Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File:                     1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier:          S/4RGy+GtaUX+/87QfUzp+ray+yElLvSgNfN54SNg54=
Subject key identifier:   9C:89:B6:8D:BE:CB:2E:B0:56:1D:B6:45:1F:38:CE:19:55:48:6D:82
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer:       /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial:       0198D5BB7FAB10E590E8F04824C1C861B421
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number:          012F
Signing time:             Sat 23 Aug 2025 07:01:31 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:31 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:31 +0000
Files and hashes:         1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: mHeCkpJvJNGIVzmTE6b7dR5EgeW0+9tSgOU2FVOJloM=)
                          2: NXwlVXiim_zGBDcqjx0eFIuUGWk.roa (hash: mei7vYH+6OQG8yo3aepSsguWF4MAUBo4s0J/dbzC4gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:7f:ab:10:e5:90:e8:f0:48:24:c1:c8:61:b4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
        Validity
            Not Before: Aug 23 07:01:31 2025 GMT
            Not After : Aug 24 07:01:31 2025 GMT
        Subject: CN=9c89b68dbecb2eb0561db6451f38ce1955486d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:09:47:ef:cc:19:c8:7e:f0:dc:7d:cc:a8:
                    d6:5b:fa:89:fe:4f:33:23:ad:4d:d0:5a:10:69:0a:
                    89:c8:84:72:6a:79:2b:ed:b6:19:0f:f4:1f:fd:9a:
                    3c:19:5e:89:7f:59:df:b3:fb:d7:f4:35:b7:e6:b4:
                    68:d0:f3:70:72:a3:12:5a:77:75:67:f2:29:90:3e:
                    f2:0a:98:13:a7:cc:c6:a0:d8:f3:bb:3f:a6:72:b7:
                    d6:c5:2a:f0:27:f5:78:02:14:96:0a:c6:39:9a:86:
                    d1:ad:e2:7e:10:00:10:a5:bd:ba:9a:c2:44:f7:0b:
                    76:41:73:68:75:a4:43:d2:16:b9:b9:5d:56:1b:30:
                    d7:06:b2:c2:a2:d7:84:34:87:7c:33:29:b6:9c:a5:
                    48:4b:f7:6c:10:c0:37:b6:40:76:2f:49:9f:ea:13:
                    14:fb:44:21:0a:ed:30:4f:b0:1c:52:99:de:a6:53:
                    66:bb:cd:27:6a:a6:62:70:6b:6d:a6:c6:9f:97:ff:
                    91:76:86:88:37:82:5f:5a:52:45:29:84:79:a6:0c:
                    5c:36:3a:4f:ed:5e:dd:e1:71:e4:09:60:b5:20:58:
                    e6:9a:7e:2b:3a:f6:72:44:c9:9f:11:7f:50:1c:14:
                    06:3e:fc:3e:28:83:94:e7:bb:1e:8f:7b:4d:75:9d:
                    6d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:89:B6:8D:BE:CB:2E:B0:56:1D:B6:45:1F:38:CE:19:55:48:6D:82
            X509v3 Authority Key Identifier:
                keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:f6:af:6c:21:fa:1f:2d:e4:b8:e4:19:8e:e5:75:6e:6b:0b:
         c2:1a:17:a1:d4:50:23:97:6a:f6:94:cc:bc:91:82:15:65:00:
         58:31:8e:e3:3d:ed:26:d6:e1:9c:45:e8:af:55:d1:59:ae:29:
         7f:ab:d1:94:44:d5:21:18:cd:68:3c:d3:0b:00:20:67:83:19:
         88:af:ec:53:72:3e:5d:34:a2:d1:72:2f:d0:05:86:d3:13:d7:
         0b:bc:63:f7:f9:8b:e9:c8:4c:7d:b2:96:48:a7:68:f0:12:5a:
         1f:99:3d:e9:f6:1c:8a:6a:ed:5e:24:01:e9:67:c0:48:11:10:
         34:a2:ab:b3:b2:68:47:d1:9f:36:e0:e4:c3:b1:ee:b7:c4:17:
         cb:16:be:6d:73:f2:32:3d:c5:60:86:bc:cc:f1:c7:04:91:45:
         d3:ef:6a:dd:87:6b:27:78:eb:47:25:4d:a5:4f:76:94:cd:7e:
         a6:b0:5f:b2:45:f1:2b:3d:8a:c5:fd:e3:c3:d5:48:13:8b:2d:
         f6:77:ba:7a:2f:9a:82:a8:05:41:28:20:fc:6d:53:40:5a:f4:
         98:53:37:4b:54:c9:b2:2b:b4:9f:b3:b4:0c:04:69:d9:2d:b3:
         fd:99:e1:dd:a1:41:98:6f:61:5d:50:b0:c4:e2:5f:74:e4:dd:
         9c:15:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:12 2025 by rpki-client