Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
File:                     x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft (raw, json)
Hash identifier:          oibRQ3UaugPwMNv1ftNWajGaJTYv4xlVM7lF8woRz0I=
Subject key identifier:   7E:66:7F:44:C7:1F:5F:2A:60:0F:17:66:B0:12:9D:91:DC:3A:DE:FD
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Certificate issuer:       /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial:       019921B0D66EFA58BFCF32D1D7DFC082C301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 01:01:01 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:01 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:01 +0000
Files and hashes:         1: Oh5MBrSNQL-MIQM7mvcTSl4Bxlw.roa (hash: hR4K2IN0h854R5KFI9PRtJJgGILNncSrA/6ie+JyY0U=)
                          2: x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl (hash: GXLru6fUWZMK1t70Ea98W6uNuHSM+BFaYAWZlvzOgPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b0:d6:6e:fa:58:bf:cf:32:d1:d7:df:c0:82:c3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
        Validity
            Not Before: Sep  7 01:01:01 2025 GMT
            Not After : Sep  8 01:01:01 2025 GMT
        Subject: CN=7e667f44c71f5f2a600f1766b0129d91dc3adefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:a2:d2:0f:b2:7a:3d:a3:e3:b1:a7:6c:65:
                    ee:05:97:d2:69:e3:43:2e:42:7f:c6:f7:15:82:90:
                    c5:68:1f:17:2b:7a:28:69:32:79:26:d7:07:e2:a4:
                    87:04:e4:ae:d1:30:46:90:64:a4:a6:61:0a:54:d0:
                    22:88:a9:a1:30:72:6d:13:42:19:e6:6a:38:a3:7e:
                    6d:ef:35:56:c6:31:4a:88:a6:97:e3:80:ad:fe:63:
                    26:67:62:ad:65:89:8d:dd:ba:3d:93:3f:7e:64:9c:
                    d3:b4:00:b3:88:6f:2c:d9:0f:7a:55:e5:37:fa:21:
                    9c:f1:3a:6f:35:43:b8:2a:b4:ed:69:e2:83:03:84:
                    04:e3:bd:87:d2:62:69:a4:1e:3e:02:f9:b3:a2:07:
                    00:36:05:5c:c7:a3:5c:c4:15:6f:d5:e5:e6:0a:9f:
                    83:65:40:45:aa:05:b0:79:93:90:6b:ac:0f:d8:3b:
                    7d:bc:e7:54:c5:12:d0:77:c2:ef:d6:15:13:ba:4c:
                    0f:b7:d1:76:95:3b:87:de:ab:05:64:69:4c:d6:16:
                    e2:2d:fb:15:71:66:56:89:77:b2:09:c4:a1:f4:54:
                    f3:cf:33:1a:7f:94:45:13:c8:ad:ba:d4:b8:41:aa:
                    f9:7b:38:9b:23:24:44:9b:d0:85:22:39:6f:06:8f:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:66:7F:44:C7:1F:5F:2A:60:0F:17:66:B0:12:9D:91:DC:3A:DE:FD
            X509v3 Authority Key Identifier:
                keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:00:d7:ad:d5:59:a8:8d:13:90:a3:93:e6:a7:06:21:94:
         1a:53:c4:ed:63:33:45:2d:23:57:e8:58:d5:04:5a:c8:71:5c:
         98:ea:84:ef:af:59:b9:39:55:b1:0f:52:24:2c:40:e4:e4:2d:
         c1:24:a4:f5:4e:bb:a8:68:30:53:19:fb:f9:0a:d9:5e:2b:a4:
         ad:78:48:cf:fa:d6:63:5f:b9:93:57:57:f1:c2:16:f4:1d:d5:
         66:3a:30:39:7b:d5:a3:ea:43:7d:1f:96:cc:b2:bb:4b:96:ad:
         9a:00:3b:bd:5e:8c:24:30:d3:b1:86:9e:99:2b:90:33:79:ee:
         35:fb:c6:4d:e3:f0:2c:b1:43:d3:f8:cf:85:45:38:df:5d:0b:
         cd:5b:92:1d:06:53:5b:9f:e3:02:f6:3f:18:9b:b1:ac:55:0b:
         dd:63:0e:b5:e5:73:da:82:79:5e:5f:5a:5d:18:ea:39:8b:69:
         7c:8e:51:d4:97:ee:d7:ce:e4:0b:8b:ef:1b:69:d7:89:ae:89:
         7d:a2:d0:f7:42:88:86:da:2f:29:89:d2:fd:34:21:87:4c:03:
         12:2d:94:c9:68:eb:70:d1:96:65:da:80:56:45:97:ee:0d:a8:
         27:76:2f:1b:f4:d1:ad:f1:c8:0e:5c:3c:93:6a:9f:e6:3c:f6:
         28:2d:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:33 2025 by rpki-client