Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          SBl44bOBiSscmy2bXjguqDW18XuIeK1FM3GGRBcf3qE=
Subject key identifier:   02:33:4D:8F:EF:44:57:E9:2C:60:47:EF:C4:F4:F7:00:36:CC:37:AA
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       0198D47334CFB0FCFBD77A641000EFEBC5D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          119E
Signing time:             Sat 23 Aug 2025 01:02:56 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:56 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:56 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: HQALH1hMK3coQQsCat+X/0vvC7T2mnfCogx4DD0WFVI=)
                          2: ftXv30Hlz-_EICPh46zy3bfImAc.roa (hash: 3S31teaHx8GBvsqpB7SE49UNoJHeSlzxpM1K7KnfX/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:34:cf:b0:fc:fb:d7:7a:64:10:00:ef:eb:c5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Aug 23 01:02:56 2025 GMT
            Not After : Aug 24 01:02:56 2025 GMT
        Subject: CN=02334d8fef4457e92c6047efc4f4f70036cc37aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:c9:93:12:c7:4c:64:0b:53:d8:da:e6:2d:
                    f1:c3:df:a4:9e:8f:fc:47:af:6d:d5:7b:1f:d2:d0:
                    33:96:e1:32:0f:08:1c:6b:b4:96:2d:c9:a8:92:19:
                    55:6b:ef:c0:4b:96:b1:00:f6:0a:67:02:2b:95:21:
                    79:10:cc:42:5b:04:6d:94:6c:a8:37:b1:2a:e1:c9:
                    53:1c:c5:dd:14:77:a6:98:4b:d6:86:94:c8:81:ed:
                    45:3c:7b:35:a8:c8:4a:31:d2:4a:1d:45:8a:44:83:
                    96:43:c7:9c:fe:67:11:6e:fb:6d:b8:c7:99:00:e2:
                    a4:5d:af:54:db:84:05:c9:e0:c1:4a:c8:9c:a8:7e:
                    95:7c:a8:a7:55:b5:43:dd:0b:04:2a:3e:10:e6:a3:
                    09:e4:e7:30:ea:1d:22:e6:a3:c6:4a:d2:4f:46:23:
                    ad:a3:34:b3:85:b8:3a:ad:af:28:9e:82:89:ed:d8:
                    70:a5:ee:45:d2:cc:b3:90:b0:7e:e2:f1:e2:06:93:
                    6a:e0:31:3a:19:a0:57:0c:7f:a6:1f:f1:3b:44:00:
                    50:bb:47:d0:3e:c0:a2:08:00:48:f3:de:f9:f6:39:
                    79:9a:08:3b:3a:1a:ac:34:c8:9f:31:53:51:94:f4:
                    90:cb:8c:1b:0c:9e:d3:1e:1a:3c:f8:e5:5d:e2:ac:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:33:4D:8F:EF:44:57:E9:2C:60:47:EF:C4:F4:F7:00:36:CC:37:AA
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e8:91:fa:52:bf:c7:72:5a:74:a3:f9:d2:02:42:4b:99:a2:
         63:32:6d:88:ad:a7:90:ce:b4:b1:a3:3d:7b:3b:06:24:63:71:
         e1:f5:fb:60:3b:46:f1:22:9c:82:9b:12:ab:8a:56:2a:85:eb:
         e8:bb:8b:b5:d6:ab:75:4c:65:ec:95:d1:35:6e:d9:79:e1:cf:
         e6:e0:bb:5e:4a:d7:c9:1a:b3:d3:67:1f:9c:56:b5:0a:59:f4:
         a2:2f:e2:f2:42:21:d9:d9:08:f6:6a:34:65:ba:45:81:9a:9e:
         66:cb:a4:9d:a0:9f:64:b7:77:0d:07:de:9f:db:73:91:97:54:
         cb:fe:a7:d7:a9:0e:df:72:0c:83:63:62:d0:20:25:8e:1a:e8:
         60:40:77:56:71:48:82:89:48:a1:1c:21:02:ce:b5:5b:48:e2:
         9c:cd:e9:d8:bd:9a:b1:9d:0e:db:da:df:0a:68:d6:7b:19:fd:
         f0:fa:bf:9b:91:01:03:61:0d:7d:5d:53:66:25:32:a3:55:ab:
         8e:51:d8:9f:ff:65:c3:27:ba:7d:b9:83:f9:e1:da:8d:33:f7:
         92:34:31:32:27:53:37:d1:f6:75:26:b8:2f:30:79:1a:c7:c6:
         92:a9:87:79:13:5c:f5:c5:6f:69:d7:72:13:08:3f:89:00:a5:
         c8:1d:b9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:10 2025 by rpki-client