Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
File:                     R60fV24_cbT2wzkfL6ND1Qi2se4.mft (raw, json)
Hash identifier:          JkUMgVXQKqWEqarQe7a/x4ifocLaYdwZhedZs4LwY/w=
Subject key identifier:   82:D3:84:77:78:E0:AD:04:4F:90:57:77:F1:D2:A1:E8:40:2B:E7:4D
Authority key identifier: 47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE
Certificate issuer:       /CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
Certificate serial:       0199225599EE0279C0BB75ACAC312025B2D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 04:00:59 +0000
Manifest this update:     Sun 07 Sep 2025 04:00:59 +0000
Manifest next update:     Mon 08 Sep 2025 04:00:59 +0000
Files and hashes:         1: R60fV24_cbT2wzkfL6ND1Qi2se4.crl (hash: 7ItTTUY7Rzmef2uaFVZu202gn60fiinEwQFBLUttKqY=)
                          2: aO3r11e9FzxFIAvzci6U1ugRCX4.roa (hash: RN1LPTFZ9dixQeq/j0V0Euzw3FqtnyCrfR7culnL03E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:99:ee:02:79:c0:bb:75:ac:ac:31:20:25:b2:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ad1f576e3f71b4f6c3391f2fa343d508b6b1ee
        Validity
            Not Before: Sep  7 04:00:59 2025 GMT
            Not After : Sep  8 04:00:59 2025 GMT
        Subject: CN=82d3847778e0ad044f905777f1d2a1e8402be74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:e9:f5:44:f5:94:d6:bd:0a:88:ab:b4:70:
                    78:d8:3c:63:57:48:55:18:d3:5f:59:b0:cd:0d:d5:
                    4b:f9:58:5c:a5:c2:5b:f5:8a:3d:26:c8:bb:68:32:
                    6c:e2:52:1c:e2:5e:f5:5c:e1:0e:d0:0b:0e:45:5f:
                    98:25:b0:6d:ac:a3:e4:bb:b3:0d:e4:36:25:9d:9e:
                    ae:4b:83:37:22:bc:46:6b:f3:d4:dc:b4:9a:ec:45:
                    95:1a:62:e9:ea:18:e8:dc:aa:62:39:b0:cb:c1:50:
                    be:ff:1c:67:b0:55:61:44:f1:71:00:19:c2:5f:11:
                    b1:b6:82:19:e9:c9:08:b8:ed:cc:65:72:10:7a:bb:
                    7e:17:7d:f0:7e:43:75:8c:67:db:e9:f2:33:09:d4:
                    16:dd:4f:42:7a:c0:c6:b0:3d:22:61:0e:aa:a2:e8:
                    fd:e8:9d:f4:d3:6c:e4:98:20:14:96:73:17:c2:44:
                    9f:af:49:aa:e3:01:bc:95:57:79:01:4a:71:a5:8b:
                    4c:fc:09:58:09:46:5d:5b:b4:f7:31:77:8e:5b:fb:
                    a4:f4:04:25:94:5e:55:93:86:ab:de:68:22:2c:a9:
                    7b:32:66:42:56:35:62:7a:2e:c8:93:5d:f1:1b:ff:
                    a4:6e:63:e6:08:65:21:21:b0:71:23:c9:4c:15:19:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:D3:84:77:78:E0:AD:04:4F:90:57:77:F1:D2:A1:E8:40:2B:E7:4D
            X509v3 Authority Key Identifier:
                keyid:47:AD:1F:57:6E:3F:71:B4:F6:C3:39:1F:2F:A3:43:D5:08:B6:B1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R60fV24_cbT2wzkfL6ND1Qi2se4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2e0286-5639-4a1c-8bf2-3ccb3074020f/1/R60fV24_cbT2wzkfL6ND1Qi2se4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bd:3e:9d:9c:45:2a:1f:c9:e4:47:8a:3d:06:f8:b8:85:82:
         ee:26:0d:07:40:51:dc:f4:ba:cb:3c:46:20:2b:71:b3:f5:43:
         fb:d2:c8:ee:dd:89:e2:77:b0:8d:de:47:8d:6c:9f:fa:20:9c:
         f7:05:40:48:64:39:e3:39:df:59:ea:fc:aa:97:c5:c8:da:e0:
         d4:95:1e:d6:c1:c3:0a:04:c2:a1:d1:f6:94:3c:42:2c:c6:f9:
         30:e2:a2:9a:41:39:9e:2a:12:93:37:4d:06:43:8a:e6:ad:07:
         d9:4f:59:99:a6:9b:4b:92:9c:6f:c1:2e:f2:af:7e:cf:04:20:
         c9:c7:5e:80:18:97:d9:02:7c:71:37:b5:59:3e:e0:3c:77:35:
         f4:41:45:bd:6f:6b:36:82:f8:5e:d2:c9:7a:f3:1e:e2:b6:55:
         ca:e6:17:60:e5:74:65:ad:bc:6f:f9:fc:bf:af:46:20:56:e0:
         95:c7:07:8a:1f:59:5c:ec:3a:8b:eb:ab:48:58:17:f2:f4:39:
         1c:3b:d0:13:32:66:98:a6:ee:d5:67:89:c8:68:6c:ee:93:46:
         aa:47:bf:fa:f6:b3:c9:3d:d9:d3:3e:8c:a1:39:fa:25:77:55:
         f2:cf:2f:cb:8b:30:c3:f0:39:e6:97:34:9d:2d:80:31:e6:72:
         20:5f:f6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:16:32 2025 by rpki-client