Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          wFjilGbaNvFuQBuLAQh8Z7fc+pn0v0NV48GOfELN3fA=
Subject key identifier:   CC:03:F0:18:A3:B9:D1:D4:91:1C:2B:33:6F:79:42:8E:B4:1E:39:A5
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       01992632AE1F0E287BBA9D22A1EC1B8F5B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          1685
Signing time:             Sun 07 Sep 2025 22:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 22:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 22:01:19 +0000
Files and hashes:         1: 1TO3wwmstlJI_xpUfl9kicvHbH8.roa (hash: l5tHAqNDeNZrnGt3mzboM0n81s+hmMDLpSHW8MhJdZQ=)
                          2: 26WNO431X2DrhCSuMJxs-XhHdFw.roa (hash: NIeRGI1yKvtGj8sFMzxTqCRVywS0D7qHUOhHSF/o4Dg=)
                          3: FLQOSktOr1hKjG4R6lRrGTwu4Y4.roa (hash: HCxQYiPGo2KxnCSlrWXoWcHI4W9ZFCE3iBJWeLRX1o8=)
                          4: MTxciv5mcC6g5MkOWJ_PCLUtcGw.roa (hash: sgzh4uhlDpWhAHL+IAu4cgWAxT/K2/Pct3jSfOVM8NQ=)
                          5: Y1uBCw2ID0YyZ99v-Z_lyCH99eg.roa (hash: cjULbx6P7MvMK4WANKsBKAVbb7nETAlX3DivVasETiQ=)
                          6: YaNSkilLvxLgKPrT-xDRiMn7jX4.roa (hash: EZ2qfgMp+bvQiHoGlwVv0eQJIbOoTlAjmgUR8kwZiCU=)
                          7: bCiizil2Ey8Pvh56RnqDgTk8X7Q.roa (hash: phspsqh/4y98JzmGzw3HpShtGGUJNNv7gxCq93gvxKo=)
                          8: gyBoR0Pr1cH4RPdcxzglRlFRHBw.roa (hash: 3pblEbuyEQGeT8WjyqKPo8c9UE3z9FtuOT2bJKOYqhg=)
                          9: iReNUad_z8MIbDXyAmruHYsr7Tg.roa (hash: IQii4bF71uMtioCE1UShqHzf2ujT5ikVUAvaKniKsLg=)
                          10: jAY2gqsxgcne6CxwXuSfgMf4P5o.roa (hash: GE2OTsJpTeX1gwmggvr4Bc4mDirZkzPXPMqCMKxyOyI=)
                          11: k3qjfn2AAdeFPjY3Bp8KUgRaMPA.roa (hash: 4Ifjp85NogHztb45WtYR2OYxyvQl/OdGpjlDDi7JSNQ=)
                          12: kj7kinsfLRhL_IoV619KJi8FFL8.roa (hash: PZmgxN8/Rtu6BsEbQsN7jkEXwA4RX6FBccLjt1dXYy4=)
                          13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: CiQRzBZorTfYicnudeLgtdo4xbLBiqcxRKnwFxeHtJA=)
                          14: ntJH0KRoZucW8VNuwTIHrnSnlKg.roa (hash: 09HbUbUgEiRqWzx65FOtxruuV31mRSjgz3dJWoNx5nA=)
                          15: pgkZmq53mdBn0axql3jHx0EQjb0.roa (hash: aQFrLEqXJ0R769ANrMlsyVSYn8plE/Z1heUQyyK64EM=)
                          16: rQI6zOSTMPr-5aSxylwS7FyovQ4.roa (hash: rfEafPW5O0SAZQwvAq0I4Fkx0LFGcfF/mHD1nsLYnQk=)
                          17: sjrvDPQwhWQPqwn6TmRlTLKuFYg.roa (hash: 1WK8IPxCTeSex8E0rLqfFDPE1ENBltlsB6VMf3gJcZY=)
                          18: u4G1_yF4TBBumrIYzOwiYZxivvM.roa (hash: KXapgrZ9J9YmS63vQiCaKhL0YwTkps2tWnrl3xdYLX4=)
                          19: uMHNQRmfBxlbvZLGtjT4gp4kg2M.roa (hash: F+fAKBuQq3PLDBu2sHTyZl1ELbNuh34xu5t/W6OjOpg=)
                          20: ywFfsakzP6gwg7h7Z-Y4enCkXVs.roa (hash: zQ4r7S3Ps9QMhK/S8Db/JFo0flSN41hhML8fbJu8SJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 22:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:26:32:ae:1f:0e:28:7b:ba:9d:22:a1:ec:1b:8f:5b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Sep  7 22:01:19 2025 GMT
            Not After : Sep  8 22:01:19 2025 GMT
        Subject: CN=cc03f018a3b9d1d4911c2b336f79428eb41e39a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:16:b2:a4:ec:bb:67:b8:61:c6:ac:56:73:
                    48:c0:32:1d:77:ba:90:d7:5b:5e:ed:01:50:98:52:
                    56:98:41:5f:db:27:78:3a:3d:3e:33:a7:16:45:c4:
                    83:5a:8c:54:43:33:35:bb:6a:3a:82:50:cf:86:07:
                    24:b9:33:c2:9b:51:b7:12:97:f9:a5:61:8d:74:e5:
                    26:ed:a8:d7:5d:81:55:4c:3a:b2:35:88:d7:d7:f4:
                    3d:41:1b:dd:44:43:b4:73:03:b9:c0:de:23:d6:52:
                    b8:e5:45:b6:4d:e9:73:33:57:63:5e:01:bd:b8:6a:
                    4e:30:be:01:41:2c:f3:3e:88:07:65:fd:cc:ae:28:
                    35:1c:37:09:46:23:7e:b3:99:04:9f:83:9c:a0:a3:
                    69:0b:c3:06:96:36:8a:5e:06:40:18:50:1c:c3:28:
                    b2:dd:b0:15:d8:e7:e0:e4:4c:41:b7:19:5f:71:a2:
                    c9:d8:fc:ce:71:6c:6b:21:a1:dd:05:d6:11:94:fa:
                    c7:ae:f1:62:54:33:31:ba:dc:53:80:55:59:17:40:
                    45:0b:c9:d7:3c:b7:5e:b4:2b:47:56:67:21:6e:3e:
                    f1:a5:72:7f:3c:82:91:b3:01:9d:8d:95:5a:17:d5:
                    74:a5:94:71:cb:ec:ff:64:3c:f8:c6:85:1c:9e:d4:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:03:F0:18:A3:B9:D1:D4:91:1C:2B:33:6F:79:42:8E:B4:1E:39:A5
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d7:df:db:bc:d3:2a:65:23:21:ad:d3:28:b5:7f:8f:84:24:
         29:66:5a:81:78:a6:3a:36:11:0d:a1:8b:16:12:27:1a:d6:43:
         ba:ce:68:76:63:3e:fe:89:d7:91:69:88:c3:5f:0f:94:ad:a5:
         78:25:47:1b:c1:ae:68:cd:03:84:46:a4:f2:6b:0b:2d:29:43:
         c5:2c:50:36:02:74:12:de:d6:69:35:05:3b:c7:d2:1c:38:2a:
         2f:78:e1:ef:59:69:81:ec:ab:ca:c3:89:e6:f6:45:20:c6:f6:
         39:28:05:6a:01:b1:34:4f:a5:17:25:9f:3e:fb:39:c9:00:b3:
         45:f3:34:2c:96:f3:59:16:42:1d:d0:86:ab:7e:09:1c:f3:3d:
         a2:bf:44:24:01:92:43:4a:68:90:47:fd:19:04:ec:57:53:ca:
         bd:9f:0c:e2:ff:0a:c1:7c:54:92:0a:b4:b5:10:f5:f8:99:0f:
         eb:89:d2:97:15:6f:06:7b:41:52:94:fd:a6:3c:b0:ae:e0:37:
         2b:6f:46:bf:d9:d9:1f:0d:a9:c4:0d:d4:c1:2f:c7:c1:8d:05:
         8b:cd:3d:c9:b8:35:1b:d3:33:ac:31:7f:79:fe:8a:a7:30:b2:
         9b:cd:56:43:b1:e7:24:9b:36:8a:8a:6b:a5:6d:3b:30:8c:de:
         ee:54:16:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 09:01:04 2025 by rpki-client