Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
File:                     9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json)
Hash identifier:          I3qCrNL5scskn1BLvnym80P2qptMNu1Q96kCo5xlwrU=
Subject key identifier:   CD:E4:9E:9A:1F:C2:70:77:D7:F6:64:51:6E:9C:E9:F7:C8:43:BB:F4
Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E
Certificate issuer:       /CN=f56153c50b8815bd28dfbb00e23e6f263203172e
Certificate serial:       0199247AF4918B2B2ED56A27E81C0113C452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
Manifest number:          0B55
Signing time:             Sun 07 Sep 2025 14:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 14:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 14:01:01 +0000
Files and hashes:         1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: NJzq8E7rJg9pwMWN1EJ5U4YMQKXHc/N+GPjGT++ItmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:7a:f4:91:8b:2b:2e:d5:6a:27:e8:1c:01:13:c4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e
        Validity
            Not Before: Sep  7 14:01:01 2025 GMT
            Not After : Sep  8 14:01:01 2025 GMT
        Subject: CN=cde49e9a1fc27077d7f664516e9ce9f7c843bbf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:d1:a5:54:1d:e6:1e:90:31:52:d5:c2:80:
                    5e:af:fd:39:58:39:b3:52:da:02:33:25:2a:97:0f:
                    f6:03:a1:f0:06:0e:3d:dd:5a:12:26:ff:86:1b:e0:
                    19:57:4d:ee:be:82:ff:81:f5:80:e6:f0:e3:a0:51:
                    cd:2c:d7:04:cd:de:43:50:25:c7:70:32:85:1b:c9:
                    29:96:23:d8:e8:ff:c4:6c:e2:4d:27:11:37:8b:9a:
                    46:be:9e:18:eb:eb:83:6d:98:ec:3c:b0:59:4d:e2:
                    1a:a4:6e:23:60:1a:e5:df:91:c1:54:7f:09:97:37:
                    8a:ef:ca:84:8d:e6:04:0d:59:df:06:9d:53:62:7a:
                    4a:e4:00:fd:af:0d:e1:4f:78:ba:c0:5f:41:6b:be:
                    27:3f:37:bd:5f:96:5e:33:2e:4b:22:cd:5e:3b:f8:
                    be:fb:8e:b6:0f:92:aa:15:3d:df:d7:da:f8:64:98:
                    45:67:59:26:09:1b:6e:e9:5b:31:13:5b:c8:0f:28:
                    8d:90:3c:3f:b0:54:79:1e:98:1f:99:06:4c:30:89:
                    c0:b6:f0:77:26:ed:6b:20:45:bc:b9:e0:ef:22:c4:
                    3d:99:7d:04:d5:d1:97:19:1c:4e:19:b6:b4:79:5a:
                    94:f9:f8:c5:6f:a2:7a:e6:b7:87:af:90:3d:60:37:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:9E:9A:1F:C2:70:77:D7:F6:64:51:6E:9C:E9:F7:C8:43:BB:F4
            X509v3 Authority Key Identifier:
                keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1b:e9:bf:ba:b3:ac:b8:50:3d:e9:9f:db:bc:44:53:75:9f:
         7d:81:86:b0:dc:11:f8:62:be:24:b2:10:3a:a5:21:9d:28:4b:
         6e:91:f0:87:d3:91:34:50:6a:34:93:e2:e6:3b:18:9c:c2:3c:
         24:f3:f9:22:0e:80:36:a9:30:ab:83:1f:e2:ea:09:4e:7d:4d:
         a3:13:10:75:51:73:46:9e:15:62:dc:9a:f3:c9:9a:e5:d0:aa:
         46:69:84:6c:81:d7:4a:64:1c:11:3d:ba:09:82:80:96:7b:31:
         33:e9:2b:bd:1f:28:ba:3a:57:6a:bc:92:36:53:53:a8:8d:49:
         ef:d1:57:37:7a:24:23:57:1a:97:7d:49:f3:03:eb:17:97:6e:
         2c:0f:a3:fe:31:e4:de:da:d3:7e:db:ba:eb:b1:3e:cb:b4:66:
         1e:ee:07:0d:b1:cf:1f:ea:2f:95:0a:93:6f:ad:37:3a:b0:38:
         fc:ce:19:de:c6:c1:2e:e5:d9:d4:98:49:01:35:6a:14:dd:09:
         ea:35:c6:1d:b5:6d:70:d2:d2:dd:30:be:ff:80:a5:f4:41:12:
         5b:df:2c:32:c2:ee:70:d9:6e:e6:8b:77:ce:ec:72:c5:b8:49:
         a1:14:8e:ef:0a:c6:da:12:d8:50:6f:e6:ad:cf:d6:63:30:23:
         f9:81:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:53 2025 by rpki-client