Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          DFNFXj8llhAiwPRNgfy7YV6gAC8/flp9k5Qwfuv5W2g=
Subject key identifier:   70:2C:A2:0B:0A:51:8B:5A:14:6F:67:A5:6D:78:01:0B:CC:24:75:41
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019921B049B83E0C8A2C22EB7147A46FFEB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0A97
Signing time:             Sun 07 Sep 2025 01:00:25 +0000
Manifest this update:     Sun 07 Sep 2025 01:00:25 +0000
Manifest next update:     Mon 08 Sep 2025 01:00:25 +0000
Files and hashes:         1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: UWSQBKx12U/p0z/G2KiIJ4zNtiSED7CNRS1eImKMZn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:49:b8:3e:0c:8a:2c:22:eb:71:47:a4:6f:fe:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Sep  7 01:00:25 2025 GMT
            Not After : Sep  8 01:00:25 2025 GMT
        Subject: CN=702ca20b0a518b5a146f67a56d78010bcc247541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:b9:7f:f8:9a:6b:c5:7c:76:0f:ef:fb:20:
                    e1:b6:71:29:f3:6b:14:f7:d2:6c:32:4b:87:04:5d:
                    2c:e9:01:88:42:40:99:06:04:00:db:19:53:cf:46:
                    a4:60:ff:41:34:80:1c:d0:88:97:fd:eb:3c:5f:2f:
                    59:86:13:8e:58:84:b7:30:b9:c7:12:5c:67:b9:e6:
                    37:85:a2:2a:18:76:31:9d:28:91:bb:fa:57:4c:df:
                    5a:8b:af:ac:10:cf:ae:4b:86:e7:fb:5a:0d:ef:50:
                    2f:29:51:61:0f:7c:ee:a8:50:2d:29:f5:28:10:9e:
                    e2:d1:04:fa:92:57:27:30:a2:bd:f1:9f:39:ff:15:
                    f1:e9:d1:00:e0:67:68:0a:34:c5:5c:17:b9:94:8b:
                    73:47:c3:ba:f8:82:15:11:e2:f6:c6:b4:27:a3:37:
                    ee:9c:b1:73:f4:79:07:ce:eb:e9:5f:42:a1:de:1e:
                    ba:ef:09:68:42:ef:95:37:18:19:5e:8a:13:7a:17:
                    dc:48:ea:c9:89:cd:92:8f:31:8b:df:41:ae:b0:a3:
                    be:6a:78:49:be:f3:f0:3e:54:5a:cc:91:f5:1c:19:
                    2a:a6:f2:2b:3f:b9:f7:03:cb:0a:0a:ec:ab:91:ed:
                    75:07:82:af:4c:46:ea:95:55:24:0e:16:a7:57:bb:
                    85:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:2C:A2:0B:0A:51:8B:5A:14:6F:67:A5:6D:78:01:0B:CC:24:75:41
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:73:60:21:e2:89:0b:2b:9b:b9:2c:b2:ed:23:0c:ee:f1:24:
         69:ab:20:42:40:a5:c4:d0:8a:14:1f:75:72:1b:72:73:45:4a:
         68:4b:b1:a0:28:48:ca:e4:fe:9d:3f:9f:a9:5d:8b:16:a2:34:
         e2:ca:dd:ab:1c:0a:7b:61:7c:dd:19:97:aa:1c:88:54:36:20:
         0b:af:99:bc:12:6b:d7:86:a0:d2:78:94:c3:77:e2:f8:7a:48:
         9b:ff:5f:37:b5:d6:98:d0:68:1f:e2:bc:3d:92:a7:81:4c:1d:
         22:76:48:1f:be:2b:da:13:2b:93:17:f3:aa:61:13:83:d5:84:
         c8:fc:c7:c9:39:3c:7b:f1:ee:ee:f0:b6:00:f8:3c:58:8a:5a:
         52:75:1f:fc:20:c4:0e:89:bc:52:9d:a9:f7:d5:60:76:87:18:
         20:0a:39:df:26:b0:9a:fb:af:5a:e6:ee:99:6e:65:26:c3:6a:
         4e:d5:2d:1f:2b:5a:9b:75:41:c7:67:02:35:a7:ec:f6:9f:9f:
         1f:43:91:d9:1b:e7:9d:44:8b:19:8c:6e:78:af:ff:8d:13:2e:
         94:56:9e:a2:01:43:92:78:7f:c5:49:c6:8f:48:8c:33:d3:8c:
         20:bc:5b:3b:7a:84:80:a2:a3:cb:16:a0:51:7c:03:d3:08:ad:
         1e:c4:f0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:28 2025 by rpki-client