Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
File:                     2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft (raw, json)
Hash identifier:          52DsrMPVQA1brKBnHS/mu+nRfvRa/Ds7nDRyoiFKCIg=
Subject key identifier:   52:DD:1D:B3:2F:83:D2:90:6D:22:95:B1:82:2B:30:D8:CB:5A:25:14
Authority key identifier: D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38
Certificate issuer:       /CN=d9d0318f2685e32d2dba923f6662771427359738
Certificate serial:       0199240D01DBA7A89AEB3E95E7C1306D56ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
Manifest number:          1676
Signing time:             Sun 07 Sep 2025 12:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:56 +0000
Files and hashes:         1: 2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl (hash: H3/de2oP1nKm7wycV/yrr28YXQIjhxO3KFxCpjDF9ZA=)
                          2: 7qHMf0tDla85K4MWekgfnZC_GZ0.roa (hash: JjXdTvxVzICRsVC2xEQhCc6QbY1Z09t0LaEqj7BxkCU=)
                          3: NqNZtnoXM7iwpxu3KH3ENc53u_M.roa (hash: tIhk+tugHOEbprNpMaqqI4LseamZ25JrNrb/ctC6o6U=)
                          4: OCzx_78p6LuRZ2Y9VdripBX2gM8.roa (hash: Mc0jDuk9HPzcuOYUP3zkI8gHInm8/SYkdeSbffcFADA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0d:01:db:a7:a8:9a:eb:3e:95:e7:c1:30:6d:56:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d0318f2685e32d2dba923f6662771427359738
        Validity
            Not Before: Sep  7 12:00:56 2025 GMT
            Not After : Sep  8 12:00:56 2025 GMT
        Subject: CN=52dd1db32f83d2906d2295b1822b30d8cb5a2514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:6c:dc:86:a6:79:43:38:cc:e2:aa:d6:ff:
                    17:a0:ff:9a:a4:28:f0:79:9a:53:ed:df:29:0c:9a:
                    00:9d:96:2f:a4:7f:cf:04:5b:7c:9f:71:72:bc:8f:
                    a1:5a:be:5d:e5:a3:31:56:0b:5c:07:da:2f:d3:72:
                    42:58:45:23:93:06:36:0d:a5:72:f5:d6:b1:f9:e9:
                    e4:d9:02:a0:b0:6e:30:7b:3c:5d:51:7c:c1:19:fd:
                    4f:9f:5c:16:6b:bb:32:99:35:08:1a:91:f0:26:7d:
                    94:bd:6d:43:4e:63:b1:7d:93:c4:fb:fa:8b:df:cb:
                    81:ad:f5:d5:28:f6:6f:9c:4f:ee:96:65:03:e4:d1:
                    7e:88:e9:5d:1a:62:a5:80:4e:3d:e0:92:82:e4:c1:
                    da:69:0f:51:9e:3e:8b:e0:83:7f:d6:a2:31:e1:f9:
                    8a:54:94:b9:c7:85:9b:44:da:df:b8:e5:e2:5f:e5:
                    d3:03:21:86:87:23:5d:ba:94:af:c8:92:d8:c0:b1:
                    19:7a:fa:36:2a:c3:a0:90:07:d8:48:f7:34:4f:ee:
                    d4:a9:21:13:a3:19:f8:17:f4:88:95:38:3e:8e:81:
                    ea:de:c9:54:24:74:1e:74:37:24:c6:fb:05:6e:63:
                    2d:5d:52:2d:4c:20:57:4b:c8:67:74:2a:b1:97:b3:
                    78:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:DD:1D:B3:2F:83:D2:90:6D:22:95:B1:82:2B:30:D8:CB:5A:25:14
            X509v3 Authority Key Identifier:
                keyid:D9:D0:31:8F:26:85:E3:2D:2D:BA:92:3F:66:62:77:14:27:35:97:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8ce609-db1d-4997-9d8a-96ddd5a0239d/1/2dAxjyaF4y0tupI_ZmJ3FCc1lzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:a0:d4:22:9b:08:eb:7c:5f:b1:8c:a8:81:73:0d:2a:6f:
         fd:3c:0a:4b:2a:53:1e:2f:62:f9:05:f4:b3:17:a2:6e:16:2d:
         b5:fd:be:4c:05:3d:d4:bb:a3:c3:d8:3e:09:20:c9:5b:fd:39:
         d0:6f:cf:73:ca:5e:e6:93:ad:60:c0:42:d8:3a:4c:85:df:b5:
         21:c6:05:f4:1a:0c:e9:19:af:3d:ab:5f:cb:f3:fb:57:df:e8:
         12:ce:45:5c:c5:27:af:22:0f:2d:6f:08:91:8e:b6:0e:53:27:
         0c:6a:c3:1a:eb:58:20:4a:e2:b8:dc:de:57:8a:5d:c8:39:17:
         f2:79:2a:0b:74:23:a3:c6:1c:08:2e:c6:a7:4c:a2:69:90:85:
         65:67:32:f9:7c:61:1a:74:51:52:c9:33:6f:55:1c:fc:43:f3:
         21:90:15:92:0e:cc:97:fa:01:7b:0d:b3:3a:9c:54:26:e0:74:
         9c:3d:a9:54:cf:63:2a:98:eb:7e:04:fd:54:36:4a:42:84:ea:
         d2:f3:3c:8d:1e:a3:e3:48:8f:92:00:44:39:ab:36:0d:e1:95:
         7d:1a:6a:25:38:92:ee:78:01:d6:43:01:a9:91:ed:fb:46:72:
         0c:3d:db:ea:02:72:31:3b:1c:6b:6f:e6:fd:01:c3:04:24:5f:
         41:30:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:57 2025 by rpki-client