Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          Z+U4zKxatS6d1efmfp+xLIyIZJYplpTq24hn0GIJ4LM=
Subject key identifier:   9E:C5:C0:E4:6E:F3:AD:74:20:0A:9B:3C:C1:8F:C8:99:98:FC:43:BC
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       01991CC10A14DB0135A8C2D6307B57B7DD08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          0895
Signing time:             Sat 06 Sep 2025 02:00:36 +0000
Manifest this update:     Sat 06 Sep 2025 02:00:36 +0000
Manifest next update:     Sun 07 Sep 2025 02:00:36 +0000
Files and hashes:         1: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: ggbmnPpHxjOhUTp4kcAOcPiYqSU+4JiBARqus2rLQRQ=)
                          2: d0b72ny8wPnM19_QwF_mbcUjDN0.roa (hash: SMFsSG0c6aEdE5nra06sYeY6XybcAZuUprO34jcJsEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:c1:0a:14:db:01:35:a8:c2:d6:30:7b:57:b7:dd:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Sep  6 02:00:36 2025 GMT
            Not After : Sep  7 02:00:36 2025 GMT
        Subject: CN=9ec5c0e46ef3ad74200a9b3cc18fc89998fc43bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:30:a6:71:79:34:56:d7:7c:51:a3:43:5b:
                    ba:b8:f6:18:12:b9:e1:f1:3b:44:9f:4c:64:d7:5c:
                    35:94:9c:1c:6b:d8:ef:d6:35:f5:74:4a:8b:bf:94:
                    0b:29:3c:bb:d9:a4:b0:31:68:ca:26:34:d4:68:52:
                    ac:cb:ef:6c:92:db:ad:fc:64:b5:4b:6a:a9:13:65:
                    29:f0:28:eb:5c:c4:6d:5d:74:8a:df:2b:7b:e5:b9:
                    2e:7a:6a:c3:61:c6:16:cd:8a:f7:98:ed:82:88:e2:
                    9d:05:82:e7:b8:fc:e2:d2:ec:f0:c3:2e:f7:90:6c:
                    4a:31:01:85:90:64:4d:64:48:cb:b0:c4:f9:93:8a:
                    e5:33:60:86:66:67:a7:a6:6c:1f:80:6b:c9:79:36:
                    79:97:05:de:21:bb:92:94:f2:1d:1e:00:cd:94:0b:
                    a6:5c:66:a8:63:48:00:e1:35:7a:01:8f:87:c3:b6:
                    b5:a4:6a:9b:50:26:a4:c6:b0:7d:39:77:f4:2a:bc:
                    f1:51:5a:ee:4c:c0:8a:1c:df:b5:fc:08:10:26:69:
                    55:d7:a5:d7:64:44:34:0d:dc:6f:f7:72:24:ac:66:
                    f5:51:1a:14:8f:53:bf:b7:2f:d5:a5:ea:e0:65:51:
                    5b:f7:5f:0a:f2:57:ab:2a:4d:09:b6:f3:e4:19:91:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:C0:E4:6E:F3:AD:74:20:0A:9B:3C:C1:8F:C8:99:98:FC:43:BC
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c8:fe:b5:d4:94:03:f6:e8:a3:66:0a:55:fa:ad:0a:98:01:
         85:d0:fc:56:5c:44:6d:ab:ea:3d:c0:84:51:99:a9:c1:16:3e:
         b4:02:99:82:d5:d7:8d:e1:3c:9b:2e:0c:02:89:12:32:3d:e6:
         9a:2a:5d:43:b8:bc:f0:15:60:c9:ed:42:e2:37:74:ba:82:23:
         68:81:78:83:e9:d8:66:dc:91:3a:ec:92:b2:7f:1e:2c:83:6f:
         42:5d:2d:84:ea:85:26:bc:e6:89:fb:6a:e2:c2:e3:db:99:bd:
         b1:5b:22:e6:98:34:77:e2:0e:0b:5e:10:57:62:6a:63:4e:60:
         59:8f:5a:f3:1b:34:d4:e9:4a:0b:f1:c7:36:ac:a4:a2:f6:e2:
         df:f4:60:ed:f0:21:98:1f:f5:6a:5f:d8:9d:0e:06:f2:f4:2a:
         33:e5:cf:3d:60:53:f6:9f:ce:96:a1:e2:24:61:ce:b2:12:d6:
         b5:2c:c8:8c:9e:da:64:17:b5:64:c4:f1:ab:45:7b:9a:08:37:
         f0:d8:84:42:a1:ba:24:6b:72:23:9d:57:ea:49:5c:c5:f6:55:
         f9:00:45:c8:e3:cf:ae:28:e5:e6:36:51:bf:dc:88:7d:ff:1b:
         50:1b:06:ef:20:e6:c7:56:9f:ac:6d:19:81:91:c6:93:c5:95:
         3a:1a:06:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:43 2025 by rpki-client