Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
File:                     CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft (raw, json)
Hash identifier:          8P48t8DOZ9iDuPNna1y8M82j9k6BMPE44l546Vz/Isg=
Subject key identifier:   96:AB:B7:3D:94:41:9A:5D:76:AD:BC:33:F3:70:C3:3B:0E:0F:A8:8E
Authority key identifier: 09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD
Certificate issuer:       /CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
Certificate serial:       01993E04CC75BB4258CF40D4884A2B6E9BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
Manifest number:          1513
Signing time:             Fri 12 Sep 2025 13:02:05 +0000
Manifest this update:     Fri 12 Sep 2025 13:02:05 +0000
Manifest next update:     Sat 13 Sep 2025 13:02:05 +0000
Files and hashes:         1: CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl (hash: LJBXKJHc4eZTsNa7FjYRCFKKj2q9zwM93hvGJ7tVHgc=)
                          2: TmgqBpglNVZfQ6dNI0QikqOaRh0.roa (hash: G5eisvL1sfpBh2+KIjiXidcLDo6qfpZS+YH09MKDa08=)
                          3: quAevwWcT98bf654qLWm8mJZnuo.roa (hash: Cjjwh3AHZnP9cZfkJf8nJGuosyVJj9NPURda/Hfp5vs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Sep 2025 13:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:3e:04:cc:75:bb:42:58:cf:40:d4:88:4a:2b:6e:9b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090d50ab0f67887c5f5ed1e887e78dd2f35926fd
        Validity
            Not Before: Sep 12 13:02:05 2025 GMT
            Not After : Sep 13 13:02:05 2025 GMT
        Subject: CN=96abb73d94419a5d76adbc33f370c33b0e0fa88e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e4:13:3a:28:4a:04:2b:fa:9f:4a:09:71:99:
                    08:6a:53:68:13:ed:cf:c9:31:af:e3:75:83:d9:73:
                    a5:76:b8:23:80:66:00:73:bf:f5:a9:39:ea:30:d2:
                    b7:a7:63:4a:e7:b5:bc:01:70:88:5b:e4:95:c0:df:
                    96:03:b2:9b:08:ff:22:ab:08:d4:88:2d:7d:f1:d2:
                    29:40:34:1c:64:7f:d4:40:07:ee:ef:f0:95:09:8d:
                    c7:04:74:e7:d6:1b:2c:f9:1b:d4:c4:d6:bf:a4:7c:
                    92:9c:8c:ef:18:0b:59:fa:9d:87:ce:44:40:23:73:
                    92:89:27:7b:34:cd:90:3c:ba:ae:51:47:e0:f7:56:
                    60:76:40:f5:78:00:de:9e:6c:c0:09:13:c4:6e:a0:
                    d4:3d:e6:c6:13:21:27:0e:16:d0:49:4b:c0:21:f9:
                    99:ab:f0:97:c8:dd:fd:6a:f2:8c:03:fc:22:4f:66:
                    c0:c4:4a:13:73:68:cc:6e:13:df:85:e1:27:2e:47:
                    cc:8e:7b:4d:db:78:f2:d3:ac:98:b6:24:42:64:6f:
                    c6:0e:bf:e7:f3:cb:f2:1f:a5:e7:10:93:ce:73:8b:
                    1a:22:4b:84:6f:09:2b:2c:19:9c:3c:d9:f7:e0:62:
                    d0:50:0c:d5:3b:36:0f:9e:21:67:9d:89:5e:24:21:
                    9a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:B7:3D:94:41:9A:5D:76:AD:BC:33:F3:70:C3:3B:0E:0F:A8:8E
            X509v3 Authority Key Identifier:
                keyid:09:0D:50:AB:0F:67:88:7C:5F:5E:D1:E8:87:E7:8D:D2:F3:59:26:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7efcdc-f86b-41fd-ad93-ad1378289a13/1/CQ1Qqw9niHxfXtHoh-eN0vNZJv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:40:96:58:b6:0b:bd:54:ad:0e:8a:00:30:72:3a:46:84:6b:
         2e:5a:26:1a:5b:75:22:a0:2a:82:e5:88:46:fc:01:a1:69:ca:
         cb:79:ce:1c:dd:a8:5d:2b:31:da:03:d6:7e:90:91:23:3f:52:
         11:d1:69:dd:eb:4e:0e:bc:ac:bf:a0:84:df:73:73:0d:96:cf:
         ca:f5:e7:59:1d:0d:01:cc:fa:4d:ad:68:9d:49:bb:04:d4:8c:
         55:d6:50:a9:7a:4d:d0:95:a7:a8:b4:5d:3b:42:68:ac:f7:df:
         ac:e7:ec:cf:42:4b:10:a7:c5:e6:0c:81:b7:02:ff:bb:1b:c8:
         f0:c3:36:a5:22:30:a1:f9:14:d8:5d:72:7d:5a:5c:cf:62:07:
         93:ff:dc:f6:f6:0f:65:52:29:43:2a:36:52:4c:e6:49:c9:a6:
         e8:32:45:5e:29:ab:79:7e:d8:02:02:c5:ec:af:cf:49:99:79:
         b1:b9:dd:64:61:3a:7d:76:7b:11:d3:41:4f:b4:87:fb:c6:c3:
         f3:7d:d0:c6:38:ef:a2:ff:c4:ee:65:f6:2d:a6:5f:c3:62:c7:
         9b:e7:c5:92:16:60:62:a3:a1:20:92:87:45:28:83:ce:53:39:
         44:b5:f4:b0:57:94:b3:cc:96:fe:e8:51:b1:ca:5f:c9:c4:a3:
         1c:f6:37:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 12 22:22:39 2025 by rpki-client