Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
File:                     9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json)
Hash identifier:          zRSrgZHjvPzAP3OSIrWg6XjkQ3lgFHNxtCf02b1sx80=
Subject key identifier:   D4:1C:B9:A2:67:24:08:D0:41:37:59:38:42:00:95:FF:21:16:28:1A
Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB
Certificate issuer:       /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
Certificate serial:       0198D58366B49CA33D6F27E59A33E798BF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 06:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:15 +0000
Files and hashes:         1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: kI41oun5bSnmpv75MgdFn5rOLme4EUiC8JP2tuTQ/6k=)
                          2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:66:b4:9c:a3:3d:6f:27:e5:9a:33:e7:98:bf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb
        Validity
            Not Before: Aug 23 06:00:15 2025 GMT
            Not After : Aug 24 06:00:15 2025 GMT
        Subject: CN=d41cb9a2672408d041375938420095ff2116281a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9f:20:0a:ef:42:46:f4:f2:38:5f:eb:91:69:
                    f5:06:9c:0a:b7:50:b4:cc:8b:55:4a:47:e9:ff:c6:
                    23:fc:d8:65:6f:1f:cc:85:2e:cb:62:37:63:80:ad:
                    d5:7d:67:fc:cf:2d:7c:f1:b9:41:bb:13:48:c2:a7:
                    45:71:ff:19:dc:a9:7e:a6:c0:33:be:c2:25:d6:13:
                    9c:b0:b4:c4:9a:bf:7c:da:84:7b:65:7e:24:14:e2:
                    f8:ec:57:48:ef:d0:a6:ae:3f:85:29:29:ca:ae:f2:
                    a9:b4:88:fd:1d:3c:f9:6f:a2:7b:33:6e:24:a0:77:
                    7d:d6:14:a8:af:99:f6:3f:49:1a:f7:16:87:a1:7c:
                    7d:40:1e:07:ba:00:a9:83:4f:38:1f:72:9f:8e:7e:
                    92:d4:8f:98:2a:fd:26:1e:e3:cb:02:4b:51:7d:e7:
                    e8:47:20:20:a4:95:d5:35:2c:d6:8f:1a:dc:da:e0:
                    4b:bb:ba:04:fb:cb:44:a2:93:4d:f2:b0:d5:d4:e9:
                    0c:3a:ee:aa:f7:e1:7d:e1:e2:c8:78:72:59:65:99:
                    34:97:b9:b3:a9:88:a9:e9:7a:f0:19:9e:03:17:fa:
                    85:eb:47:6c:2c:81:65:76:5a:e6:26:94:18:82:cb:
                    fb:ec:35:5b:33:e9:32:b0:b5:15:43:d9:de:c8:65:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1C:B9:A2:67:24:08:D0:41:37:59:38:42:00:95:FF:21:16:28:1A
            X509v3 Authority Key Identifier:
                keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:bf:c3:54:dc:84:b8:dc:73:56:46:ea:b6:9d:7c:00:43:37:
         05:d2:9f:9b:d9:c5:9c:98:42:45:a8:30:ca:fb:8f:e6:9b:e5:
         72:8d:d9:6f:ea:87:aa:20:ae:aa:75:e8:e1:19:ab:a4:91:89:
         6a:aa:14:61:5e:b5:61:74:81:47:f5:a4:2b:df:16:85:c0:33:
         58:53:c1:31:35:81:b8:e4:1f:7d:e7:29:8d:2b:71:b6:8b:5a:
         dd:95:03:04:c5:6c:11:21:00:3f:74:3c:55:f6:e1:b0:ac:29:
         a7:ff:3e:c6:75:eb:a4:90:98:b5:99:87:80:f2:63:2c:a1:7a:
         81:de:84:24:d6:d0:f1:aa:eb:5f:97:8c:7f:14:11:69:de:93:
         c3:a6:b0:ec:7d:49:9c:b1:b9:80:42:9c:65:83:2a:00:49:0a:
         99:62:97:df:1d:88:2b:53:2e:81:46:e2:7c:17:84:b6:f0:f2:
         ff:bb:31:3f:95:14:49:b9:24:77:96:b0:d7:ad:be:75:8e:9a:
         6e:f9:f8:ef:35:f7:65:fa:d2:a6:ab:78:65:d7:01:10:13:0b:
         db:47:8b:7e:f4:a3:78:0d:57:19:a3:22:a1:bd:95:b7:58:35:
         1a:07:5f:06:ee:0a:4f:d7:72:bc:91:9e:5f:ef:1b:82:7c:40:
         4a:66:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:30 2025 by rpki-client