Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          8LcPmqxVBSZAlEoQayaIBjz/ekQl3KRE+JZOVY+HQuw=
Subject key identifier:   86:87:6C:DA:03:C8:A3:07:32:4B:9B:28:68:CB:05:E1:C7:AB:A1:20
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01991DD43C69C968F1C555BF59900DE75A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          039B
Signing time:             Sat 06 Sep 2025 07:01:12 +0000
Manifest this update:     Sat 06 Sep 2025 07:01:12 +0000
Manifest next update:     Sun 07 Sep 2025 07:01:12 +0000
Files and hashes:         1: 1-PKUuNsEJ3tLZEuPjoAOQMT_Woc.roa (hash: db4gyVqkpYj83v8Ta45ebJbS66bcnTwGceaLvdpuYxc=)
                          2: CkiMuQO-HZ8_dLZxWAf3VaZATk0.roa (hash: gaCwedIpS7BbOyGI1iCDz8oJgVG+w+pP1mgoVFXRv1g=)
                          3: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: BBQgoRQe2p33owwirnmCCpojCdRDLOBFe61YfDFs/KQ=)
                          4: eBGwNIvr4Lj4M47kKGUi-7D1D_M.roa (hash: Zjt/nejVhW3kAdOfa1qcKhl5q75Mrz1DmK8AEuTOdBw=)
                          5: wnl2JH7TR5Suil54wScSQzokusQ.roa (hash: HhOHDe7BTsMrKEXbmgn7d5o1LXqITq2qdCdvpAanV70=)
                          6: xS0xd4twtayVXNjFhi99UyY_CB4.roa (hash: ucD5ixKVQUFni6fUFFLLn4XkhvnzoL7hmANgj6rPEBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1d:d4:3c:69:c9:68:f1:c5:55:bf:59:90:0d:e7:5a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Sep  6 07:01:12 2025 GMT
            Not After : Sep  7 07:01:12 2025 GMT
        Subject: CN=86876cda03c8a307324b9b2868cb05e1c7aba120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:70:da:52:bd:0a:4c:93:4a:5a:4a:62:94:ce:
                    3d:d4:61:3e:ae:0e:67:15:f0:df:56:cd:c5:8a:b1:
                    89:12:3b:94:34:32:ed:1f:52:a1:86:8b:d8:6d:73:
                    60:47:6c:0f:53:0f:2a:ee:8e:d8:9c:63:40:c6:63:
                    fd:56:5c:b1:26:b9:53:8f:22:e0:4e:6e:cd:0d:d5:
                    1a:c2:8c:07:34:67:c7:cd:d9:00:87:b4:10:1e:ad:
                    6a:62:96:4b:f3:52:45:db:8c:6b:5f:6b:69:52:86:
                    84:a1:c1:63:ab:08:2d:66:bc:e5:79:4e:66:2b:5a:
                    28:21:b3:84:af:e7:93:ec:e4:02:7b:3b:7f:c1:67:
                    c5:9b:a5:6f:c3:de:cf:23:4c:b4:10:84:43:9c:1c:
                    7e:5e:8c:14:1b:25:0d:22:af:47:bc:f4:47:58:bc:
                    ad:5c:90:36:79:b6:52:d0:5e:ae:93:77:99:d5:55:
                    c9:f2:b9:4c:1b:2d:6d:15:42:1c:0b:0f:21:0c:d6:
                    f2:ff:3c:e1:44:9c:e5:1e:0e:cb:09:68:96:98:88:
                    35:a9:34:3d:6f:3a:33:ce:ed:58:f1:81:c6:64:9c:
                    fa:a3:79:03:a0:d4:22:cd:18:e4:43:8d:56:59:ab:
                    79:d4:32:d8:37:1f:a8:c7:8d:10:ae:30:f0:10:58:
                    e5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:87:6C:DA:03:C8:A3:07:32:4B:9B:28:68:CB:05:E1:C7:AB:A1:20
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ce:b7:6c:17:75:57:6a:b3:b8:5d:a3:47:02:82:80:f1:94:
         bb:51:98:8f:2a:07:ec:03:ba:80:37:b5:b9:fe:98:3a:80:e1:
         12:a1:e6:bd:cc:79:d1:87:ac:77:7d:d3:ef:ec:52:ac:ae:90:
         77:e7:2c:df:36:6e:51:61:a0:ac:7a:6e:11:85:37:7c:14:79:
         b7:7b:dd:10:57:92:0c:57:02:69:05:f3:aa:9e:6b:39:c4:24:
         52:8b:12:b3:da:98:1a:e0:43:f1:11:39:88:dd:14:57:6e:23:
         91:5e:b0:98:2f:46:54:b1:82:a6:1e:be:a2:5b:d7:8d:c4:b4:
         35:a1:3a:23:6c:0f:47:e4:cd:88:f6:f8:8f:a6:e8:65:1c:ab:
         e8:fd:ab:eb:3f:31:a1:de:d9:93:12:6d:50:b4:f4:47:c6:02:
         9f:eb:a6:0f:c4:34:5e:4d:12:b1:16:86:68:97:9c:4f:4e:d5:
         08:c5:e8:e3:59:ef:1e:87:9b:d0:14:2d:bf:ff:4e:d5:47:8d:
         58:bd:26:03:07:c0:7b:cd:f1:e3:4a:cf:c4:a4:68:12:34:fa:
         2e:8f:2e:76:43:28:e3:cb:b5:b0:f0:94:51:e1:f6:8f:8e:a4:
         82:c9:80:58:86:51:0c:36:ea:a2:ae:65:30:ed:78:78:cd:40:
         ea:3c:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 14:19:50 2025 by rpki-client