Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
File:                     ml_TZv526ZmG92gN_M89y5TW3hQ.mft (raw, json)
Hash identifier:          u0nZABYntgLMVA/LovfccQ+xa/cMoW5/3jePN36guIk=
Subject key identifier:   F4:24:F6:DB:71:D4:BB:02:CE:80:DB:32:3E:02:A9:D7:5E:01:FC:AA
Authority key identifier: 9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14
Certificate issuer:       /CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
Certificate serial:       0198D4740632D4D0D9CCF570A0D1F3081DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
Manifest number:          04D6
Signing time:             Sat 23 Aug 2025 01:03:50 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:50 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:50 +0000
Files and hashes:         1: ml_TZv526ZmG92gN_M89y5TW3hQ.crl (hash: ZovtwjteD0WgVB1f8MJZIymf9hlrXo5e97ACOo4n/0M=)
                          2: nzhgmUHMBkXurs4lxO-vVG71nK8.roa (hash: naLy7uq1sBONgf+ZVhFHwkdla3yLH7XoG0HQQOUDogs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:74:06:32:d4:d0:d9:cc:f5:70:a0:d1:f3:08:1d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5fd366fe76e99986f7680dfccf3dcb94d6de14
        Validity
            Not Before: Aug 23 01:03:50 2025 GMT
            Not After : Aug 24 01:03:50 2025 GMT
        Subject: CN=f424f6db71d4bb02ce80db323e02a9d75e01fcaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:d2:94:b7:79:88:60:87:d5:3e:70:31:6f:
                    87:83:90:ff:df:12:0c:42:43:bc:70:a5:ce:2f:1b:
                    b5:12:a6:3a:04:a6:52:c3:58:f0:d9:0f:06:11:8b:
                    d0:7f:d3:71:70:e1:f2:f1:2e:3a:72:fd:9f:52:10:
                    ca:d2:cb:fa:15:11:5c:73:f9:6d:63:18:c2:1c:f4:
                    73:4e:1f:52:ff:78:aa:4c:b6:08:c6:78:10:7f:85:
                    6c:f8:f5:37:12:65:b3:24:48:94:65:94:30:e7:bd:
                    e4:67:89:3a:03:22:8d:e7:c1:ce:d4:c0:f3:17:68:
                    0f:38:97:3f:3a:b9:14:3c:b7:f7:26:d3:cf:78:52:
                    15:1a:81:d2:c6:d3:ac:ca:47:c0:cc:be:e9:53:c3:
                    fc:f9:d7:b2:26:f5:a2:51:18:bd:1a:2e:09:dd:9d:
                    c1:27:92:c4:b7:da:0c:50:18:6b:49:c1:42:d7:a3:
                    7a:ba:ea:a1:48:59:aa:cb:94:0e:9d:9b:ef:a4:89:
                    3e:94:ec:eb:b6:7d:10:a1:87:68:42:fe:59:c6:b9:
                    7d:a1:a7:75:d3:49:53:ff:53:7f:41:70:0c:91:df:
                    c4:65:50:9d:a4:83:f7:8b:0f:66:e8:6c:fe:22:f5:
                    b5:60:b1:65:9f:6b:53:3d:7a:93:32:c7:7f:b9:a0:
                    43:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:F6:DB:71:D4:BB:02:CE:80:DB:32:3E:02:A9:D7:5E:01:FC:AA
            X509v3 Authority Key Identifier:
                keyid:9A:5F:D3:66:FE:76:E9:99:86:F7:68:0D:FC:CF:3D:CB:94:D6:DE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml_TZv526ZmG92gN_M89y5TW3hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/943426-a5ee-47e9-ad82-78f92eb1b62f/1/ml_TZv526ZmG92gN_M89y5TW3hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:47:cd:3e:84:42:a3:aa:3b:ed:8b:67:08:df:9a:f4:60:b2:
         c5:1c:a7:ed:47:03:de:ba:53:1b:04:30:52:f9:17:61:f3:c1:
         cb:64:d3:b6:43:30:ed:37:04:f0:27:10:6b:2d:04:91:30:18:
         78:52:5b:91:9d:82:d4:f0:79:ad:fb:cc:8a:a2:82:25:a5:a4:
         4f:ca:87:13:a8:3d:df:98:ce:89:68:9c:36:ae:58:f4:1e:11:
         30:b4:7b:6b:2b:72:be:2d:58:37:33:e7:e7:b5:8f:ab:58:03:
         fc:b4:5e:ec:78:a1:e8:1d:15:2d:e2:53:18:d4:be:a0:f4:65:
         55:09:7a:d3:db:62:ad:58:bd:49:5d:15:74:f7:cc:61:ce:cf:
         a8:88:b8:7d:f4:fa:d9:fd:c7:c5:a5:20:79:f1:5b:3c:cb:ae:
         22:6d:65:14:70:20:e8:3c:6f:55:51:5a:ba:9c:c0:06:12:0d:
         e1:cf:c4:f9:4a:ab:ce:0a:fe:d3:22:71:7c:a1:2a:af:f3:28:
         e1:f0:1c:05:40:bb:35:c1:a7:ec:07:d0:ad:c8:bb:17:27:8e:
         a4:01:42:57:ba:f2:0c:5f:50:f2:d6:ab:85:2f:91:b2:db:a4:
         d4:d9:6d:ee:36:44:ba:d1:9c:42:05:7e:d4:66:c1:62:06:0c:
         c0:b7:ec:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:33 2025 by rpki-client