Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
File:                     9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json)
Hash identifier:          cbt0nB5idFtdOmiUhxY7M0aX++08dZvCQ5mddH/l2nk=
Subject key identifier:   EE:8E:4F:BB:1D:72:0F:07:35:D2:69:43:EB:E3:94:3C:96:A9:E1:82
Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91
Certificate issuer:       /CN=f67d67da8860b8322c4f204d611b006138f1b391
Certificate serial:       0198D515B54840308A1247A74FA469A42996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
Manifest number:          0348
Signing time:             Sat 23 Aug 2025 04:00:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:26 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:26 +0000
Files and hashes:         1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: 2Jv2Jh4j2PHci5M0QxIslSh/4ysBKuRu+Itnpf94fJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:b5:48:40:30:8a:12:47:a7:4f:a4:69:a4:29:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391
        Validity
            Not Before: Aug 23 04:00:26 2025 GMT
            Not After : Aug 24 04:00:26 2025 GMT
        Subject: CN=ee8e4fbb1d720f0735d26943ebe3943c96a9e182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ee:76:9c:3c:11:87:01:f7:31:ab:43:be:d3:
                    e7:8e:02:00:80:8b:cb:62:84:a3:65:55:5c:6f:da:
                    3d:04:b6:53:a8:49:b2:db:d1:6c:3c:b6:35:61:0d:
                    b6:4f:c6:cf:16:88:a5:01:16:29:08:aa:56:5a:8a:
                    a3:76:66:0d:cf:22:14:0b:8d:43:c3:49:61:cc:b0:
                    42:91:26:ac:89:76:c8:85:2a:52:c4:69:a5:12:69:
                    1d:e7:04:c5:be:42:98:f7:1f:2f:97:c8:81:41:8d:
                    7f:7c:a1:40:a5:49:50:79:c6:fd:e6:25:a1:f8:30:
                    cc:86:82:e4:87:f3:f2:3d:db:23:40:d0:4f:b3:d5:
                    78:24:88:c5:9a:b4:6d:13:09:14:7c:8e:bd:7d:b8:
                    14:84:74:b2:c5:6b:10:15:61:4b:f6:7a:5a:73:03:
                    9d:4c:55:df:78:d0:f3:91:1f:08:6f:9a:b6:96:60:
                    9a:ab:82:c1:78:b8:66:e9:98:92:b9:4b:33:e9:2f:
                    4a:73:5e:01:2f:8d:bb:01:70:54:1d:69:fd:7f:94:
                    ca:f9:52:cb:c2:ca:d7:8b:81:a4:4c:ec:17:d8:88:
                    30:3f:de:b2:b4:ba:a6:01:94:aa:31:a8:0b:76:9a:
                    d1:2b:81:39:94:86:8b:5c:bc:99:03:ba:f5:ea:d6:
                    8e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:4F:BB:1D:72:0F:07:35:D2:69:43:EB:E3:94:3C:96:A9:E1:82
            X509v3 Authority Key Identifier:
                keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:06:d9:9b:11:c2:5f:27:e0:84:eb:44:57:c4:4b:e5:24:83:
         13:cd:bd:d0:90:55:5c:9f:3d:dc:4c:b8:0e:1f:c1:13:52:d4:
         21:c3:61:48:36:b8:4f:76:08:36:72:36:77:aa:e9:81:b0:df:
         63:d0:48:a7:9d:51:a5:18:2f:0e:ff:3a:df:de:65:a6:e6:4c:
         ab:ac:06:2c:e5:09:1a:23:81:27:30:bb:3c:b9:45:23:6e:71:
         5e:a9:73:91:0e:4f:76:0d:00:10:4c:fa:8d:c2:17:bf:b6:8e:
         d3:de:9d:b0:83:bc:40:5b:5b:a3:48:17:de:e6:8c:3a:48:5a:
         e5:55:b1:72:83:07:98:b0:be:fa:45:27:50:ea:b7:ef:ad:b2:
         58:7a:ab:18:b3:30:2a:91:be:50:8d:70:8d:2b:ce:e9:a2:93:
         17:c1:a9:9f:bf:43:4f:51:6d:77:47:5e:7a:99:dd:e4:31:63:
         e4:09:fc:cf:92:d2:04:bc:a8:74:c5:a2:28:43:82:da:40:a3:
         0f:a2:1b:4f:74:d3:ac:cd:52:d8:fe:b9:f3:f8:1a:54:f6:0d:
         3a:78:ca:bd:bb:f8:af:c2:91:61:0b:f4:b8:74:2b:7b:2a:2b:
         21:33:9d:5a:a2:f5:88:48:15:ca:5f:e3:be:96:9f:d3:59:4b:
         c3:63:b6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:03 2025 by rpki-client