Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
File:                     yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft (raw, json)
Hash identifier:          9smjLpiQFPvke8MW1SJRQtXyp0AYmyV+GWtzyjP9i/s=
Subject key identifier:   CF:B1:36:9E:CF:69:32:C0:43:20:B0:3A:3F:43:5D:E5:3E:0D:FA:47
Authority key identifier: C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7
Certificate issuer:       /CN=c9392c3276b243aff740a082c588fb73941ebbf7
Certificate serial:       019922FA51BB0C72114554FEA1071EDA3398
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
Manifest number:          05E4
Signing time:             Sun 07 Sep 2025 07:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:54 +0000
Files and hashes:         1: aC22qm65HmlnQmRshJm7pr66v5M.roa (hash: LObDHQ4gNcpulvuWrsjsmncwDPjtYz0pJfy6Qo6CsRI=)
                          2: yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl (hash: /vsqeYqG1SSn+dxziE1lQvjqh9vrDZ4BrwsNnKvVEFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:51:bb:0c:72:11:45:54:fe:a1:07:1e:da:33:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9392c3276b243aff740a082c588fb73941ebbf7
        Validity
            Not Before: Sep  7 07:00:54 2025 GMT
            Not After : Sep  8 07:00:54 2025 GMT
        Subject: CN=cfb1369ecf6932c04320b03a3f435de53e0dfa47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:16:9f:6e:67:2f:bd:49:c8:fb:07:c6:19:2a:
                    4b:56:75:07:4f:93:41:25:fa:1c:5e:8a:d1:c2:8f:
                    6c:67:9e:32:79:a4:0e:b7:c1:06:76:4a:8c:9e:20:
                    48:3c:d3:eb:da:13:0f:40:46:e2:cf:35:f8:d1:10:
                    5e:a8:4c:80:fa:18:23:24:50:a8:46:59:0a:5d:d4:
                    65:b5:d7:a3:c6:4c:2a:81:48:9f:6a:0d:19:5a:fa:
                    9f:d6:f8:b0:67:ed:a6:9c:c4:f9:90:9e:df:69:b0:
                    58:1f:83:0a:7e:f5:c6:e5:29:4e:a9:7a:42:3a:47:
                    79:3b:62:3d:b8:b1:91:72:06:20:cd:3f:56:a3:81:
                    8d:9e:8e:61:ae:a7:b9:2e:d3:30:b9:fd:5b:82:9d:
                    6d:b1:92:7d:6c:9c:2c:ae:b9:c8:80:13:bc:7c:bb:
                    f0:3f:ab:75:56:a9:60:d6:36:2d:bf:a0:dd:7e:0b:
                    22:af:52:8d:fb:4f:3a:f4:7d:fd:4f:46:ea:07:bb:
                    33:ae:cc:21:0f:82:a2:b8:53:40:e4:d7:af:d8:c0:
                    76:72:86:90:cb:8a:27:6b:21:6f:5f:ba:6e:c7:c0:
                    29:21:9f:c0:e5:74:bf:34:da:62:b9:dd:a7:60:41:
                    0a:bf:e3:34:49:0d:5c:9e:07:a4:cd:2c:fa:96:bc:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B1:36:9E:CF:69:32:C0:43:20:B0:3A:3F:43:5D:E5:3E:0D:FA:47
            X509v3 Authority Key Identifier:
                keyid:C9:39:2C:32:76:B2:43:AF:F7:40:A0:82:C5:88:FB:73:94:1E:BB:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTksMnayQ6_3QKCCxYj7c5Qeu_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/256cb6-dc42-41a5-b920-24cba1c03c99/1/yTksMnayQ6_3QKCCxYj7c5Qeu_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cc:1f:0d:30:f4:ea:7d:d2:45:01:47:3c:69:ca:67:e2:1b:
         af:16:e0:cb:7e:91:7e:21:c6:44:3a:eb:c9:04:3d:3c:2f:bd:
         24:5b:d8:2b:f0:08:92:a2:cc:08:eb:27:0f:84:4e:83:84:67:
         15:ae:8e:3a:93:e1:2b:64:47:13:60:05:ad:ec:e7:17:50:96:
         74:14:1e:3f:c2:f6:b8:2b:c4:4c:8a:84:1d:c5:5b:60:90:84:
         31:7e:a2:4c:00:29:cf:e6:67:87:08:67:eb:ad:a7:7d:a5:b4:
         8c:1f:87:c4:64:8f:2d:d0:48:a4:d2:13:69:6d:15:40:f5:df:
         2e:ab:3d:55:17:41:66:d0:6a:ba:56:18:3d:1b:c1:bd:96:2d:
         64:b2:80:7d:79:21:e2:7b:e5:81:5b:45:ec:2b:0e:55:59:c5:
         71:e8:6e:47:fa:4a:b0:76:94:e1:9d:b5:dc:68:cb:3c:83:72:
         8b:cf:6c:93:f1:6f:af:5e:a5:09:c4:a3:29:f3:ac:0b:05:d4:
         c8:46:e6:21:8c:7b:74:e2:72:f2:32:84:26:40:18:b0:7c:c4:
         cc:5c:53:92:5f:c0:41:b1:39:9b:b4:48:f6:d6:a0:aa:f9:26:
         78:cc:00:f9:b7:45:57:e1:36:43:36:cd:fb:c2:48:e5:96:56:
         c2:30:5f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:21 2025 by rpki-client