Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File:                     9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier:          ACEd1mrv0TR9hOgnsEqAF+pAVNN27ZyLYOVmgSWhHAA=
Subject key identifier:   5D:04:EC:68:B3:84:08:14:90:98:65:33:22:73:5E:FE:AA:4D:92:83
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer:       /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial:       0198D583AE0F31D0F533163FA908F7591C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number:          12D5
Signing time:             Sat 23 Aug 2025 06:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:33 +0000
Files and hashes:         1: 7W1MYcFrXPQMuHGvZxJB_Ksb6ro.roa (hash: ly2c1hXdgi0m05sws7pc1y7F2/mwaZro2tBmU2P/9ow=)
                          2: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: WvoGwvvG9mMOzIBRIX3r0HI74s9tT5qiB7j/n7o8Zcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ae:0f:31:d0:f5:33:16:3f:a9:08:f7:59:1c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
        Validity
            Not Before: Aug 23 06:00:33 2025 GMT
            Not After : Aug 24 06:00:33 2025 GMT
        Subject: CN=5d04ec68b38408149098653322735efeaa4d9283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:40:45:59:5d:bd:3d:21:22:6a:02:c6:9f:
                    6c:e7:a2:46:b7:65:0c:d2:f3:26:80:ab:ac:51:fb:
                    a8:26:57:e8:1a:77:a9:d3:43:82:81:23:ec:25:d2:
                    22:26:8d:30:bf:9e:e2:c6:c2:27:84:86:9d:18:40:
                    83:b7:d3:03:cc:af:d8:c5:38:80:0e:19:19:c5:c3:
                    97:de:6b:e5:7f:92:84:77:fa:45:00:16:de:93:28:
                    d2:40:b6:54:d0:8c:8d:07:0c:14:f6:6c:c3:aa:a1:
                    03:4f:55:00:4a:b1:79:15:58:cd:54:e0:81:1a:ea:
                    4f:9f:75:d5:c7:25:a0:20:bb:54:a2:2f:f1:11:9f:
                    16:88:ed:58:c2:6c:b2:8b:ca:af:a2:94:42:b8:f1:
                    fc:39:b1:e5:77:8c:87:03:f8:24:26:31:21:26:90:
                    4e:e1:f5:19:91:6a:86:05:dd:8a:4d:5b:c7:40:36:
                    ed:0c:5c:fa:05:a0:85:45:c5:62:c6:f6:03:76:6c:
                    e2:e5:4d:7e:2e:ae:a2:7c:17:ab:e6:45:a9:2b:42:
                    9a:92:bf:fe:46:97:f2:89:85:5f:0e:9c:b7:26:6b:
                    47:9f:80:a0:dc:72:25:a7:c8:e0:e2:2d:74:97:69:
                    d6:4b:a0:55:5f:2b:80:7c:fc:e8:4b:ce:be:fa:bf:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:04:EC:68:B3:84:08:14:90:98:65:33:22:73:5E:FE:AA:4D:92:83
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:b7:c3:73:b8:9a:dd:c7:b9:39:9f:15:ad:64:31:33:40:
         2a:94:84:84:ad:a5:0a:58:6e:2b:0f:d2:bc:05:ed:3a:65:1c:
         36:b9:32:0c:49:36:a2:f2:49:6a:0a:91:8e:bd:56:35:0a:59:
         57:66:f4:d8:fa:9d:a6:b6:a7:08:b0:78:18:23:ef:54:53:be:
         f0:a5:88:04:89:b1:d6:1a:88:90:dd:0c:13:e6:bd:58:4d:32:
         c1:1d:21:50:56:ff:a8:e7:27:d0:b2:13:49:0a:7c:e8:a1:8a:
         0e:fc:24:ed:9f:e9:9a:e1:92:c3:93:d6:60:6e:45:59:e0:1f:
         c8:03:03:a8:1e:db:a6:71:66:0c:76:4f:15:50:b0:3c:c1:ba:
         88:0e:4d:09:a1:79:27:4e:52:8f:74:81:ae:64:8c:b8:1d:aa:
         bd:31:25:dd:bc:45:f6:11:0a:69:ad:c8:61:0e:b9:64:41:21:
         2f:9c:a1:04:a3:b0:c7:b6:71:f7:0c:c7:96:f4:3f:d5:c0:62:
         0f:c2:82:f5:65:8c:33:fe:9c:b9:c0:c0:dd:7a:61:1d:26:3d:
         11:a0:51:05:b2:44:30:54:26:31:e2:e5:b4:f8:11:4e:09:16:
         2b:57:e4:80:a7:33:d6:19:6d:7a:d7:0a:0c:8b:74:4e:e6:f2:
         d4:ef:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:30 2025 by rpki-client