Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
File:                     7rB4916j1TWPzKRmx1XXXRIw-Ng.mft (raw, json)
Hash identifier:          MN9WWi99xgbcW1fSMqDgUmDXl21VQpwFyHxFWOiLl7E=
Subject key identifier:   9C:92:49:3C:51:65:B5:62:8A:9A:FF:1F:0D:0A:80:E9:99:D0:D1:30
Authority key identifier: EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8
Certificate issuer:       /CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
Certificate serial:       019932A415A330F944A755E888128A9F2268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
Manifest number:          1679
Signing time:             Wed 10 Sep 2025 08:00:38 +0000
Manifest this update:     Wed 10 Sep 2025 08:00:38 +0000
Manifest next update:     Thu 11 Sep 2025 08:00:38 +0000
Files and hashes:         1: 7rB4916j1TWPzKRmx1XXXRIw-Ng.crl (hash: hpUJAYW7o8AjiEjg8wFHx4E+ynLLGvknLZVts8K3G4k=)
                          2: 9fGQxsuW9o57MuSnTQw97jZkBOE.roa (hash: YnRNIOwoiTRXwdxivY6tYKVNEPgEv0Qon+zlyQpniFM=)
                          3: QQXV9PR2UUw9UDrT_DWglwU8ZS8.roa (hash: uF9Uh/MfGV5Li33CKiFO0iwqxXl5ow/SpNSUJI6hYY8=)
                          4: _y3NM5_0f7MsfhtkcKzuJLDPoBk.roa (hash: bwtNcBrGNEEfhGhbBMEoAmqI9q4hwa8bfh0IBzWlro4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:32:a4:15:a3:30:f9:44:a7:55:e8:88:12:8a:9f:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeb078f75ea3d5358fcca466c755d75d1230f8d8
        Validity
            Not Before: Sep 10 08:00:38 2025 GMT
            Not After : Sep 11 08:00:38 2025 GMT
        Subject: CN=9c92493c5165b5628a9aff1f0d0a80e999d0d130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:d2:4c:7e:02:a6:ff:fc:12:79:5e:ad:88:
                    96:ad:c0:f0:57:fa:59:b3:bc:22:46:21:7c:34:bd:
                    60:5b:72:4b:c6:71:f2:9a:b2:76:3a:41:35:e3:d5:
                    c0:f3:07:12:78:d7:e2:a7:b6:07:56:ec:2c:0e:eb:
                    81:b4:e8:c0:31:7a:19:79:1f:2f:35:30:77:e3:8a:
                    9e:6c:85:31:eb:0b:d9:2a:c2:6d:3b:4e:4d:fb:c3:
                    0f:2f:e7:0c:28:bb:7c:dc:70:fe:67:26:f9:84:b3:
                    88:88:ef:a4:e1:ec:80:0e:f4:3b:45:c3:b7:db:da:
                    19:59:15:3a:b5:7b:a0:45:4c:cd:7a:92:4d:d4:89:
                    b2:fc:9c:9d:ae:ac:43:5b:37:80:d1:25:72:d6:c7:
                    0a:d0:3c:fb:78:92:20:40:32:ac:8a:f0:f4:d7:cf:
                    0f:1d:ee:63:df:a0:be:08:f6:95:74:b6:f3:00:85:
                    50:f5:9c:91:87:92:d8:e9:b5:8c:92:89:f6:7c:9e:
                    95:0a:75:e8:d3:15:0c:48:fc:27:ee:d4:8e:12:a1:
                    db:6a:5a:f4:83:1b:cd:6c:8b:35:60:39:88:06:4f:
                    87:2d:23:b7:24:67:ac:14:59:01:c1:09:7f:61:a2:
                    f8:b7:63:06:c3:6b:73:f2:c8:d0:93:1e:02:43:86:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:92:49:3C:51:65:B5:62:8A:9A:FF:1F:0D:0A:80:E9:99:D0:D1:30
            X509v3 Authority Key Identifier:
                keyid:EE:B0:78:F7:5E:A3:D5:35:8F:CC:A4:66:C7:55:D7:5D:12:30:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rB4916j1TWPzKRmx1XXXRIw-Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae60fa-96e5-4f6a-8b93-821707e2c002/1/7rB4916j1TWPzKRmx1XXXRIw-Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f3:03:72:0f:92:f0:45:68:26:d7:0b:1c:fa:d1:98:f8:8f:
         0b:ca:c4:99:e8:65:93:04:71:cc:13:7b:96:7a:63:1a:cf:ce:
         75:5a:34:49:7d:d5:07:cc:c9:ab:27:4e:fb:4a:7f:d9:ec:a3:
         d3:7d:b6:f0:ed:f2:23:ef:73:60:96:b0:0f:eb:ee:10:78:85:
         39:42:42:08:01:91:9e:8a:f0:58:16:83:f2:05:25:a8:a1:34:
         a0:e5:4c:77:ac:3a:8a:14:a1:9f:3e:1f:e3:e3:a7:d3:91:28:
         3d:a2:bb:16:3c:73:9e:85:aa:9a:24:1e:a8:a0:39:e3:9d:77:
         81:ea:95:06:83:34:ed:c7:d9:7a:53:b2:c1:b9:ae:ee:d3:fc:
         64:ee:86:4d:1a:ee:05:91:2c:21:5f:4b:9c:5a:f3:37:fc:b2:
         16:42:24:36:98:e9:a4:21:7e:2d:54:d3:5e:89:ff:d5:82:ed:
         15:91:21:bb:b6:e9:55:31:fe:79:79:f3:14:ee:14:48:45:99:
         7d:59:48:9e:79:98:b9:1b:d5:65:39:1a:bb:fe:e5:b0:ee:29:
         a2:e2:fd:17:1c:44:7f:58:d2:d9:e4:e4:dc:67:ab:99:52:8e:
         eb:95:d2:db:39:d3:37:46:b9:44:04:8b:e5:f3:f3:5c:65:51:
         51:78:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 12:38:55 2025 by rpki-client