Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
File:                     Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft (raw, json)
Hash identifier:          7T+H2qykarL0u6Ltj0YXd49ep5CeUNvjnTrN/YKB3l8=
Subject key identifier:   FF:0D:65:C6:A5:9C:62:0D:E4:41:30:3F:C6:5D:B0:4F:55:31:C6:AB
Authority key identifier: 0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42
Certificate issuer:       /CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
Certificate serial:       019921B226BBC58D0CE5644B54F8E64F122E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
Manifest number:          1678
Signing time:             Sun 07 Sep 2025 01:02:27 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:27 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:27 +0000
Files and hashes:         1: 03R0VF3AsIUztN8h2zD8N2flDJY.roa (hash: 1xiwS0dYiDHRwMXNwpfOsM1AyiKMBufOaNLQPQKn/9E=)
                          2: Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl (hash: BjPIv+nu1Hkul2tIIMzyDoL3i4jBC54nKU39KreZLO8=)
                          3: Es9DToahcsj0ahEtb--Fy2u42F4.roa (hash: nfMwvWvI1T9eF9JsdtFDjnCaRTVkyNEeCBV5LJRL/I0=)
                          4: Kk55CxMuRoABHPQT4nyNv0rGWGc.roa (hash: lvAnBMqzmoB6sfauO06Jjpq1kAnKY/291ymOUVXS2fc=)
                          5: Qa5zEwk763K1EispcaZSdgxy5B4.roa (hash: 1hv3iMS5WTQuyU34tHM2fX7wAkcRaS7Ns9UFZhwEs8w=)
                          6: ls30qglQhlzT6rdumlShksLULN4.roa (hash: QEAqfnuTNOFE0+L1NYjaIvQVrbFOKL5GAQ0VuflmL9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:26:bb:c5:8d:0c:e5:64:4b:54:f8:e6:4f:12:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2e4fd219f5b77ce80cdfaf9e3a6441dec50042
        Validity
            Not Before: Sep  7 01:02:27 2025 GMT
            Not After : Sep  8 01:02:27 2025 GMT
        Subject: CN=ff0d65c6a59c620de441303fc65db04f5531c6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:82:24:a7:57:16:1f:88:70:01:e2:b1:01:96:
                    c4:c2:b2:13:e8:38:33:61:ee:f7:44:79:43:c2:98:
                    11:b5:76:c9:d1:62:44:f0:40:d9:fe:b8:39:e3:4f:
                    61:49:57:d4:47:48:f6:af:3a:63:46:17:f0:dd:35:
                    06:d9:ce:16:71:60:24:e2:ae:c0:15:62:64:59:6a:
                    2b:45:82:06:be:45:be:a1:50:70:4b:ac:b4:cb:dc:
                    ff:59:6e:3f:7f:8b:02:07:11:1c:80:4a:64:9d:6f:
                    35:65:c7:b8:9f:d8:a2:33:83:d7:6c:be:ac:64:33:
                    3b:11:87:00:8d:3c:62:80:1c:74:db:4c:69:33:a7:
                    11:7d:01:7d:b2:8d:e2:64:71:7a:53:08:fd:f0:ed:
                    ae:2b:49:98:aa:de:f4:9b:b7:aa:a8:5c:f7:1f:f2:
                    f0:ae:f3:53:6d:54:5f:a9:3e:bd:a6:94:d2:63:4a:
                    35:cd:15:44:b4:a7:a1:8e:f1:8f:0d:5e:38:0e:64:
                    a3:ba:3a:be:b9:19:85:7a:5a:ad:f1:e7:2d:e8:64:
                    80:bb:4d:9d:20:5b:37:fa:6a:bf:85:d0:6e:2f:d2:
                    84:87:fe:27:a0:38:49:3f:b0:ac:cf:2d:93:4e:ad:
                    a3:83:53:93:f3:61:62:84:bf:47:2e:c0:2e:99:12:
                    76:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0D:65:C6:A5:9C:62:0D:E4:41:30:3F:C6:5D:B0:4F:55:31:C6:AB
            X509v3 Authority Key Identifier:
                keyid:0E:2E:4F:D2:19:F5:B7:7C:E8:0C:DF:AF:9E:3A:64:41:DE:C5:00:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di5P0hn1t3zoDN-vnjpkQd7FAEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e11224-61c7-4786-86e9-238fee692430/1/Di5P0hn1t3zoDN-vnjpkQd7FAEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:90:8a:10:34:de:fc:db:37:f7:f0:cc:ed:aa:08:b2:8d:b7:
         5e:8c:8d:45:26:32:b4:9a:c6:88:12:ee:30:5a:34:c9:f6:2d:
         c8:9d:54:29:89:cf:14:a9:ea:a9:a3:ec:ba:d3:5e:6e:a2:84:
         1f:97:4e:4e:6f:2b:ff:ad:a5:4d:2c:0a:13:9b:4f:6b:92:c5:
         15:3b:af:f0:05:e0:94:1b:6f:2f:bf:6d:46:9a:58:07:87:5b:
         a0:70:b2:cd:78:93:7b:0b:6e:c7:24:21:4b:bc:bd:ab:c5:d3:
         02:1e:5f:d6:c2:80:09:08:d8:0d:c3:b8:aa:d5:36:82:4f:ef:
         0f:98:1e:9e:32:27:0c:ad:d1:0a:e7:47:3e:89:c4:ed:c3:eb:
         a3:13:99:1c:11:1c:ae:36:75:1a:b9:b4:39:29:6b:9e:34:1e:
         46:6c:62:b7:1f:21:ac:53:5f:e7:f0:b2:fa:41:05:2e:50:2e:
         f6:fe:8e:0e:93:13:23:59:94:51:38:5c:0d:c0:ec:e9:cf:2d:
         b3:68:fd:ea:71:c0:76:12:6a:9e:a5:54:e7:e8:08:b9:bc:1b:
         58:1b:3e:58:36:4b:7c:72:88:78:f7:2b:ff:e4:da:cb:98:8f:
         49:b7:64:8e:83:72:35:2b:c6:69:9f:0e:1f:c4:01:da:3b:9e:
         f6:34:34:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:07 2025 by rpki-client