Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
File:                     V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json)
Hash identifier:          l8desvzbZTRX4KDuQ5oG5zp9WLJsuoHwEe/fGZrwkNQ=
Subject key identifier:   D0:7B:DC:06:07:03:52:16:2E:E0:32:EF:9D:BF:40:F4:76:27:F1:F9
Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06
Certificate issuer:       /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
Certificate serial:       0198D7A8E062993DCFE39459A57AACB72B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
Manifest number:          04F1
Signing time:             Sat 23 Aug 2025 16:00:25 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:25 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:25 +0000
Files and hashes:         1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: lyBmIpXgo1W6ybkR3HdEPELq0zD0u9EaLzJXsGl3Zh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a8:e0:62:99:3d:cf:e3:94:59:a5:7a:ac:b7:2b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906
        Validity
            Not Before: Aug 23 16:00:25 2025 GMT
            Not After : Aug 24 16:00:25 2025 GMT
        Subject: CN=d07bdc06070352162ee032ef9dbf40f47627f1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:51:57:29:9a:71:3c:54:15:8b:c4:10:a7:
                    29:97:6b:7d:91:84:d4:17:34:58:70:cb:a1:3e:0e:
                    82:5f:7c:1a:30:c5:ac:b3:67:d2:47:26:ef:ba:ec:
                    77:9b:d8:af:8e:2a:f7:8e:22:80:f8:67:45:33:c7:
                    51:5b:34:96:f6:01:4c:89:25:0b:27:45:38:26:cd:
                    cf:c7:05:f8:47:7a:3a:53:7f:0d:9f:4c:2b:d8:38:
                    d7:bf:1e:a4:f5:6b:1b:14:25:d5:e1:bd:2f:d1:35:
                    2a:0b:c4:21:6f:be:63:70:ab:c8:b5:ab:a3:a0:19:
                    66:26:75:7e:b5:0b:f7:ad:2b:50:64:35:1d:57:00:
                    a3:de:46:34:e7:f0:e1:3f:07:02:4f:4a:d3:ec:02:
                    6b:ba:a2:c8:f7:35:40:20:7a:4e:3e:08:a7:ee:0a:
                    08:d8:b1:d9:6f:7d:23:0c:fb:21:4e:8a:d2:14:93:
                    42:e0:be:0f:44:c9:28:07:a8:47:e7:a7:9b:7f:8e:
                    1d:c4:7e:a0:8f:cd:fd:42:ec:4b:97:7f:4a:4d:32:
                    89:7e:9b:78:14:d5:fb:64:55:7d:c2:62:95:5a:03:
                    89:53:6f:42:be:39:86:b3:7d:af:85:0a:71:93:76:
                    1e:18:40:a9:8e:0c:39:e5:e1:1d:9e:d0:48:5c:58:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:DC:06:07:03:52:16:2E:E0:32:EF:9D:BF:40:F4:76:27:F1:F9
            X509v3 Authority Key Identifier:
                keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:51:5d:18:e8:6b:57:5c:89:3a:d4:55:a7:45:ce:f0:2b:33:
         f0:73:b5:90:4f:d7:d2:aa:ff:b7:16:56:e6:e1:56:82:ac:5c:
         43:22:8f:2e:8c:4a:90:39:2d:e1:04:76:bd:2e:ac:29:29:2d:
         02:79:df:66:45:cd:14:7a:bb:1b:8b:dc:e7:10:20:48:ae:eb:
         48:71:25:1c:08:e4:47:55:24:00:06:58:94:50:71:79:ba:40:
         fd:dc:82:49:da:46:8d:d6:f0:a9:77:e0:c9:36:f5:70:72:01:
         98:74:0a:61:4d:80:5c:d1:70:b6:67:2c:b7:b7:db:ef:3e:89:
         e7:34:71:3c:b5:97:24:e3:fd:70:9a:04:82:3e:6f:44:26:01:
         00:bc:1d:3c:b7:d2:05:f2:77:d7:ad:fe:36:3b:1b:39:24:f8:
         17:d2:1b:5c:12:06:ea:f3:08:c4:d1:da:3f:26:d2:12:7e:79:
         7f:c6:18:81:cc:a5:9c:fd:b9:9f:6f:80:6a:85:fa:5d:94:28:
         9a:a6:36:38:3a:09:1e:e9:35:28:3f:e9:44:79:48:b3:57:13:
         d9:bb:6c:9f:1d:83:a1:15:f4:b9:b7:2b:00:0b:0e:be:5b:ba:
         1c:cb:32:8b:3e:d4:c2:70:44:09:05:37:f8:58:30:59:f4:f1:
         14:a2:d4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:26:46 2025 by rpki-client