Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File:                     m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier:          NLzdpNvXnfiufIjex4YOapHXg/Jv9lSH3iGvD+i8eDs=
Subject key identifier:   14:14:24:D1:88:5E:5F:85:D2:92:E0:94:AE:9C:0F:8D:37:2C:AF:CA
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer:       /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial:       0198D698558649637FDFF1B2F4E6A8D1DB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number:          09AA
Signing time:             Sat 23 Aug 2025 11:02:43 +0000
Manifest this update:     Sat 23 Aug 2025 11:02:43 +0000
Manifest next update:     Sun 24 Aug 2025 11:02:43 +0000
Files and hashes:         1: 4AyeZ6UgoSX9es2BbU_DizGhUdY.roa (hash: VWKfnEijREHtHZ2eztHBUGUXBqi65LO9HiloDpo6nX4=)
                          2: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: ZGbERTWl0hLIfRGjLjzP2WmcE2sDDEneA/LFV/dTrl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:98:55:86:49:63:7f:df:f1:b2:f4:e6:a8:d1:db:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
        Validity
            Not Before: Aug 23 11:02:43 2025 GMT
            Not After : Aug 24 11:02:43 2025 GMT
        Subject: CN=141424d1885e5f85d292e094ae9c0f8d372cafca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:5f:e3:46:23:93:d5:cb:8d:39:f2:f5:cc:30:
                    28:2d:77:61:0a:60:33:a7:be:36:eb:42:aa:76:3f:
                    53:22:f9:c0:a6:01:b7:ff:88:cf:04:69:f3:55:ba:
                    a3:f7:ea:f2:65:7d:99:9d:6a:96:6c:3e:50:db:85:
                    c0:f3:7a:f9:36:ac:49:5d:83:69:df:19:a1:9b:0c:
                    35:aa:f4:74:75:21:72:c0:8f:b6:75:e4:17:51:32:
                    75:bd:22:ba:63:3c:45:95:40:18:f2:ff:ed:dc:6c:
                    64:a7:80:2c:0f:3e:f3:e4:ec:60:28:26:f8:18:24:
                    5e:ac:e7:ad:ac:25:07:0b:fe:18:a9:93:de:22:37:
                    1b:06:59:a0:2b:fe:c3:a8:10:a3:2b:49:a2:bf:a0:
                    5f:ef:61:ae:84:c5:f4:16:91:94:f6:f3:b1:eb:81:
                    d7:3e:3c:4c:f3:10:19:68:c3:ed:61:78:ab:bf:53:
                    d7:8c:ba:03:4c:b1:87:2d:45:4f:07:30:41:af:aa:
                    4b:e0:52:74:99:de:ac:48:73:36:7d:69:a6:ab:b6:
                    bc:1d:df:d7:a8:2e:88:0c:2d:ed:b0:1a:a3:49:41:
                    4d:30:59:dc:7f:96:8c:90:b0:29:32:7f:bb:26:e9:
                    2b:be:fc:c0:ba:cc:48:74:5d:08:f4:23:d4:31:b2:
                    94:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:14:24:D1:88:5E:5F:85:D2:92:E0:94:AE:9C:0F:8D:37:2C:AF:CA
            X509v3 Authority Key Identifier:
                keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:6c:75:ce:8f:cf:0f:3b:ec:78:d3:08:4b:34:9d:06:4d:cb:
         fb:6a:16:5e:31:22:e6:51:8f:66:c7:3a:da:c5:39:93:e3:63:
         66:83:b9:16:6c:e2:39:f3:6d:d5:cb:86:b9:63:27:e8:43:06:
         b5:ed:ea:bd:bc:57:fd:26:bf:c4:91:df:f1:fb:d1:0f:f6:ae:
         bc:20:fc:fc:4d:e2:89:a7:fe:97:e1:17:15:e5:cf:ad:86:89:
         fa:92:26:a4:68:5e:b9:5c:5b:d2:90:5d:13:6c:43:f4:29:da:
         47:94:b8:a7:99:18:80:32:9c:77:65:4b:e7:f1:37:14:e6:c5:
         8c:b5:75:c3:25:33:b3:53:eb:8f:95:0b:06:19:6d:21:ea:91:
         35:2e:32:8b:30:8c:06:d9:19:6b:6c:5f:9b:02:cc:3e:f2:0c:
         a8:3a:66:9e:5f:68:be:24:50:c0:63:fe:bf:30:d2:21:90:74:
         7d:f6:02:73:2b:55:e4:bb:d5:89:57:23:ae:9f:17:50:61:67:
         4b:98:e0:ee:ec:60:e0:59:06:9f:f5:70:85:43:7d:6d:40:ca:
         2d:1a:02:26:d7:20:89:be:2c:9b:20:72:6c:ed:4a:cb:f3:96:
         4f:f6:57:4e:fa:43:b3:5c:f0:b0:4a:3c:9b:71:7f:c5:72:cf:
         c6:65:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:17 2025 by rpki-client