Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
File:                     9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json)
Hash identifier:          FuZMw9RCLm4cbSwaViB5SrmZN3TBQNS1Dp3bpw6nPRE=
Subject key identifier:   FA:77:18:E4:84:3E:D3:98:D9:73:C0:EF:47:7A:76:C1:90:05:8D:60
Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9
Certificate issuer:       /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
Certificate serial:       0198D54E49D35756A2DD64C03AE182F97212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
Manifest number:          0AC0
Signing time:             Sat 23 Aug 2025 05:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:14 +0000
Files and hashes:         1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: Ir4abFlYK5iL1Zq33dXOS8QflX4JIGPON7veJ8pwtbc=)
                          2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:49:d3:57:56:a2:dd:64:c0:3a:e1:82:f9:72:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9
        Validity
            Not Before: Aug 23 05:02:14 2025 GMT
            Not After : Aug 24 05:02:14 2025 GMT
        Subject: CN=fa7718e4843ed398d973c0ef477a76c190058d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e5:c6:60:ce:cc:89:92:ea:7d:6f:2c:7c:45:
                    11:bc:28:3e:23:35:6d:cd:53:f7:69:27:43:99:22:
                    ff:d8:19:f9:16:2d:9e:4c:e1:ed:60:c1:58:de:3e:
                    96:86:5e:14:4d:79:36:00:91:65:27:1e:25:02:e0:
                    13:72:13:a4:71:22:c7:45:05:1c:e3:a0:7c:f4:24:
                    ec:4b:2d:83:61:57:9c:1c:99:82:7e:85:0b:22:6a:
                    d6:06:90:9f:17:85:f1:02:dd:a1:0b:82:99:c9:ca:
                    5a:52:d8:4f:3b:0f:07:00:14:9c:43:2b:7f:dc:78:
                    68:16:6e:5c:50:51:cf:26:a4:50:56:f6:89:b3:0f:
                    23:09:84:db:b4:eb:33:36:91:c3:39:19:12:13:f5:
                    a2:d2:68:5d:eb:59:e8:06:35:13:84:a9:c0:de:ad:
                    61:38:b1:83:aa:c8:24:4b:29:7e:ce:c4:83:0d:ab:
                    af:e7:a1:12:99:39:41:1d:d5:79:3b:50:de:c7:ff:
                    1b:a7:16:15:c1:c0:9d:b2:ac:d6:75:f4:0c:28:b7:
                    c4:f2:05:aa:50:21:36:dd:7f:bd:1d:5e:5b:24:af:
                    e3:5e:cc:7e:80:0b:83:e7:49:b8:34:fa:38:28:8d:
                    d0:f6:0b:a2:80:25:e3:ac:50:39:96:d6:9e:f7:1b:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:18:E4:84:3E:D3:98:D9:73:C0:EF:47:7A:76:C1:90:05:8D:60
            X509v3 Authority Key Identifier:
                keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:3a:01:e9:db:5b:c3:0c:94:89:08:69:88:6b:ed:83:77:c4:
         4e:aa:11:25:e3:3f:41:7d:58:5b:e5:55:93:63:f0:a7:12:07:
         10:66:9b:80:dc:4e:c4:60:10:37:cd:2a:a5:6a:6f:6b:e3:35:
         99:95:db:7f:13:f1:ed:67:54:ca:44:ce:0a:9f:77:fa:75:b4:
         ac:f6:37:3e:9d:d7:44:a1:ac:1e:cc:01:d6:e0:31:6c:ec:6d:
         b0:ad:24:7b:55:68:39:22:43:7d:4d:64:f3:ec:1c:6d:be:ea:
         1b:76:1a:4a:3a:e9:9e:ce:13:97:e5:b4:d8:ef:b3:f7:68:9f:
         bb:52:ca:d2:1b:ec:55:53:22:c9:d2:8c:c7:1d:b8:b3:90:76:
         2a:cc:e9:d1:6f:2b:ee:46:6d:bd:12:9b:82:13:09:8a:ea:2b:
         2c:3d:9c:61:f7:ac:a8:dc:32:3d:10:ac:77:52:bc:b2:53:2e:
         20:c0:2c:28:b3:75:01:e7:4a:f6:c8:69:0f:8a:50:39:2a:7e:
         bd:4b:c0:0d:61:a3:c4:ff:7b:19:45:cf:fc:33:66:87:f4:bd:
         7f:5d:3d:7b:a6:de:27:30:ff:aa:70:3c:98:68:48:51:d1:f2:
         d7:cd:94:b5:d9:21:e0:5c:7e:c6:f7:ac:2c:f1:b8:bb:8c:f1:
         b2:b4:a9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:51 2025 by rpki-client