Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File:                     t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier:          shJ+lU6qokT0ybbG2vgAvtGFzdQFN9UHVlZwhu5jfJg=
Subject key identifier:   31:F3:1E:9D:A8:65:94:92:E4:29:43:C4:E1:9D:B5:88:60:59:50:1B
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer:       /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial:       0198D65FBA21B3EEEF0F3A24798E279F960D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number:          13ED
Signing time:             Sat 23 Aug 2025 10:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:54 +0000
Files and hashes:         1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
                          2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: tf8caj/taxBUxHvzRKcFGlox6ZP4uG9m+oayV4MZV0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:ba:21:b3:ee:ef:0f:3a:24:79:8e:27:9f:96:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
        Validity
            Not Before: Aug 23 10:00:54 2025 GMT
            Not After : Aug 24 10:00:54 2025 GMT
        Subject: CN=31f31e9da8659492e42943c4e19db5886059501b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4a:09:ab:69:8a:2e:3d:3f:fc:c0:f3:22:93:
                    c0:e1:06:05:98:fc:ee:32:c6:d1:d5:db:b9:a6:97:
                    25:08:7d:b0:53:4f:be:0e:13:68:f1:de:cd:15:48:
                    fe:78:af:27:47:34:3b:6f:a1:5c:4d:fb:c8:ec:13:
                    c5:cd:fa:70:d4:a3:c9:02:f6:39:26:94:9e:69:94:
                    7e:98:1f:f1:23:93:55:ec:0a:16:16:02:1a:04:0a:
                    09:b3:86:9b:c9:09:76:86:fb:c1:1d:54:bc:cc:de:
                    75:d0:c6:5f:97:dd:c0:62:d9:e0:51:65:db:c9:b2:
                    19:06:0a:ff:c4:11:5d:f3:08:89:84:09:f2:6e:89:
                    f7:14:46:7b:ab:28:67:c4:13:52:21:96:89:3c:76:
                    d7:fc:a8:b3:44:b0:65:12:32:8c:06:d1:74:0c:58:
                    92:d5:ca:84:0f:08:4e:eb:1c:2c:a1:dc:8d:9f:8a:
                    ba:dd:04:59:24:bc:71:11:4d:11:90:5d:be:86:52:
                    1c:67:f9:7b:e8:64:0c:25:27:c6:d1:b1:c8:f9:61:
                    e1:da:96:9d:da:17:03:85:92:c9:ba:18:9e:e3:57:
                    76:72:ce:cb:2c:38:2d:1c:6c:5f:53:86:40:2e:7c:
                    4e:54:53:45:14:9b:39:a3:96:2f:c4:c9:ba:34:7c:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:1E:9D:A8:65:94:92:E4:29:43:C4:E1:9D:B5:88:60:59:50:1B
            X509v3 Authority Key Identifier:
                keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:fe:6a:8a:c3:66:03:63:f8:9a:dd:67:05:8f:93:bd:e0:aa:
         a8:22:6f:c6:fa:f6:c0:17:46:6f:c1:93:c2:a4:10:1e:ce:cb:
         c1:74:3f:53:e2:fc:ba:b3:41:08:6e:f8:98:67:b2:fe:d0:c9:
         ca:48:be:96:70:d9:46:7e:47:4f:2c:89:45:9f:3c:af:8b:35:
         85:09:7c:d8:e7:48:f6:55:75:3c:74:13:df:a0:7d:8a:53:1c:
         76:6e:5e:ee:f0:62:c6:b3:1a:e7:58:55:49:b0:42:b8:93:d8:
         55:79:20:df:91:72:56:93:82:1d:86:77:a7:d6:4e:26:a6:c7:
         50:f4:c7:fd:e8:3b:8d:69:7d:c2:19:eb:a8:2f:c6:41:44:2e:
         19:4d:2f:7d:85:fe:cb:91:a8:83:1a:3b:5f:e4:99:13:c8:8c:
         cc:6f:a3:89:5d:0a:22:cd:33:99:ec:98:7e:83:bd:bf:5e:9e:
         b0:4d:9c:ec:6c:c5:e6:6c:09:32:90:ca:27:22:5f:81:5c:9b:
         0e:6a:e9:d8:ae:5c:3c:73:f8:e3:96:9b:92:d1:eb:a4:91:41:
         fe:48:70:33:c5:cf:b7:58:a6:dd:4c:29:32:64:be:d5:56:9d:
         c6:39:1a:19:ec:3f:32:8a:ae:20:99:b7:44:c1:0e:4e:3a:95:
         62:47:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:00 2025 by rpki-client