Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
File:                     1-DJywMMtsATwePh0uZ2poLfmOv0.mft (raw, json)
Hash identifier:          67jOp4oX1S2vqM8JQegjcdqhnu9IUKoutik8bnGwv7Q=
Subject key identifier:   F3:A9:2E:DC:A9:9D:47:3B:0F:B0:AB:1F:E8:11:26:AE:78:D3:59:A8
Authority key identifier: F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD
Certificate issuer:       /CN=f83272c0c32db004f078f874b99da9a0b7e63afd
Certificate serial:       0198D6CD7F4486730750D604DC5DD9378E42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
Manifest number:          102F
Signing time:             Sat 23 Aug 2025 12:00:48 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:48 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:48 +0000
Files and hashes:         1: 1-DJywMMtsATwePh0uZ2poLfmOv0.crl (hash: gkvKbpRwAewaJtHi42VzIk5nq/MGXgeEIdMek2PCrdM=)
                          2: xkD-bMrKpX5bvRCXR7n2flyNmqg.roa (hash: ANcTIXHVR2iM56VPGUlESg9hA4bfaEVpnPYR7NoEoeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:7f:44:86:73:07:50:d6:04:dc:5d:d9:37:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83272c0c32db004f078f874b99da9a0b7e63afd
        Validity
            Not Before: Aug 23 12:00:48 2025 GMT
            Not After : Aug 24 12:00:48 2025 GMT
        Subject: CN=f3a92edca99d473b0fb0ab1fe81126ae78d359a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:1f:fc:1f:4e:5e:19:5d:2d:04:ce:8e:3c:
                    27:26:ac:b2:04:f7:86:2a:21:66:9a:02:73:7a:82:
                    78:ef:e4:14:06:91:1f:2a:aa:87:24:f5:fd:b9:c3:
                    e7:be:51:20:e6:fe:6a:a7:01:ab:f4:6c:c3:f2:0e:
                    f9:ea:af:84:a6:06:b6:fb:c4:00:e3:c0:18:64:d2:
                    8b:08:cf:b5:79:5c:37:7f:2c:84:70:04:ce:27:54:
                    13:65:cf:74:89:56:24:18:9b:02:8b:ff:1f:3a:5e:
                    81:5d:61:2e:fe:7a:d1:5b:e5:43:55:7f:90:33:84:
                    2e:b2:23:b7:78:57:06:d4:aa:20:10:3d:a9:81:40:
                    92:11:7a:fb:c1:94:48:ce:c0:38:1a:79:de:55:66:
                    4a:02:7e:c9:ba:36:45:e0:23:93:1f:48:ee:4b:6f:
                    ce:c7:34:e5:df:0a:e8:56:1b:d9:64:36:0e:0b:26:
                    1a:55:e1:34:c0:0e:b9:2c:97:54:af:43:68:cb:3c:
                    68:be:22:d2:10:10:b7:a8:35:60:d7:46:17:a9:30:
                    3c:8f:3a:3c:9e:52:ec:ed:65:60:f8:79:0e:b3:38:
                    ad:6b:e5:75:ca:b0:b8:41:08:88:e9:77:45:cd:b7:
                    bd:a3:14:6d:15:1e:82:35:4c:a3:80:39:13:70:e6:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:2E:DC:A9:9D:47:3B:0F:B0:AB:1F:E8:11:26:AE:78:D3:59:A8
            X509v3 Authority Key Identifier:
                keyid:F8:32:72:C0:C3:2D:B0:04:F0:78:F8:74:B9:9D:A9:A0:B7:E6:3A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DJywMMtsATwePh0uZ2poLfmOv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/94a1e0-c180-4baf-9ea0-f67e7078878e/1/1-DJywMMtsATwePh0uZ2poLfmOv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:0d:09:93:91:6b:10:10:fa:25:31:13:58:f9:c6:ee:a3:
         1f:30:2e:73:84:4e:ce:e8:9a:b2:5f:f3:38:b8:db:45:60:db:
         a5:5d:4c:bd:b2:a8:be:77:99:6a:64:ae:4a:f8:74:26:b7:3e:
         75:04:3b:f3:df:17:d9:43:9c:a9:4e:40:8e:6a:25:d8:2c:88:
         18:10:2c:6c:b6:3b:c5:ea:63:ac:a6:8d:12:bc:d4:1a:e6:a0:
         97:32:34:e9:04:81:7d:db:30:e8:1b:7e:d1:b8:ea:a4:b6:13:
         6f:52:20:cd:57:d1:07:78:7f:91:95:a9:eb:86:a8:67:76:2c:
         bb:9c:65:a8:3f:81:df:44:53:6a:24:20:62:7e:d4:f8:f8:0d:
         1f:62:10:41:6f:70:b8:98:cc:1c:2d:0e:45:57:45:c6:7b:b7:
         ea:89:aa:41:b9:79:90:b2:a0:4f:f7:15:d7:a2:b4:f7:f9:a2:
         ec:01:f9:20:cf:17:5f:19:cf:c0:e7:2d:ca:2d:45:18:4a:0d:
         01:68:ba:d1:b8:86:19:0a:83:9f:8c:6c:0b:88:18:40:23:4f:
         12:7a:a8:f6:ed:5d:34:a1:d2:90:77:32:07:93:c3:39:2f:c7:
         0a:02:61:d4:89:10:07:67:c7:05:a8:8a:91:1e:02:17:96:5a:
         17:07:fc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:07:34 2025 by rpki-client