Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          c/MkDSy67NKWlyvcituUpog/cKqvhRPu8vK4/3J5DW8=
Subject key identifier:   F3:2D:99:2B:CE:FF:51:45:6E:C0:58:9B:64:13:9C:E1:76:F0:1E:27
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       019933EE805F483EB3DC50072D06D5D2BEFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          07ED
Signing time:             Wed 10 Sep 2025 14:01:32 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:32 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:32 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: RDGrMFlstbdXIHnxQ2O1NlBzBanaKF6UkdpMWx4BJZQ=)
                          2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 14:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:80:5f:48:3e:b3:dc:50:07:2d:06:d5:d2:be:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Sep 10 14:01:32 2025 GMT
            Not After : Sep 11 14:01:32 2025 GMT
        Subject: CN=f32d992bceff51456ec0589b64139ce176f01e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c4:01:0c:fd:1e:64:24:55:0d:73:56:23:64:
                    e6:70:83:05:d9:7e:8f:d5:00:ed:19:89:5a:94:2b:
                    28:6b:1c:aa:9d:c7:46:a1:b1:ef:c7:8c:12:e7:98:
                    35:23:ce:02:46:d2:00:01:58:72:20:f1:09:a7:99:
                    56:0a:41:b9:43:80:cf:6b:e1:f4:d3:35:1a:c5:65:
                    b4:c2:65:16:3b:5a:e4:b8:ea:e5:93:e8:86:9e:21:
                    e0:14:47:98:3f:35:7f:55:d0:7f:d2:83:31:c8:c7:
                    8b:d8:e1:1b:f5:51:c6:a7:62:b1:4d:0a:20:fe:1f:
                    11:34:e2:18:da:52:83:0d:b3:27:70:9c:61:89:ab:
                    a1:9d:64:d0:a9:9c:e9:ff:ac:84:73:37:f2:8c:bf:
                    e5:49:96:d7:f4:ff:12:db:84:71:59:31:54:b3:ce:
                    30:89:1e:f9:1b:f7:2a:b2:66:44:f5:9e:a0:9a:e8:
                    58:fc:a6:e7:0f:79:55:1d:26:74:6c:64:d2:3d:c9:
                    ea:71:da:2f:6a:7a:5c:92:7f:8a:38:cf:43:35:bd:
                    c4:19:d2:50:10:c9:07:c5:aa:3e:99:c1:8c:97:8d:
                    07:5e:83:5d:60:94:98:95:41:65:be:b4:59:48:b7:
                    3a:5c:1b:0c:ae:d7:cb:ba:36:93:f3:fd:02:e5:e4:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2D:99:2B:CE:FF:51:45:6E:C0:58:9B:64:13:9C:E1:76:F0:1E:27
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:e4:62:de:31:f5:0e:f5:50:e9:96:3f:6f:f8:c8:41:7e:08:
         a3:0b:1d:61:bf:cb:93:97:64:9f:30:c0:f4:47:a6:97:25:bc:
         ef:8d:53:5d:98:f9:87:a8:e7:a6:c5:bd:f9:54:ef:3e:77:2a:
         6a:66:fc:05:14:61:64:01:7f:d6:d8:df:75:3d:56:43:21:8f:
         bb:6b:e9:f1:10:eb:e0:c1:d9:dd:12:38:b8:6c:bd:dd:7e:47:
         21:ff:87:15:b7:2e:45:46:c0:ab:78:5d:2a:a6:cd:1c:ab:3d:
         ff:08:00:ed:f9:f5:c3:f0:94:30:4f:65:55:3a:50:a3:19:e8:
         57:94:4b:78:c9:5d:9a:39:7c:ce:2b:a3:9f:0a:43:8e:00:37:
         ad:fa:ad:fc:ce:47:9a:a3:4d:cf:09:69:68:e0:9b:1c:fd:0e:
         56:e5:f1:a0:9d:33:35:16:d1:94:74:74:ab:95:a8:23:d8:bd:
         85:6c:3d:1c:96:ed:12:56:e7:3c:06:65:d4:cb:85:b0:89:3d:
         e5:37:ab:56:c6:f1:c7:0e:88:0a:d9:c0:ac:41:f7:62:81:3b:
         f2:7f:35:08:27:91:24:7c:ca:7c:63:ab:b3:c3:b3:b8:0f:fc:
         f4:87:cc:94:d5:db:a3:3f:95:13:11:58:3e:80:20:bb:6d:6c:
         1a:f9:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:55:53 2025 by rpki-client