Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          Uxiq4p3I1oNo7GsL3RyftjGtLBlnCC7ys5Kx9IklHpk=
Subject key identifier:   C3:AA:6C:2F:09:94:2F:DA:11:AE:D4:E3:41:EF:E9:B0:49:86:CB:E5
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       019934250AFA6998551E5FA9BCC874D5CCE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1681
Signing time:             Wed 10 Sep 2025 15:01:06 +0000
Manifest this update:     Wed 10 Sep 2025 15:01:06 +0000
Manifest next update:     Thu 11 Sep 2025 15:01:06 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: 2OrxgMNJHfrSf3a7ivzy3tMHnUWDjFJVIJwO1jRTlTo=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:34:25:0a:fa:69:98:55:1e:5f:a9:bc:c8:74:d5:cc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Sep 10 15:01:06 2025 GMT
            Not After : Sep 11 15:01:06 2025 GMT
        Subject: CN=c3aa6c2f09942fda11aed4e341efe9b04986cbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a8:13:ce:15:3c:a3:59:aa:50:76:6f:5f:e8:
                    7c:bf:92:f8:04:74:30:22:36:ff:ae:e0:01:bc:d8:
                    c2:2d:20:3c:e5:2e:e5:c9:80:5a:7e:d5:0f:3f:96:
                    1f:68:a8:6d:a0:b2:52:23:b8:77:61:cd:ce:72:c8:
                    55:94:ac:09:d9:ff:e1:04:8f:9e:28:d3:0b:eb:b0:
                    f7:39:9b:99:7f:e8:d9:62:a5:96:e6:f9:7f:1f:22:
                    ec:30:5b:a6:99:42:d6:de:17:fe:77:5f:16:35:0e:
                    4f:09:c0:4c:52:52:bb:7b:45:57:7a:fe:c6:f3:b5:
                    2c:02:97:7a:bd:d0:d3:09:dd:2c:b1:3a:56:c1:38:
                    04:c7:34:4b:69:65:5f:46:48:6d:3f:4d:b7:95:86:
                    9d:c5:f1:99:68:ed:28:f1:63:ff:a4:bc:9e:ad:45:
                    a3:5a:60:f3:68:f3:38:de:34:e2:3c:2a:39:cc:02:
                    78:f3:67:ec:93:20:85:9a:dd:8b:ba:9b:52:ad:82:
                    a3:48:54:a0:a1:52:b6:9e:0d:fe:7e:07:dd:45:df:
                    bd:5e:95:1b:5a:59:ff:9f:ca:24:ea:e6:c6:2a:6e:
                    fa:82:44:5f:73:e1:94:36:58:fc:c5:25:57:57:72:
                    de:ea:b6:69:59:2b:3f:4c:7c:ac:07:5c:7b:e5:e1:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AA:6C:2F:09:94:2F:DA:11:AE:D4:E3:41:EF:E9:B0:49:86:CB:E5
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:87:26:be:82:b9:6a:ae:3f:71:26:34:7c:0b:19:0a:e7:6f:
         aa:b8:54:5d:9f:e1:cb:26:b7:56:86:f6:b2:66:22:de:f7:83:
         5f:d1:bd:43:a8:5e:d9:d2:0e:6f:02:ec:ae:cf:f4:17:a9:96:
         65:32:3a:4a:4f:06:ec:73:63:b0:ef:c1:10:32:14:41:09:84:
         b6:67:ed:57:d2:06:26:f5:0b:17:dd:62:82:b6:85:a4:41:c3:
         61:24:1d:97:59:cd:7a:07:4a:2a:3c:e4:09:87:09:d6:96:a0:
         8f:71:c6:df:05:08:52:bd:7e:08:c9:b8:28:47:fe:e1:38:39:
         39:75:09:1e:8b:c5:93:95:28:d5:03:4e:d6:d7:da:08:31:fe:
         af:45:ec:5e:4c:1a:cf:81:d4:ec:8e:b4:f8:4b:fe:7b:17:cb:
         05:3e:75:de:4d:58:be:07:3b:e4:00:86:a5:d7:8a:91:97:0e:
         a3:01:7d:42:cc:f5:f2:78:86:44:00:c0:22:93:f1:32:bd:e0:
         ba:9d:ed:46:b2:25:64:1d:72:7e:02:9f:66:cf:29:72:59:6d:
         e9:ec:81:de:64:fc:fe:78:b8:dd:7d:ab:85:bf:a6:a9:8a:17:
         c5:de:4d:7d:d9:ba:32:e1:ab:d5:ef:a3:37:cb:0c:03:fb:99:
         85:d3:d1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:08:50 2025 by rpki-client