Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File:                     a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier:          WNYBRaLjJLhl1GXxFU7a7ferSzffSojqMbZjACTusW4=
Subject key identifier:   54:10:77:28:E2:04:4A:E9:5A:80:62:62:C0:F1:AA:E7:AE:62:E9:60
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer:       /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial:       0198D4733C00DE845E4212152871AB0CE4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number:          077F
Signing time:             Sat 23 Aug 2025 01:02:58 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:58 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:58 +0000
Files and hashes:         1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
                          2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: 59ShMqDROrQqD5LDtwPpY12CCzyPVX5uv4n+d7P4x6I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:3c:00:de:84:5e:42:12:15:28:71:ab:0c:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
        Validity
            Not Before: Aug 23 01:02:58 2025 GMT
            Not After : Aug 24 01:02:58 2025 GMT
        Subject: CN=54107728e2044ae95a806262c0f1aae7ae62e960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:df:19:71:2f:91:de:f1:8c:87:7d:a1:39:
                    92:49:6a:00:c8:59:77:df:ef:a6:de:96:9e:86:22:
                    1c:bc:3c:46:38:31:09:c0:5f:78:81:ea:f2:73:13:
                    01:7b:9b:f4:77:34:25:c7:ba:41:ee:6a:33:c0:73:
                    56:80:73:d7:c8:33:67:fe:dd:e5:bc:cc:af:47:8b:
                    8a:88:f0:c7:2c:7a:83:3b:f6:a5:2f:c6:08:8a:df:
                    d3:25:23:d2:fc:75:4c:8a:b0:23:d0:24:47:be:9d:
                    f0:67:72:60:96:dd:1c:03:f2:eb:64:fa:93:39:b6:
                    42:be:4e:f9:4b:86:4c:d9:09:27:56:40:07:03:45:
                    54:c6:ba:45:81:74:53:a2:33:9e:6e:1e:3e:74:27:
                    ec:9b:16:db:56:d2:da:57:80:cc:a9:ef:64:a4:c9:
                    a3:da:28:0d:81:17:2c:20:ba:c2:b5:5d:ff:36:0c:
                    01:47:3e:c3:c4:88:13:03:ca:17:15:dd:50:e3:cb:
                    0e:68:4a:1e:c2:0b:37:45:85:42:3b:20:2c:4f:dc:
                    9e:b9:d0:d4:21:d7:fb:ea:fe:32:9e:60:7e:6a:b2:
                    41:e6:b1:50:87:06:21:2e:c8:70:5b:16:7c:9b:04:
                    34:52:b1:f2:0c:ba:62:83:7e:ee:a6:2f:8c:9e:2a:
                    6a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:10:77:28:E2:04:4A:E9:5A:80:62:62:C0:F1:AA:E7:AE:62:E9:60
            X509v3 Authority Key Identifier:
                keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:8b:27:95:18:a6:8a:6a:16:36:81:8e:02:fa:bb:a2:7c:
         72:a9:63:54:68:d7:fe:e9:8a:7e:ef:7f:ee:cd:ef:be:ad:b9:
         42:d7:65:31:df:57:cc:24:87:18:a3:c9:a3:e8:7b:bc:05:68:
         b2:ba:ad:e8:6e:6e:99:1c:8e:7e:e5:a6:63:3b:64:6a:a5:c5:
         8e:b6:4c:42:c4:bd:52:00:78:10:be:88:fe:e4:36:0f:6a:49:
         16:25:dc:f3:63:7b:a4:2b:56:14:46:6b:f1:9d:71:1a:d5:b8:
         61:47:66:ab:d2:13:4f:ad:0f:dc:84:9c:e6:24:6d:c1:5f:29:
         5b:82:c5:c6:dd:23:f5:b9:17:97:e7:d1:9b:92:77:83:02:bb:
         a6:b9:cf:da:17:87:0b:ff:06:f9:80:78:65:55:73:c8:cb:2a:
         8d:2d:f9:3d:86:f2:3e:81:9b:75:67:e0:de:b4:73:fa:c4:ed:
         96:61:59:c3:f0:00:f0:ff:79:d2:33:38:19:53:00:ab:ec:c3:
         1a:37:d0:9a:f5:2b:3f:5b:ee:dd:23:6c:be:4c:53:5e:32:68:
         2f:d1:fe:ba:99:78:14:4d:2d:1b:e0:09:19:2c:5d:df:d5:20:
         6f:b3:43:df:c2:bc:e7:65:14:32:1f:69:e2:ac:5d:c2:62:3b:
         6a:15:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:52:41 2025 by rpki-client