Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
File:                     9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json)
Hash identifier:          o4ZroDsHOkv2OJkDol0uA+sVcPXKyiiNgtqIGE5Pvyg=
Subject key identifier:   31:F8:E1:C4:98:EC:A2:2C:C2:E5:1C:6D:50:9D:F4:82:02:A6:EF:E6
Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6
Certificate issuer:       /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
Certificate serial:       0198D4E0325E801C96D778C1688D3422FAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
Manifest number:          0D00
Signing time:             Sat 23 Aug 2025 03:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:59 +0000
Files and hashes:         1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: LAFXrdfhopYS55/DH1S3zQEoUgfAJK90yF5oKPkvl5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:32:5e:80:1c:96:d7:78:c1:68:8d:34:22:fa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6
        Validity
            Not Before: Aug 23 03:01:59 2025 GMT
            Not After : Aug 24 03:01:59 2025 GMT
        Subject: CN=31f8e1c498eca22cc2e51c6d509df48202a6efe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:84:7c:aa:91:f0:55:2d:11:96:c0:98:f2:41:
                    20:8e:e4:e6:08:72:8c:5d:82:b1:d9:95:7d:26:02:
                    4f:83:f4:27:a6:72:37:e0:f7:d1:a8:82:9c:f0:a4:
                    05:b8:5f:7e:c8:12:cb:d6:5d:bd:d3:f8:ed:a7:ed:
                    6a:02:7a:b6:cb:fd:3c:74:cc:09:96:53:3f:82:cc:
                    7f:f0:d7:84:e5:f5:01:34:a9:a6:36:52:c3:0c:82:
                    df:f1:6d:ac:20:c9:0e:79:9f:3e:09:0e:8a:41:80:
                    5f:d6:e3:f8:7a:fd:88:91:53:85:5a:70:c6:df:07:
                    87:eb:5c:4a:63:6b:34:94:52:c0:72:bb:c4:dd:f8:
                    9b:ca:07:dd:7a:97:25:a0:72:21:00:83:4e:49:2c:
                    59:3d:06:42:96:e6:04:2d:b8:0f:82:cf:4c:34:44:
                    37:e3:a2:9c:5b:91:67:54:31:ea:fa:ff:fd:e1:ff:
                    d3:ac:2f:c9:a1:c3:a9:be:a5:93:d1:6a:88:3a:46:
                    c6:f1:9c:bb:fa:80:43:5c:1e:ad:7d:a4:c8:73:9c:
                    14:10:6b:73:6e:c9:7e:13:3b:7d:77:83:22:9f:ae:
                    ec:7a:9a:76:4a:bb:8d:fa:dc:8e:1f:8f:d1:0b:7b:
                    fb:f3:48:8d:d3:cd:2e:fb:4b:07:4c:96:ed:c7:33:
                    6d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F8:E1:C4:98:EC:A2:2C:C2:E5:1C:6D:50:9D:F4:82:02:A6:EF:E6
            X509v3 Authority Key Identifier:
                keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a4:2e:34:e3:ab:0f:95:e7:9e:88:31:46:23:4f:33:bf:6b:
         9a:e1:02:e8:82:83:54:a7:dd:96:72:46:bd:00:5b:1a:f0:78:
         3d:6e:48:dd:e0:ea:50:73:7f:42:fb:ce:b6:52:24:7c:8f:a6:
         31:77:8d:53:48:bc:41:22:38:e5:55:6e:0c:eb:c9:b7:91:62:
         e4:c2:99:1b:53:d8:43:ee:2d:aa:94:c9:3f:a6:fb:40:75:a1:
         f5:c2:5a:4d:0d:db:9c:25:4f:28:a8:41:4a:35:10:60:c2:25:
         50:fd:e2:1c:00:8c:70:e3:ad:68:69:b8:60:cd:e8:32:6c:59:
         1e:40:47:92:36:27:50:a1:48:a1:dd:56:90:14:23:ae:7a:80:
         06:ff:6d:ea:78:d3:53:a4:c1:5a:04:7e:8c:ca:28:0c:bb:17:
         aa:ce:66:88:30:ac:c9:8b:07:f5:09:92:8e:c8:7e:4b:dc:5a:
         85:fb:34:51:5a:a9:55:19:e9:1a:65:a4:95:bc:77:19:bd:79:
         05:7c:26:c7:10:eb:5e:f1:1d:ec:dc:9e:9a:41:76:db:3e:23:
         9f:aa:77:20:57:60:d4:fe:d1:fb:78:32:d2:d3:bd:73:43:c8:
         82:21:99:0b:57:4e:0b:89:37:bf:42:32:f4:7d:9a:dd:27:59:
         d7:26:b2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:06:42 2025 by rpki-client