Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
File:                     9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json)
Hash identifier:          xQIs59sa3nyR3qojYZsqLKt7DTm2eC63QPe5cBz5Aaw=
Subject key identifier:   03:F4:33:1F:61:43:AA:3E:70:B5:53:33:9D:D1:A8:9D:DB:9D:B0:74
Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E
Certificate issuer:       /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
Certificate serial:       0198D70626E47993D113E563454CCB482314
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
Manifest number:          1649
Signing time:             Sat 23 Aug 2025 13:02:41 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:41 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:41 +0000
Files and hashes:         1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: jXf4ucSg0W3il4xBM6uj25fSFmphFqhvVeD/Xv5iabA=)
                          2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:26:e4:79:93:d1:13:e5:63:45:4c:cb:48:23:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e
        Validity
            Not Before: Aug 23 13:02:41 2025 GMT
            Not After : Aug 24 13:02:41 2025 GMT
        Subject: CN=03f4331f6143aa3e70b553339dd1a89ddb9db074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:18:bd:8a:bb:ac:f2:b2:e3:e4:67:ec:ba:
                    82:3f:00:46:09:bd:22:32:54:57:4d:57:bd:c0:66:
                    4e:a6:7b:f9:bd:f5:3e:d3:ac:39:34:4f:b3:b0:b3:
                    2c:0c:cd:37:3b:d2:c0:2b:d2:83:37:34:30:55:53:
                    0e:5a:2d:ca:74:35:a5:1c:d0:5c:57:8b:26:20:5f:
                    e0:cb:1b:45:51:c7:b7:71:22:c0:d8:6f:0d:d9:b3:
                    e4:1a:6b:47:b4:a2:7c:ff:4e:53:8e:9e:5d:5f:4a:
                    bf:50:5a:3b:a4:ce:58:7f:23:0c:ff:fb:4c:41:01:
                    9d:da:62:9d:86:95:49:16:7c:64:63:bb:d2:6b:0b:
                    cb:c5:9d:0c:b9:04:86:00:4b:00:2c:1b:9b:bc:34:
                    5c:5a:2f:01:fb:a5:36:7c:33:c5:ad:1f:d7:36:0e:
                    9d:ac:78:ee:c8:56:fb:f0:64:80:62:1e:41:88:b6:
                    23:fa:7d:ff:9b:91:ad:d3:00:57:80:e2:ed:02:c0:
                    ba:e0:38:91:5c:f7:bd:2c:8d:21:ee:43:6a:a3:82:
                    d5:d0:f9:eb:b3:78:75:6b:22:03:ca:25:fa:58:eb:
                    ba:30:94:df:9b:1b:ba:d5:aa:12:ea:ef:c9:25:e8:
                    e6:56:ef:eb:28:bf:8c:6c:42:40:af:37:d5:77:62:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:33:1F:61:43:AA:3E:70:B5:53:33:9D:D1:A8:9D:DB:9D:B0:74
            X509v3 Authority Key Identifier:
                keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:df:cd:8b:fc:a3:ff:89:df:5a:e0:63:20:90:04:63:b5:85:
         19:8a:e9:8e:e6:50:25:b8:ce:76:08:ca:26:a7:9b:ae:d8:ee:
         98:79:e0:5a:38:f9:c5:1a:6b:61:b0:f8:52:01:e5:aa:d3:ea:
         eb:7d:dc:12:a1:04:e3:2c:8d:11:7f:ed:94:02:06:3e:cf:dc:
         4a:fc:42:dd:f2:5b:f2:bb:12:68:52:22:b3:95:7d:e2:fe:fb:
         83:2c:9c:81:b7:d1:23:fc:17:ca:5d:4e:44:fd:8d:7c:ec:53:
         b6:ff:5d:94:fb:2f:08:4c:52:58:42:fc:e0:7a:b4:5c:1b:cb:
         da:c7:6c:68:ae:92:b0:bf:15:2f:38:fd:4c:8e:d0:94:3d:af:
         13:40:e6:51:cb:a6:9c:26:a0:21:20:b5:fd:7f:e2:82:83:ae:
         27:b2:4c:63:d6:35:50:ad:01:d4:eb:f5:a3:65:27:87:7d:cc:
         b7:28:8d:b9:1a:32:07:f2:c1:2d:81:8a:c1:d0:b5:65:af:f2:
         8b:c7:77:fa:58:1e:81:81:16:da:33:f5:28:16:68:f0:74:38:
         2c:2d:33:b8:9d:47:cf:21:d2:07:20:49:4a:b8:68:74:63:bc:
         f7:29:7f:e8:98:6a:1b:70:a4:b0:ef:08:11:d1:af:a5:8b:47:
         79:0c:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:14 2025 by rpki-client