Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
File:                     AZaQhdv67lorEfXMh_WddBh4vR4.mft (raw, json)
Hash identifier:          cXJHu2EPDTgXnUKdJKh1pQWKp5MGPgCKPxac75fCOGs=
Subject key identifier:   9F:F7:3B:2E:1D:71:62:FF:5C:22:39:C2:1D:3D:1C:44:34:EA:88:2A
Authority key identifier: 01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E
Certificate issuer:       /CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
Certificate serial:       019923317155D74882116CE14E9D7418F488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
Manifest number:          016E
Signing time:             Sun 07 Sep 2025 08:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 08:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 08:01:06 +0000
Files and hashes:         1: AZaQhdv67lorEfXMh_WddBh4vR4.crl (hash: 0kB7H4p9cyk4teKBgmCxLV/eD48jmF/m3kX6eb0TPDA=)
                          2: xHVOnj8EcbFBen1MyRZoj--uhBk.roa (hash: P4+RXZYamg4bOLBzEuVlQBy3U8VEBU2eNpWSAyTMkyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:71:55:d7:48:82:11:6c:e1:4e:9d:74:18:f4:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01969085dbfaee5a2b11f5cc87f59d741878bd1e
        Validity
            Not Before: Sep  7 08:01:06 2025 GMT
            Not After : Sep  8 08:01:06 2025 GMT
        Subject: CN=9ff73b2e1d7162ff5c2239c21d3d1c4434ea882a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d6:86:ce:b4:6d:13:64:59:11:87:35:5a:e0:
                    a4:3a:44:b9:8d:80:d2:68:2a:88:c2:38:da:ac:9f:
                    52:91:00:8f:ec:8c:2c:b8:b5:14:39:90:76:7b:a2:
                    65:ac:25:e7:d7:97:a2:8b:92:85:0e:f6:7b:11:e7:
                    3f:87:2c:39:85:c5:fc:77:8e:60:0d:ef:86:a3:be:
                    c5:9f:a0:cd:11:23:11:f5:62:61:66:02:1d:bf:44:
                    c3:3d:0a:d1:aa:e7:0a:a5:60:d1:18:4e:29:d0:cf:
                    d1:18:86:ec:31:85:29:d4:79:16:47:57:0d:67:19:
                    7c:db:16:de:25:11:7e:b2:ac:e0:bb:5d:16:c2:a9:
                    97:20:83:22:8b:8a:9d:e5:e0:f6:d7:10:86:78:39:
                    05:71:cf:1c:c4:f4:36:cf:b2:25:b4:e2:ad:6a:0c:
                    29:43:58:87:bf:37:bc:62:b5:ec:1d:12:4e:af:dd:
                    c7:46:47:7b:c2:84:52:25:32:7a:8e:0e:c6:cc:cb:
                    b8:4f:bc:c9:98:be:23:ea:e4:83:2e:32:dc:02:fd:
                    6a:d0:40:b4:c9:04:a1:0b:7c:44:09:2d:ba:99:61:
                    7d:39:5b:88:c2:1e:a9:67:1b:29:81:74:ff:a9:ef:
                    97:88:57:db:a4:c2:5f:f1:24:d4:9a:16:0d:76:74:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F7:3B:2E:1D:71:62:FF:5C:22:39:C2:1D:3D:1C:44:34:EA:88:2A
            X509v3 Authority Key Identifier:
                keyid:01:96:90:85:DB:FA:EE:5A:2B:11:F5:CC:87:F5:9D:74:18:78:BD:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZaQhdv67lorEfXMh_WddBh4vR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c404da-04e5-45ed-9072-667d974f8b14/1/AZaQhdv67lorEfXMh_WddBh4vR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:05:90:a1:6a:68:78:b4:af:a8:cd:8c:ad:ad:16:72:80:3d:
         54:eb:28:a8:bf:d7:0d:20:7f:df:60:77:02:67:0d:b2:8b:e8:
         9f:ad:b4:33:fe:93:56:62:cd:73:7a:e4:f9:56:ad:b9:bb:1f:
         29:84:b6:ae:f3:4a:4f:37:eb:a4:03:ef:dc:2c:6d:e4:cf:3c:
         9b:d9:68:4f:16:43:5e:9e:b4:92:cb:be:b8:04:0e:49:15:27:
         41:b1:02:9a:4c:26:5d:96:bd:00:79:3f:44:c3:09:56:4f:8b:
         43:bb:d8:9d:1c:8e:48:2e:c4:1a:4a:c6:15:af:c5:0d:62:b3:
         a7:92:16:fe:ac:eb:8f:98:39:e2:fa:b4:6b:65:67:a2:4f:1d:
         1c:d1:98:17:06:f4:f7:f6:7f:4a:27:f9:f0:11:0a:3f:e2:3a:
         10:cb:ba:42:9b:c4:68:4d:22:07:6d:5f:cd:03:b7:cb:d5:06:
         38:d5:54:78:1c:85:70:9f:19:d0:ce:56:ad:bb:2d:9f:c2:d2:
         8e:d0:80:f2:b2:34:9a:ba:ba:ff:23:37:d8:04:c6:6f:cc:11:
         3c:a8:29:3f:67:87:6d:27:f9:e3:bc:90:f1:03:82:70:8c:c2:
         ca:9c:81:46:10:4e:4a:cc:cf:93:be:cf:2e:49:92:07:33:72:
         83:d6:95:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:24 2025 by rpki-client