Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
File:                     _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft (raw, json)
Hash identifier:          Lj9abhuCO2dLG6P9BzAJV+5wrqgS8S1sFRQlC9UBb7w=
Subject key identifier:   28:44:B6:4F:9C:2F:19:76:89:57:FB:A6:0F:5C:10:AC:5A:68:95:B2
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Certificate issuer:       /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial:       0199179AD8ECE684A36380C31639BEE136A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
Manifest number:          0C41
Signing time:             Fri 05 Sep 2025 02:00:47 +0000
Manifest this update:     Fri 05 Sep 2025 02:00:47 +0000
Manifest next update:     Sat 06 Sep 2025 02:00:47 +0000
Files and hashes:         1: ISP7AwV7T2uPChZASc5YrPiTlkk.roa (hash: oFTsPiIdNPqfQz+HEt0vWKZqmx2ZRwTaVu/Xdt0P09Q=)
                          2: OqtJcNmb1J50tLIWF6D7y01VxA4.roa (hash: 1ov/KhQ3AFXvHLspCojYHQyYdAVdY1WazSh2AhXG8Y8=)
                          3: _oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl (hash: aHKPw6hn5Gknp6iA7r1uWpUbMkkWX4x4jNubBcLJ0dM=)
                          4: _tDDtYeC4guX6wO-zUHsidoSz_E.roa (hash: 8nbY0JFVrWrDRZsP3hnIFWTN85PCkZ4W8FZDcNxDifM=)
                          5: atNz0WdRnHANtOvahe4tYSXD9RA.roa (hash: NRl5RKkOXSKEcAEWPD0OwEYwTxLnIvplSR5oJx7Nj0w=)
                          6: knqD2Ha_mIK6TeaUs6rdEtXjm7Y.roa (hash: IG4vqFBPbvWgHsxQujBWqMW5v3cVtaifoxJ+vZ5e8BU=)
                          7: t9sNc0uQI6gHaHDMTUeW7X8c5pI.roa (hash: I2z+OvE8dHq8WvzVKbss4tbH6KggeV9GWqIKnOXdtk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:17:9a:d8:ec:e6:84:a3:63:80:c3:16:39:be:e1:36:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
        Validity
            Not Before: Sep  5 02:00:47 2025 GMT
            Not After : Sep  6 02:00:47 2025 GMT
        Subject: CN=2844b64f9c2f19768957fba60f5c10ac5a6895b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e6:f6:89:52:ec:8a:c9:40:33:50:94:c7:b3:
                    83:9b:31:96:8e:de:b9:47:82:20:e7:cf:b2:a1:da:
                    6e:b1:b0:25:b7:1b:30:ef:88:28:dc:4b:f3:5f:91:
                    45:f9:c2:53:40:87:34:27:2b:41:12:88:ce:38:0e:
                    09:28:33:00:22:98:66:8d:18:da:7d:1d:9f:ec:22:
                    f6:9c:67:3d:9f:4e:53:72:87:4a:ef:f1:4e:13:8b:
                    e3:d2:1c:49:4c:26:dc:d2:8a:13:7d:98:33:e6:37:
                    91:73:fd:7d:51:93:6b:02:2f:f2:a1:c8:93:4d:64:
                    70:77:23:a6:0f:0b:a0:01:16:c3:2e:ae:5b:38:9c:
                    90:28:20:3b:bc:ed:0f:73:23:a9:77:83:f7:1c:a0:
                    4a:01:a4:7b:d3:e1:d5:28:ac:7b:5e:8d:b4:23:48:
                    c0:44:c4:b2:7f:79:f3:fc:f8:81:f9:7b:70:87:54:
                    8c:78:4d:7d:9f:fd:30:1b:7d:02:0b:38:72:81:ce:
                    f8:af:1c:59:5e:4e:b7:ee:97:34:73:33:0a:c9:94:
                    e6:e4:17:aa:a9:4e:a3:3b:27:7c:3e:cb:e3:c1:b8:
                    bf:4c:6b:ae:d4:2f:4e:6a:de:e7:85:2c:03:b7:48:
                    e3:cf:8b:29:5c:96:45:88:28:96:78:93:27:85:86:
                    45:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:44:B6:4F:9C:2F:19:76:89:57:FB:A6:0F:5C:10:AC:5A:68:95:B2
            X509v3 Authority Key Identifier:
                keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:02:6d:17:0c:ac:d3:d6:67:89:1f:60:29:a8:14:06:8f:e9:
         5e:23:e9:87:43:9f:97:e9:64:d7:c0:bb:da:51:de:43:ce:de:
         fc:87:64:cc:d6:bb:b1:95:6d:8d:04:eb:1d:80:5d:63:a6:ef:
         c6:f8:7e:f0:05:14:a2:14:f5:a2:66:de:11:eb:6c:24:28:e9:
         fa:9e:67:c2:b8:11:ed:e7:de:cc:32:ee:0c:54:34:45:ce:b9:
         a1:0c:da:fa:70:b0:dc:ec:7d:be:4b:67:53:45:ad:87:ae:94:
         8d:d9:73:cb:14:8b:50:c6:e4:9b:06:60:18:43:2f:42:f2:0b:
         73:28:5c:b3:a8:96:e3:fe:3f:2f:fd:f9:c6:df:89:50:0c:62:
         17:fe:a1:95:9c:47:a9:72:8d:45:69:6a:f0:7a:e6:77:34:62:
         68:1c:f4:87:dc:d3:91:2a:8f:42:0e:f6:7e:8e:9a:3c:6e:69:
         93:3b:73:b6:14:7a:33:1d:62:e4:78:c2:18:84:d6:c5:1a:72:
         23:97:9d:91:4b:80:a9:56:54:30:2b:9c:5a:4b:4c:e4:bd:c4:
         bd:fb:23:d6:cf:78:d8:d0:e8:f9:5d:9e:a3:6d:a1:52:8a:99:
         89:be:cf:f0:7a:66:ff:98:03:bc:a3:2c:34:26:e9:a7:a4:68:
         e1:e4:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:33:06 2025 by rpki-client