Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
File:                     n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json)
Hash identifier:          tIuLkjxX1Gf30TANniXOtSWH5wJwHnFHGHwrPbtqweg=
Subject key identifier:   46:60:8A:3F:D6:D9:04:08:98:50:B3:26:22:5A:1E:64:D4:9F:00:73
Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E
Certificate issuer:       /CN=9fd9886e2db2709db22364e334d39e2ee488d36e
Certificate serial:       0198D65F82F618ECBB5766BE3655EE79A0A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
Manifest number:          0408
Signing time:             Sat 23 Aug 2025 10:00:40 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:40 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:40 +0000
Files and hashes:         1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=)
                          2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: Fng2aIC3lWeg2/4h4i5u8Gm0f6fwNrMKCedAYJgaUyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:82:f6:18:ec:bb:57:66:be:36:55:ee:79:a0:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e
        Validity
            Not Before: Aug 23 10:00:40 2025 GMT
            Not After : Aug 24 10:00:40 2025 GMT
        Subject: CN=46608a3fd6d904089850b326225a1e64d49f0073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cd:8c:6a:ea:c8:4a:60:ae:09:ba:f2:3d:7c:
                    67:28:69:44:02:00:78:e7:87:7a:f7:dd:5b:b0:10:
                    81:10:51:6a:46:24:a6:44:df:2f:f5:90:b1:79:a5:
                    4f:5d:b4:08:ca:f9:dd:ca:d0:58:15:03:66:3f:42:
                    c1:90:e0:a0:4d:28:e1:f3:62:a7:a5:f3:80:1f:24:
                    f7:3a:01:26:fe:cf:67:7a:2e:79:7e:e3:94:00:81:
                    c4:26:ec:f1:1a:2a:76:f7:4e:2a:29:eb:70:6f:5f:
                    7a:c3:85:22:0b:12:2e:1a:e9:5a:94:b0:59:85:8e:
                    50:4e:0d:1e:7b:5c:81:f1:8f:9e:04:14:cf:8b:77:
                    4a:8d:c0:86:64:88:33:49:31:c7:ad:ca:07:a4:d2:
                    ed:13:e3:09:08:15:9e:f8:68:99:1f:55:49:11:87:
                    33:7e:d0:c3:d3:8b:03:82:16:6c:34:43:2d:e9:b2:
                    19:f0:e1:a8:1e:27:9b:c6:85:41:e9:06:70:a2:24:
                    b8:6f:eb:f7:b9:0a:40:ea:50:f6:a0:87:6e:f4:ed:
                    93:9e:58:cd:a9:20:cb:64:3b:ef:85:b8:8c:07:a5:
                    1b:a1:ee:14:1e:43:fd:42:48:c4:68:3f:7e:f9:16:
                    f7:cb:fc:17:8f:49:e7:6b:4a:a1:42:23:5c:6f:24:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:8A:3F:D6:D9:04:08:98:50:B3:26:22:5A:1E:64:D4:9F:00:73
            X509v3 Authority Key Identifier:
                keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:94:57:52:5b:70:93:c2:13:e2:9d:50:25:f8:27:c3:ce:
         2d:2d:16:10:c7:25:48:fa:b2:33:2f:95:46:bb:f4:6f:30:3e:
         85:d2:92:87:12:e3:1f:bb:2c:2c:f8:34:8f:ad:b4:d8:a0:1a:
         20:1c:ad:46:d3:e1:8b:34:ef:70:4f:f5:f0:46:91:95:b6:ff:
         71:d9:5e:d6:0d:f6:c6:ae:37:59:f2:6f:1c:54:98:4e:ba:84:
         6a:68:1c:5a:45:d1:9a:25:6a:fb:c1:75:7e:64:82:d2:cd:46:
         e7:e9:f9:91:d1:e5:bf:90:54:36:33:df:87:18:99:19:cd:d7:
         b6:ed:52:58:02:0f:6b:e2:26:07:79:dc:14:4a:eb:c5:f9:79:
         26:ef:af:49:8c:bb:40:92:5c:1d:dd:af:36:7a:d9:bf:a5:f4:
         27:be:fa:12:bf:91:86:b0:89:4c:3c:66:bb:73:7c:52:45:0d:
         b8:a0:89:64:78:c8:07:4a:44:21:a6:01:3f:72:c0:3a:15:ae:
         b2:60:88:58:5f:25:e1:6f:03:55:5c:ff:07:03:d2:f5:bf:36:
         32:78:fb:7f:1e:7e:9c:99:e5:73:00:b7:7c:4c:6f:2b:2f:2a:
         c0:1e:43:4a:24:e1:a3:88:44:81:7b:d2:f0:7f:86:da:86:69:
         cb:70:56:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:25 2025 by rpki-client