Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          8sUQIdyZ0dzsLgSAC1YJ2BFYskSV9Lndkw9VpJHKZ0c=
Subject key identifier:   44:38:DC:76:69:12:E1:B3:72:AB:28:9A:69:39:E8:89:14:12:1D:B2
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       0199221E8CD0DCE6CA7138CE7F666DC5DE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          0A7F
Signing time:             Sun 07 Sep 2025 03:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:51 +0000
Files and hashes:         1: 3-lLWfL65uJnHZ2rztKfPXmI6kg.roa (hash: TNLFS3eE9Ow6yD/bR32mYv3A5v+ZXVoId2+UI7n/x9s=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: 8hBztyRweBl0gG6MZ46j3JICt05u1Ua3Cxz4ddUDjo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:8c:d0:dc:e6:ca:71:38:ce:7f:66:6d:c5:de:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Sep  7 03:00:51 2025 GMT
            Not After : Sep  8 03:00:51 2025 GMT
        Subject: CN=4438dc766912e1b372ab289a6939e88914121db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:0d:e0:fe:27:bc:9e:11:b5:59:8d:5a:27:
                    4b:df:a7:9c:a7:cc:31:93:07:e2:d0:77:9f:08:44:
                    eb:f0:19:bb:34:37:9b:18:4f:9d:af:6f:1f:8e:75:
                    0c:ec:09:ef:40:cf:1b:b3:35:07:f6:4f:72:b0:81:
                    fd:c9:1e:60:d5:45:b5:19:6d:c6:82:c5:83:55:8d:
                    ac:d9:14:32:cb:5c:52:05:0f:b4:81:46:bc:f0:44:
                    5f:b3:d8:a5:93:fa:2b:df:c9:86:f9:54:a4:f6:95:
                    5b:a8:e0:3a:67:c3:dd:c6:bb:4b:77:21:96:fb:6d:
                    49:d3:02:f8:0f:37:04:dd:6f:27:4e:77:71:5f:83:
                    35:dd:83:db:51:e4:63:3e:bb:81:1d:12:49:67:1c:
                    24:7f:7b:66:21:2e:bd:37:58:4b:32:ce:05:f9:17:
                    25:70:11:6c:9b:a5:38:5c:a5:f5:81:9f:40:cb:cf:
                    a9:5b:42:64:fd:c0:63:55:2e:6d:41:fa:c2:70:a7:
                    6c:5d:30:1c:7d:9e:6b:b4:fd:79:03:bd:ee:43:14:
                    24:07:a6:95:43:0b:0e:87:31:2f:61:6a:21:72:66:
                    7b:f4:58:2d:ac:db:40:31:0f:64:3b:25:82:15:35:
                    0f:29:4b:c5:ab:53:a2:5a:c7:00:cf:a4:1c:8b:3a:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:38:DC:76:69:12:E1:B3:72:AB:28:9A:69:39:E8:89:14:12:1D:B2
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:23:e6:29:f0:ec:e0:75:cb:d2:ef:24:69:3b:fe:07:01:7d:
         6f:f0:86:ae:2b:ed:c6:1c:11:bd:0b:77:59:43:63:73:ad:1c:
         67:7b:c4:f1:3e:31:60:2f:00:8c:fc:81:ea:dd:58:b0:eb:7b:
         68:96:43:72:d4:cb:00:28:b6:af:2c:bd:33:82:6c:36:ab:94:
         7a:99:78:19:d4:2e:34:3e:15:ad:78:28:a1:db:7f:3f:28:a2:
         02:2b:ba:c5:d5:df:0a:f2:32:99:1d:f4:25:b3:6b:57:c0:ff:
         4e:49:e6:06:e8:85:12:b6:90:75:fd:dc:8f:9e:83:2e:50:c9:
         60:6e:87:a1:83:24:5c:81:4a:21:f9:9a:07:50:0e:c9:74:b7:
         79:2e:c1:68:fd:6f:12:d6:a1:0c:64:72:10:d9:6c:32:d1:e8:
         e1:0c:00:f2:8c:a3:3c:07:2c:60:fd:77:11:8e:eb:98:d8:67:
         a6:62:6f:3e:6b:95:7d:e2:b1:9f:39:39:d2:94:7c:a9:5c:fb:
         37:a4:43:fd:47:88:ef:9f:75:be:0a:28:c7:fd:3c:3b:a4:57:
         d4:8e:6a:f3:f0:01:7a:b4:69:e2:ad:2a:ac:22:f8:61:83:ed:
         8c:89:ae:95:36:11:45:ee:31:61:06:fe:4f:b0:da:41:a6:4c:
         83:bb:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:25 2025 by rpki-client