Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
File:                     9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json)
Hash identifier:          rc782yAiVFWI/dxnrvNPpW+W7qtmG0nu913nP8TpruY=
Subject key identifier:   77:E1:99:CE:83:16:93:9B:49:86:22:EC:7F:3E:B7:90:81:2C:D0:81
Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D
Certificate issuer:       /CN=f5882f33f7480dcc7b87637aea76368289d75c2d
Certificate serial:       0197B7452DA49852BA20158FF3A3403A5FA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
Manifest number:          02CE
Signing time:             Sat 28 Jun 2025 16:00:53 +0000
Manifest this update:     Sat 28 Jun 2025 16:00:53 +0000
Manifest next update:     Sun 29 Jun 2025 16:00:53 +0000
Files and hashes:         1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: 3xMTsFMfIMFUoMR8eb3L2c9r7hCtit8S2W+xM5b8Vy8=)
                          2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:2d:a4:98:52:ba:20:15:8f:f3:a3:40:3a:5f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d
        Validity
            Not Before: Jun 28 16:00:53 2025 GMT
            Not After : Jun 29 16:00:53 2025 GMT
        Subject: CN=77e199ce8316939b498622ec7f3eb790812cd081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ce:52:92:77:e5:75:e0:13:26:ed:b1:dc:f6:
                    e5:88:ef:3e:e8:92:30:e6:e1:92:75:c5:24:51:83:
                    08:36:ac:4b:83:0e:12:2c:8c:67:78:d6:bd:74:d4:
                    7a:79:51:be:52:39:1c:a7:44:b7:d2:ea:d1:64:49:
                    1b:38:5f:dd:99:aa:fd:17:20:a6:92:44:1c:4e:60:
                    3d:60:d3:bf:7f:40:2f:a9:17:f8:4d:ef:62:0e:1b:
                    1b:8a:3c:62:ef:69:a1:83:27:2e:e4:38:78:ab:f4:
                    f2:02:52:ee:2d:5b:92:d6:58:95:53:95:e2:e8:c0:
                    8c:29:9b:2e:ae:b4:31:58:7a:c5:ca:6b:9e:2a:51:
                    82:ad:95:68:2a:56:08:e4:67:92:6f:ce:e3:c1:7d:
                    7e:d3:84:31:2f:de:ce:5e:33:41:c4:e8:13:c5:d8:
                    87:f3:57:e7:da:7e:fa:76:52:37:57:e3:b9:e3:74:
                    bc:50:00:d6:e5:81:56:51:db:b9:1c:e8:6b:1b:b9:
                    5a:6f:ab:dd:b0:35:b1:3e:c8:62:83:8f:ba:27:48:
                    3f:a8:42:c8:55:d4:ff:05:eb:53:9b:5a:f4:8d:00:
                    c8:99:c6:9a:03:ad:56:ea:ac:2a:57:22:2c:34:d2:
                    d6:ea:c2:9b:73:da:09:5e:b1:32:9d:e1:da:f1:0f:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E1:99:CE:83:16:93:9B:49:86:22:EC:7F:3E:B7:90:81:2C:D0:81
            X509v3 Authority Key Identifier:
                keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:a0:ab:26:3f:50:77:3e:10:55:14:84:9c:9d:76:c1:17:
         6a:be:de:b2:da:ac:14:b5:da:7a:fa:69:8b:de:aa:bc:aa:7b:
         c9:bc:4d:0f:8a:bc:cb:a1:8b:1e:a8:4c:dc:f2:d3:ed:b2:35:
         20:97:16:90:c1:34:52:7e:fb:d0:90:61:ad:ba:c3:a4:1e:88:
         b9:be:97:e5:c1:f5:8c:2c:35:47:8d:b7:27:23:f5:40:46:45:
         0b:7e:f9:ac:e3:f3:07:56:47:53:b7:b1:dc:81:ef:e9:f6:24:
         69:6d:99:1f:b4:8b:30:81:34:1d:5c:35:01:e6:a6:ec:36:01:
         96:9d:8a:b3:f4:29:20:9b:80:4c:13:87:fb:8c:00:d4:45:51:
         7d:a1:a9:d5:77:4b:9f:a3:88:62:5e:ed:59:97:35:40:46:0b:
         62:37:b1:c7:bb:78:da:cd:9c:53:9e:59:c7:e2:64:9f:1a:b4:
         b8:94:14:3c:84:86:58:61:b5:fa:12:f1:57:e6:7e:ea:d8:65:
         72:7d:49:4a:48:5b:a7:02:8f:2b:19:06:2a:f4:fc:92:2c:7d:
         7e:78:65:65:72:8f:1a:9a:53:2d:26:4e:07:31:2f:15:a6:fc:
         25:9c:11:ce:5a:29:88:fa:28:37:b2:32:d9:97:27:f0:bc:59:
         e9:a5:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:43 2025 by rpki-client