa:81:b6:81:f9:f1:cf:7f:9d:96:48:fa:99:
                    14:43:a9:cd:43:da:b4:2f:f3:f1:52:ff:a0:fc:66:
                    ec:42:33:d2:5c:4f:38:cd:54:d6:5e:7b:d4:e0:b0:
                    15:13:34:0d:b7:dd:78:ec:4d:57:b8:6b:71:51:9c:
                    b9:a2:fe:e6:cd:02:cc:5c:5f:b6:92:8c:31:9c:e3:
                    34:6c:6b:9b:f2:63:13:31:0d:ec:5b:10:dd:5c:80:
                    14:fa:21:24:85:45:e8:76:ad:41:06:da:9d:ac:bc:
                    10:b0:23:0a:a3:ae:0a:3c:a9:2c:b4:bf:a0:61:59:
                    4c:34:b0:43:c5:5b:ea:ce:a3:3c:52:e0:0d:db:76:
                    e9:90:96:4f:ae:09:d2:64:2a:8b:c3:e9:fb:da:77:
                    05:5c:5e:b7:f9:d6:f9:be:1b:da:d0:d0:43:58:15:
                    3d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6D:AA:C1:2F:BD:35:6F:D5:8C:06:79:93:BE:83:1E:07:7F:D8:9A
            X509v3 Authority Key Identifier:
                keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:7d:97:db:4e:73:64:72:a5:c6:2e:b0:96:4a:a0:98:12:97:
         48:7c:01:af:9b:93:c2:92:52:86:0a:83:15:30:be:22:5a:d9:
         6b:70:28:ae:c8:e8:87:7c:a6:d8:57:c1:34:2b:32:3b:a4:2b:
         d8:2b:06:76:a6:f4:62:d7:46:ee:4b:9c:f4:a0:72:b3:30:68:
         b4:38:69:f5:86:a7:02:ff:6b:3d:12:37:0f:67:57:1e:58:64:
         58:2c:b4:97:f2:5a:01:a3:c2:23:c7:0b:59:e1:e5:94:45:ef:
         d9:87:43:18:58:d5:01:4e:4f:93:eb:9c:ea:f2:70:c8:cb:48:
         10:21:4c:64:6e:61:7f:1e:d6:c0:38:a4:ca:8d:b3:8c:19:9d:
         06:19:12:10:d7:5d:99:97:73:1b:41:7f:2f:73:aa:d6:34:9c:
         49:92:93:4b:19:4a:23:64:81:b6:d9:e2:05:b8:84:25:d1:69:
         28:e7:a1:a2:bc:18:df:30:95:33:7f:19:f9:16:f5:b8:e8:13:
         4c:09:87:8b:a2:7c:0f:8e:d1:70:08:5e:9b:62:92:46:fc:34:
         b7:4a:e0:d3:c0:a3:19:bb:25:4f:44:11:5e:1b:00:a2:3d:ec:
         d7:ed:dd:80:50:5e:d3:ea:54:5c:6e:06:42:74:2a:74:84:d7:
         2e:ae:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:40 2025 by rpki-client