Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          X7TrFCxEx10dGHa8WOp4m4gPTHfnXl+7M3Wa5Rpnx+M=
Subject key identifier:   9E:9E:9A:31:53:17:A2:B1:B2:66:BC:B5:1E:35:0E:9A:4D:B6:B3:0B
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       0198D65F2BF3B91C9A9EACECD84E48C69153
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          091A
Signing time:             Sat 23 Aug 2025 10:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:18 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: ZUTlVZdfSL78L261DCkRRi1p/0KMmo8QUjC1rJtdBpM=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:2b:f3:b9:1c:9a:9e:ac:ec:d8:4e:48:c6:91:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Aug 23 10:00:18 2025 GMT
            Not After : Aug 24 10:00:18 2025 GMT
        Subject: CN=9e9e9a315317a2b1b266bcb51e350e9a4db6b30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:93:ff:8a:c0:f2:d1:72:06:3a:0f:31:34:
                    94:c0:92:da:58:77:cc:fe:c8:14:78:fb:a0:dd:4e:
                    f9:08:94:94:55:1a:18:87:41:27:05:85:51:72:88:
                    03:67:90:1e:05:3d:73:fc:93:18:a1:37:74:0c:dd:
                    38:7b:65:49:a2:25:ef:d0:8e:a7:9c:0c:d5:95:bf:
                    41:af:e0:b6:2d:64:af:af:ec:4b:8d:0b:f7:87:4a:
                    1a:21:e9:47:44:cc:c5:3d:95:03:4e:5a:c8:96:df:
                    13:98:31:c9:04:70:34:1f:b4:4c:d0:8f:af:cf:55:
                    e4:7b:e6:41:28:ff:8c:48:ef:ab:fe:99:a7:6a:3c:
                    aa:62:9b:f5:05:70:9b:47:99:2b:09:a1:ed:f6:ea:
                    21:e1:83:45:aa:42:c5:1e:cd:e7:2f:c1:a8:c5:a6:
                    dd:19:81:e1:aa:2f:ea:a7:9e:ec:c4:34:1f:ba:93:
                    ec:19:9b:44:2b:3b:31:19:a4:bd:c6:f2:39:94:f2:
                    30:7e:2e:35:56:2d:e4:83:bb:8c:32:fa:5a:c3:ab:
                    52:b0:e3:fa:0a:d7:eb:1c:db:ea:ab:c5:7b:dd:13:
                    9d:2c:fe:c2:29:2f:80:a0:28:50:60:2a:d5:ef:d6:
                    25:ac:9f:f5:a9:ad:65:ce:8e:7a:56:62:cc:8d:5f:
                    6b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9E:9A:31:53:17:A2:B1:B2:66:BC:B5:1E:35:0E:9A:4D:B6:B3:0B
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:57:f5:14:6f:61:53:58:dd:2a:de:0d:a5:9f:52:4a:59:24:
         d2:cd:af:0c:aa:87:ec:fd:cf:58:98:44:61:be:90:5b:03:fa:
         55:68:92:64:86:a8:aa:b9:e1:b4:2e:5d:0a:fe:24:ee:db:ac:
         e8:99:b1:df:05:cd:dc:84:f8:c3:c8:12:ab:6d:19:ba:a7:2a:
         fa:85:50:a9:3f:98:99:13:58:82:c9:98:39:bf:2d:be:93:a4:
         29:67:e8:3b:1f:95:a3:b9:c5:a2:6a:6e:b4:c9:f3:71:28:e5:
         b0:ae:ee:0a:a7:a2:01:f8:90:51:30:ae:ab:9a:59:4d:b9:45:
         16:73:ef:59:fc:68:af:d0:9b:77:a1:1d:1c:25:da:8e:a1:ca:
         51:c1:95:80:33:aa:35:ac:e2:62:99:6d:f7:f3:6e:ea:27:0f:
         b6:79:a8:10:77:b0:5b:cb:01:b7:d3:c6:d2:8f:bf:78:d8:55:
         79:79:b8:8f:01:64:18:fb:e2:88:03:9f:5c:d6:ac:5b:e7:41:
         b4:e1:ba:e5:69:33:15:82:6f:5a:91:63:f0:00:69:ec:de:06:
         dd:6d:b8:45:39:a6:3b:3a:3f:88:01:2f:34:af:f0:63:bf:33:
         a0:96:01:32:6c:56:93:a1:56:71:8d:dc:66:c7:ee:63:b0:c8:
         f0:bd:30:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:59 2025 by rpki-client