Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
File:                     _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft (raw, json)
Hash identifier:          VqgaMIJlVWf7q7T4A3CyFnltzLiNQ7LDY782TaniDtA=
Subject key identifier:   C5:9B:49:30:ED:D9:A8:4D:19:EE:BE:D4:90:1E:FD:52:4C:78:86:D3
Authority key identifier: FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B
Certificate issuer:       /CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
Certificate serial:       01991764819539C77D5AA6185782511B4721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
Manifest number:          13AA
Signing time:             Fri 05 Sep 2025 01:01:26 +0000
Manifest this update:     Fri 05 Sep 2025 01:01:26 +0000
Manifest next update:     Sat 06 Sep 2025 01:01:26 +0000
Files and hashes:         1: ZmTI_BE0CxW812diBboPemqYE3k.roa (hash: 8pQSyVxeeGwYbTb0adthXkVgEKcNeH2p/++sCFVOF1Y=)
                          2: _Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl (hash: Idu82jx0hTAveeG+L6hZcCI6Y4crTep8b0zGs0AB01w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:64:81:95:39:c7:7d:5a:a6:18:57:82:51:1b:47:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc072ee2515a07c667e1c5cfdc0210e6581b097b
        Validity
            Not Before: Sep  5 01:01:26 2025 GMT
            Not After : Sep  6 01:01:26 2025 GMT
        Subject: CN=c59b4930edd9a84d19eebed4901efd524c7886d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:79:6b:85:36:06:38:06:76:54:c1:76:7d:
                    5b:10:e5:d3:7b:51:20:51:df:af:f2:c2:de:87:64:
                    52:72:59:42:05:a9:68:b3:92:62:c6:9a:eb:5f:58:
                    b9:e4:7f:5a:24:58:e0:b3:b7:2c:ce:57:91:70:c0:
                    7d:03:e1:12:41:27:3f:af:aa:a2:de:89:e8:c1:b7:
                    f1:48:4d:99:fc:41:9b:c1:1f:28:29:7b:3c:14:a6:
                    33:03:c6:cc:ab:41:16:56:38:2e:27:56:1d:4a:bc:
                    79:9e:13:5f:20:47:eb:1e:f8:45:43:6e:9b:73:4b:
                    9f:35:9d:4e:a8:6f:bb:c9:0d:ec:e0:f6:43:c3:eb:
                    fb:e0:9e:eb:3a:1b:45:2a:f9:4d:26:23:75:e1:78:
                    bf:40:38:78:fe:9d:5d:2f:62:ca:9e:83:8c:1d:02:
                    4f:80:6b:7c:a8:31:be:fa:d0:2e:91:5c:00:df:39:
                    bc:5b:17:51:79:6a:df:b2:bc:24:67:ee:2a:81:09:
                    91:fc:1c:0f:fb:b2:59:ee:8f:56:20:8d:27:c6:19:
                    7a:2e:fe:90:83:e6:6a:be:9b:02:a4:86:60:a9:7c:
                    cd:4e:4f:a1:94:bd:69:8b:da:d1:59:a2:f7:b6:61:
                    7a:ae:07:9d:04:a2:5e:92:6e:17:b0:68:93:02:64:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:49:30:ED:D9:A8:4D:19:EE:BE:D4:90:1E:FD:52:4C:78:86:D3
            X509v3 Authority Key Identifier:
                keyid:FC:07:2E:E2:51:5A:07:C6:67:E1:C5:CF:DC:02:10:E6:58:1B:09:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13ff49-74a5-4f01-bc6f-c4bcf1471b5a/1/_Acu4lFaB8Zn4cXP3AIQ5lgbCXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e8:4e:5d:c1:42:c8:0f:d6:bc:21:ef:5c:6d:96:bd:62:8b:
         0f:21:ad:a0:49:97:be:eb:84:73:57:87:bf:27:4c:e2:40:34:
         8d:f5:b5:d9:29:13:f8:ba:c6:23:6d:99:58:30:0c:3a:56:f0:
         86:6b:98:ac:87:ee:ef:49:dc:9a:d1:2f:d1:15:a2:b4:6a:78:
         10:44:4a:60:4e:2f:9a:c8:d9:26:5f:33:dd:0e:19:5f:0d:0b:
         99:51:74:2c:95:33:c6:0a:de:89:09:a0:48:c9:a7:fe:25:df:
         25:87:dc:68:22:c1:d2:bb:07:d2:a4:1e:93:4a:7f:ff:09:d0:
         c8:8b:b4:99:0d:f4:ac:9f:30:a4:a6:87:b7:0a:a3:43:29:e1:
         2b:f6:e9:27:d6:b9:9e:d3:aa:bd:de:60:53:d3:0c:72:f3:71:
         17:1c:d9:25:10:7c:5f:71:e9:fb:c8:f2:d9:9a:04:76:c2:17:
         19:fc:7f:7d:91:4d:34:91:09:f2:8c:2b:6c:22:f9:19:41:1c:
         2b:a5:e6:7e:84:55:79:4d:48:82:ed:cc:c0:9f:74:4b:b4:0b:
         cc:d6:3f:ec:d6:bf:4f:1c:2a:ca:44:af:6b:d0:54:f6:05:40:
         89:31:20:81:1a:e8:65:25:b5:0d:44:43:34:e6:96:ce:63:2f:
         64:ad:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:49:30 2025 by rpki-client