Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
File:                     m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json)
Hash identifier:          jSTt0BXNIqcoNzxt+F0RtTjl2T9dSmdz4VJvDqWdV/M=
Subject key identifier:   1F:51:EF:0F:A0:3D:D9:0A:73:6E:D5:6A:0A:A2:51:13:CD:0B:C8:50
Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4
Certificate issuer:       /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
Certificate serial:       019922FA1734FAF0007CCA4E92C20C0639B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
Manifest number:          0518
Signing time:             Sun 07 Sep 2025 07:00:39 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:39 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:39 +0000
Files and hashes:         1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: w+4qIr1JFg831dCU3NA/+4yjA3sKrrIwF3quXel78bk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:17:34:fa:f0:00:7c:ca:4e:92:c2:0c:06:39:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4
        Validity
            Not Before: Sep  7 07:00:39 2025 GMT
            Not After : Sep  8 07:00:39 2025 GMT
        Subject: CN=1f51ef0fa03dd90a736ed56a0aa25113cd0bc850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a4:d3:0f:25:9c:af:b8:ae:71:d3:eb:20:ad:
                    8e:ce:17:72:7c:26:aa:4f:df:f0:8c:2a:3b:09:fc:
                    3b:1f:dc:55:44:9a:b4:68:96:16:ca:17:ca:7a:d5:
                    3d:c7:1c:da:2c:9d:33:2f:0a:98:82:8a:92:51:cf:
                    df:62:75:a4:c7:57:6c:37:88:c2:e9:0f:6b:ad:f1:
                    ac:a8:e7:17:7e:5e:9d:64:b6:18:be:df:81:a9:6d:
                    af:c4:42:84:bb:01:46:8c:53:c9:10:bf:f3:38:93:
                    72:0a:62:10:6f:08:75:53:b4:b2:ac:29:e9:65:94:
                    53:df:6c:ab:f3:84:28:3f:d5:77:39:48:12:eb:a3:
                    8d:08:e5:61:4f:ff:dc:85:7c:e1:e6:80:bb:0c:86:
                    3a:ee:9c:86:88:07:12:41:2a:d6:2f:05:ed:be:1e:
                    73:ec:be:bd:2d:48:5b:a2:9a:36:21:7b:26:d7:8c:
                    0b:7b:67:1f:c2:e7:8b:9f:f4:64:b3:13:02:28:43:
                    21:a6:d6:cb:0b:55:af:63:d6:76:ea:0d:9b:e1:f7:
                    d3:9e:d1:9b:f4:92:af:f4:f1:bd:35:df:9c:2c:ad:
                    14:49:81:8c:c8:f5:64:de:27:50:11:6c:a5:bd:93:
                    0f:9d:1a:83:29:52:63:28:9c:4f:26:e7:f4:05:94:
                    04:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:51:EF:0F:A0:3D:D9:0A:73:6E:D5:6A:0A:A2:51:13:CD:0B:C8:50
            X509v3 Authority Key Identifier:
                keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:31:d3:51:07:05:c6:9c:31:63:a0:33:ca:fb:c6:ca:a0:
         ba:c9:e9:bc:e6:4a:13:55:a6:d8:80:ae:d1:7f:de:51:67:05:
         d9:e1:4e:cf:ac:92:f5:a2:77:a8:1f:73:2c:18:db:1e:52:65:
         7d:3c:fc:52:40:a6:1d:c5:01:86:57:35:58:f2:cd:e1:e2:15:
         9b:e8:e4:6e:5b:73:e1:51:86:e7:fc:0c:58:ba:57:2a:c7:fb:
         ff:fc:1a:06:8a:e0:1b:bf:0f:3f:f2:e0:be:24:fc:20:43:3b:
         58:21:94:2b:59:8a:24:c1:86:c3:b4:87:9b:64:8a:fc:cd:ae:
         c4:e4:9e:a1:58:6a:cd:50:34:4e:d9:e0:8c:d4:0d:c9:6a:e9:
         58:60:a5:df:3e:ed:f0:d7:cc:59:5b:77:f7:f2:99:98:e1:87:
         78:ca:a6:ca:11:86:cc:2c:a9:2d:b4:ab:e9:cf:32:68:cb:a2:
         29:ce:59:f9:41:5d:02:47:65:0c:ac:58:4d:13:da:44:79:ff:
         69:6e:e8:fa:bc:c0:ed:b4:f3:78:9c:6f:90:5b:e3:a2:33:a0:
         17:bd:a8:08:48:10:73:01:e1:b8:17:41:a6:dd:c7:6a:b1:c3:
         21:43:2a:e1:cd:75:4d:48:5f:74:c8:e3:19:23:e7:b3:06:71:
         48:ae:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:39 2025 by rpki-client