Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File:                     1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier:          8QwI6MIuMfQgRVxnP8xiLhH4vnZBi+nDTK/6D8l2yho=
Subject key identifier:   49:90:24:FA:60:F7:64:22:BF:3A:3D:3E:7F:8E:C3:EE:A0:DF:FE:EB
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer:       /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial:       01992331425CBFE5BFC628480FFC4640B452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number:          0F36
Signing time:             Sun 07 Sep 2025 08:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:54 +0000
Files and hashes:         1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: 88fj7ywcDWM5hjKwDab7dWkhb56VhR/9S8J2N86NN04=)
                          2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:42:5c:bf:e5:bf:c6:28:48:0f:fc:46:40:b4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
        Validity
            Not Before: Sep  7 08:00:54 2025 GMT
            Not After : Sep  8 08:00:54 2025 GMT
        Subject: CN=499024fa60f76422bf3a3d3e7f8ec3eea0dffeeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4f:f7:c3:c9:69:00:f7:f4:77:f3:ae:44:a1:
                    03:0f:ae:08:71:dd:63:8f:b9:7b:30:41:93:95:f4:
                    c4:10:66:be:e0:e3:9a:f0:ca:71:6f:08:dc:e4:08:
                    af:7c:87:49:b4:23:a0:48:bc:73:fe:21:8c:3b:6c:
                    cd:6b:f2:4d:67:98:9a:2f:58:2e:2e:99:a7:52:ce:
                    93:fd:ab:16:37:f4:0d:72:13:19:27:00:44:4e:36:
                    69:e1:03:a6:f3:a1:b5:ca:60:3b:44:6e:29:9a:60:
                    97:b5:c8:f0:95:37:b6:39:bb:fe:34:35:e1:33:7d:
                    82:98:0b:0c:06:70:46:98:59:45:91:d2:13:9c:bb:
                    f1:16:de:9c:64:0a:ec:d7:34:b3:62:3a:81:1b:03:
                    d3:45:d0:85:18:35:8c:2e:f2:f3:c2:58:d2:62:fe:
                    b8:17:75:17:ad:35:1f:12:de:49:87:1e:55:68:bb:
                    5f:a9:ec:2e:9a:a2:f7:c3:99:13:07:1e:5e:7b:08:
                    3c:ec:2b:b0:46:58:e3:55:50:ea:c7:c3:da:8c:3c:
                    09:72:6f:c1:99:b4:a9:43:e4:79:47:ee:b5:94:c4:
                    ac:5e:b3:29:13:5d:0c:21:40:3f:1b:f7:6d:d0:2a:
                    ee:62:ca:28:f4:07:ca:d1:56:c5:f0:8e:7b:65:c4:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:90:24:FA:60:F7:64:22:BF:3A:3D:3E:7F:8E:C3:EE:A0:DF:FE:EB
            X509v3 Authority Key Identifier:
                keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:3a:20:4f:80:c1:90:08:8e:46:39:f5:52:b1:fc:31:3a:41:
         56:5e:57:3f:a0:4b:06:cc:0c:b6:24:9a:87:fe:ce:0f:72:35:
         3c:58:ae:17:ac:0e:61:62:b1:67:bb:52:66:d9:64:c2:de:bd:
         68:87:92:b1:9b:cb:82:de:b8:6c:f3:ac:88:fb:b9:36:30:b5:
         fc:15:bd:d3:7b:49:0a:ea:f7:74:44:a0:0e:c9:e3:b1:47:31:
         41:46:71:0e:0e:c4:a1:6d:ac:0f:9f:8e:70:47:8e:af:ef:66:
         14:cc:db:f5:8f:cf:b0:95:b4:e6:3f:78:d9:73:f6:b3:11:2b:
         84:39:08:cb:e0:17:b7:61:9a:c6:fa:1e:30:1d:9d:95:d5:34:
         ef:27:d3:94:30:dd:9a:ef:48:2c:2a:94:83:2c:d6:03:71:55:
         9c:cf:6a:73:82:62:df:e8:87:8d:23:51:7e:9b:5f:ab:ef:90:
         a0:a5:fc:9e:ab:df:3e:6b:c2:0e:04:77:6a:19:bd:c5:5a:fb:
         24:ef:0a:7c:0f:7c:86:d0:28:5b:b6:be:e8:11:a0:ad:72:c0:
         1a:18:4c:29:ed:76:2b:be:58:1a:8d:34:47:00:b1:aa:5a:4b:
         c2:1f:5c:e1:d2:1f:3b:11:5c:36:69:9a:bf:02:ed:f8:d9:1e:
         b3:cc:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:43:46 2025 by rpki-client