Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
File:                     9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft (raw, json)
Hash identifier:          XuzvYKXixLyt4qGUYatfNXhixfGeCg5ackAk32ZBW6A=
Subject key identifier:   99:E6:03:10:37:96:DD:6B:B6:32:95:F6:5A:BE:FD:C7:4A:E1:EC:98
Authority key identifier: F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1
Certificate issuer:       /CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
Certificate serial:       0198D65FF6FB38D618711830D0367E67BE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
Manifest number:          135E
Signing time:             Sat 23 Aug 2025 10:01:10 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:10 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:10 +0000
Files and hashes:         1: 9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl (hash: q/Oo80avrLt5c4g57Zg9e1IQCPABh4tTefeM8RUIG3Y=)
                          2: aDwAS1LQt-dxkqhRRrd8pQDVwd4.roa (hash: duXpBH3mnr8j/KJuHRzuQfhllP9IGUW8jdVpYb4QHpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:f6:fb:38:d6:18:71:18:30:d0:36:7e:67:be:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6057e74aad21abcf13374f5915b1a7e827d4ea1
        Validity
            Not Before: Aug 23 10:01:10 2025 GMT
            Not After : Aug 24 10:01:10 2025 GMT
        Subject: CN=99e603103796dd6bb63295f65abefdc74ae1ec98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:3b:0d:92:d5:b9:ab:ab:12:04:24:a0:da:
                    3b:3a:3d:fd:01:b9:8b:81:14:02:f3:35:d5:eb:0d:
                    64:3f:14:15:10:95:63:16:fd:a3:1d:b7:45:a2:22:
                    18:de:0d:d6:bf:b4:e9:bd:73:7c:f1:68:e6:58:cd:
                    86:70:13:a6:93:b9:4f:8c:5a:ad:47:99:36:dd:70:
                    67:c4:b1:b4:9b:22:0b:90:df:42:6e:e1:88:90:fe:
                    97:1c:68:53:32:4a:95:d4:8d:98:c0:41:5b:81:af:
                    52:b3:f2:eb:6b:81:7c:bc:c8:75:bf:66:18:de:84:
                    40:3c:9a:6c:4c:71:5c:60:8e:60:24:39:f4:a3:0f:
                    55:24:1b:11:ec:e4:77:14:64:bb:73:dd:cd:d2:31:
                    0a:50:ff:f5:0d:e2:b7:d4:c9:28:0b:c1:aa:e2:27:
                    48:50:68:f3:4f:2f:65:61:0d:0b:f5:88:e0:0c:c5:
                    1b:43:41:28:ad:71:2b:52:19:cf:d0:c3:62:c6:53:
                    43:35:93:2f:d9:a6:0e:6f:fb:48:92:4d:e2:9a:1e:
                    f9:ee:de:65:5f:66:f6:3c:6d:cd:59:57:f2:82:d1:
                    98:bb:08:e7:2e:ef:82:e9:b0:6b:71:6d:12:fd:fd:
                    08:3c:24:f8:f2:f9:18:83:a1:b8:f6:65:11:ff:b0:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E6:03:10:37:96:DD:6B:B6:32:95:F6:5A:BE:FD:C7:4A:E1:EC:98
            X509v3 Authority Key Identifier:
                keyid:F6:05:7E:74:AA:D2:1A:BC:F1:33:74:F5:91:5B:1A:7E:82:7D:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gV-dKrSGrzxM3T1kVsafoJ9TqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ae1de-bd5c-4a17-9fa8-0a9a1f1c989c/1/9gV-dKrSGrzxM3T1kVsafoJ9TqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:24:26:06:a8:27:16:8d:35:61:fa:32:9e:66:13:33:78:94:
         b3:5c:a9:28:5a:4e:8a:2c:d8:0d:f5:a2:f2:7c:2c:dc:02:da:
         aa:ec:72:94:24:50:d8:e6:d8:7d:df:de:dc:54:9b:51:e0:f8:
         ca:e0:2a:ce:f3:cb:ec:e3:fc:9a:93:15:1f:cd:56:6c:72:94:
         54:a3:06:12:93:ff:e5:77:0e:b2:83:e4:95:30:b6:06:a8:d0:
         30:09:a2:69:aa:0b:84:74:45:1a:a4:55:b6:48:ea:39:62:79:
         4a:2d:59:96:1a:23:41:26:fc:fe:24:c8:e8:ba:ff:19:3b:bd:
         4e:aa:7d:a5:c5:8d:7b:2a:f0:60:e4:14:0a:f4:c5:d4:65:50:
         6f:d8:d5:53:c2:4b:78:6c:29:36:64:14:d7:31:23:7f:6d:6d:
         7e:35:52:29:22:c3:ac:04:a4:fa:0a:57:bd:01:bd:d0:e9:7e:
         dc:38:74:10:30:5d:b4:b1:cf:be:1f:3a:46:37:4a:7c:39:67:
         fd:38:42:34:dd:e5:78:cc:8d:7a:72:3c:22:62:ee:1b:ec:33:
         cb:64:2b:78:ba:b4:69:0f:b5:9c:7c:c2:28:78:01:e6:ad:52:
         08:7e:7a:0b:ac:ad:68:27:6b:d6:6c:d2:1c:17:21:a9:36:07:
         5b:e6:66:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:57:09 2025 by rpki-client