Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
File:                     CcVSSYiBh2VW8W4yPxyjabJe2ww.mft (raw, json)
Hash identifier:          9nOqbQolcmgKUrUJuAFc9HiPxivzQvmXf+GJsiVSy1s=
Subject key identifier:   63:54:F8:7A:CD:9C:50:C6:FE:60:E8:3E:F2:18:7C:9B:9F:E0:D7:45
Authority key identifier: 09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C
Certificate issuer:       /CN=09c552498881876556f16e323f1ca369b25edb0c
Certificate serial:       019937CAE9F6C5F7C84DD46407C237E592E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
Manifest number:          15AA
Signing time:             Thu 11 Sep 2025 08:01:09 +0000
Manifest this update:     Thu 11 Sep 2025 08:01:09 +0000
Manifest next update:     Fri 12 Sep 2025 08:01:09 +0000
Files and hashes:         1: CcVSSYiBh2VW8W4yPxyjabJe2ww.crl (hash: RJvOrWuCpbp0ujjuwOiaOAX0o+qbYuLmY94co8hqr28=)
                          2: rWZ0G5VOafQid-7UN-2veJfKGgo.roa (hash: DH2O3e2b1+vrztrC2zTAL363y7HUBnCFCMC6xfBGVbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:37:ca:e9:f6:c5:f7:c8:4d:d4:64:07:c2:37:e5:92:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c552498881876556f16e323f1ca369b25edb0c
        Validity
            Not Before: Sep 11 08:01:09 2025 GMT
            Not After : Sep 12 08:01:09 2025 GMT
        Subject: CN=6354f87acd9c50c6fe60e83ef2187c9b9fe0d745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:d7:dc:4a:45:39:40:c2:75:2b:f8:74:0a:
                    8e:34:04:23:a2:cb:20:5f:17:f5:e8:d9:2e:58:7e:
                    92:76:16:4a:eb:27:17:dd:30:5e:30:8b:e9:6f:07:
                    3d:90:46:28:c9:c3:88:7f:27:32:48:5d:e5:48:56:
                    7c:bf:a4:bb:36:fa:9f:c0:b2:17:43:3c:23:d3:fd:
                    68:fe:98:cd:a2:22:bd:7e:02:30:db:0a:93:4b:84:
                    5d:93:78:bb:83:3d:ab:98:d0:36:a0:bb:a5:ed:4d:
                    ff:0e:b5:b7:42:89:59:21:91:90:99:5e:83:71:3a:
                    26:f7:65:bf:4f:79:fa:6c:7f:95:58:81:19:5b:de:
                    21:dd:51:d1:ae:c3:ba:0b:6d:e5:28:69:c8:f2:8f:
                    93:63:f8:51:61:92:c4:cb:06:db:c7:01:6c:c4:85:
                    ac:1d:c5:09:8a:bd:be:6c:c5:6a:b3:74:96:4d:67:
                    f9:e4:e0:03:68:4b:f0:08:4c:9b:d8:05:5b:d9:1f:
                    04:46:9a:79:b3:43:a9:08:5b:77:79:3e:be:78:44:
                    e0:c9:91:1c:f5:88:ed:1c:61:73:fc:07:cd:26:e4:
                    5a:b6:42:ea:ad:d1:ca:71:5a:c6:4a:9f:5d:ea:ba:
                    7f:60:85:ad:0d:19:b1:24:c1:bb:a3:21:1e:80:c0:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:54:F8:7A:CD:9C:50:C6:FE:60:E8:3E:F2:18:7C:9B:9F:E0:D7:45
            X509v3 Authority Key Identifier:
                keyid:09:C5:52:49:88:81:87:65:56:F1:6E:32:3F:1C:A3:69:B2:5E:DB:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcVSSYiBh2VW8W4yPxyjabJe2ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c34c30-81b4-4dbe-83e8-11f365a7352c/1/CcVSSYiBh2VW8W4yPxyjabJe2ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7d:25:41:b6:21:89:4f:40:b1:6c:63:38:ca:1e:97:c0:3b:
         f8:2b:ef:e7:ac:58:35:64:4e:6c:a0:ad:21:8a:96:8a:fc:07:
         9b:ba:dd:4b:59:63:87:7c:01:c7:31:8a:83:10:64:8c:fc:8a:
         5a:8f:4c:85:4a:8a:22:88:c0:52:f6:99:b8:37:7f:23:45:1d:
         89:6a:e7:1f:69:59:b8:a4:66:43:9d:b6:a7:48:98:2c:ee:f1:
         7f:95:90:ab:70:58:71:e9:8c:1b:3c:09:a7:37:e7:c9:cb:81:
         4c:02:3c:6b:07:54:af:8b:0a:fd:aa:d6:a7:45:96:87:7f:f2:
         67:35:6b:da:3e:75:d2:ef:5a:77:c0:9f:d6:d5:8c:4c:ac:f2:
         3e:19:3d:5a:13:c3:66:0a:2a:65:8a:73:39:ae:e5:37:b9:98:
         89:6d:23:90:12:51:15:55:bb:a7:e8:f1:79:40:0a:4c:92:49:
         3e:3e:64:c1:9f:77:78:6f:02:a1:92:80:b3:22:01:51:55:98:
         1d:65:08:0a:cb:a6:4a:ef:45:08:03:b5:f0:0d:78:e4:4d:9d:
         04:cb:e7:de:01:a1:fb:89:6e:25:2d:3b:85:3d:76:ca:8d:8b:
         4e:1d:e0:4c:15:a8:65:a5:01:ac:5b:a7:17:67:cb:fe:e9:7d:
         44:62:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 09:25:13 2025 by rpki-client