Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File:                     l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier:          uW73KmfZuJDUBfaaDQRoJJHV4l4yIk3UAneDG73L+SY=
Subject key identifier:   79:A4:F0:22:32:21:C6:11:3A:DA:10:68:A3:63:A9:13:6C:51:25:FD
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer:       /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial:       0198D4A7BD267B4B93868D6CF6F5AF2CFECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number:          0596
Signing time:             Sat 23 Aug 2025 02:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:19 +0000
Files and hashes:         1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
                          2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
                          3: KJY6oxBzeqqBP2M0l4QVxSRfFmw.roa (hash: 3b5ih66Hr4vgpUYnehu4lvciKefhnXprZqp6FfWOUig=)
                          4: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: VtyBM2E/ZfSA1QofvrN72VNpbqeETfxzKc16QE1MxFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:bd:26:7b:4b:93:86:8d:6c:f6:f5:af:2c:fe:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
        Validity
            Not Before: Aug 23 02:00:19 2025 GMT
            Not After : Aug 24 02:00:19 2025 GMT
        Subject: CN=79a4f0223221c6113ada1068a363a9136c5125fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7d:26:9c:db:b0:b0:9d:c9:de:68:56:7c:35:
                    0f:18:1a:e3:d4:ab:84:86:20:b1:47:1e:55:ad:d0:
                    40:c2:8f:e3:27:6b:ad:30:6c:27:7a:0a:7a:c3:1f:
                    f7:86:57:46:ff:fa:1f:2c:d5:50:e3:c2:47:93:fe:
                    9a:02:06:fa:32:bb:95:e4:39:d6:81:9f:4c:ee:b8:
                    20:08:00:31:2d:83:4a:75:91:ac:f8:f3:21:55:88:
                    35:7d:f9:33:35:d6:06:87:f2:a4:50:09:d5:48:06:
                    d9:43:14:54:24:26:fa:51:9d:d1:d5:7e:8a:2a:b4:
                    64:4b:90:e3:7f:66:3a:c4:c6:05:de:99:86:12:6f:
                    86:84:9b:d6:64:eb:34:88:b6:c1:98:1d:75:57:c5:
                    10:99:55:49:76:17:3d:fd:13:49:dc:f4:af:80:a0:
                    2d:2a:72:5d:c5:68:ec:d3:1a:84:87:4b:5c:2c:ed:
                    49:f8:c6:28:13:d7:2c:e3:f6:77:8a:8a:19:92:ab:
                    8a:36:0c:6d:5b:62:e6:11:cc:1d:b8:fa:bf:64:01:
                    89:44:68:da:43:f9:b8:2f:eb:ec:07:2c:74:7a:63:
                    f6:39:dd:db:95:f6:33:6d:91:76:cc:ca:7f:16:67:
                    09:e8:89:c9:b7:26:f7:17:50:9e:08:24:60:41:d6:
                    fd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:F0:22:32:21:C6:11:3A:DA:10:68:A3:63:A9:13:6C:51:25:FD
            X509v3 Authority Key Identifier:
                keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4d:90:19:4f:66:8f:1a:90:99:b6:22:e6:f7:80:85:30:6c:
         29:3f:a2:2d:87:fb:40:d5:b4:2a:7b:f1:77:65:ff:8f:59:fd:
         9f:d3:37:ad:0b:50:0b:a4:1b:9b:24:d7:04:9b:c2:b3:7a:bf:
         5b:99:ed:52:2f:41:c4:62:ef:69:3c:62:3c:e8:03:1b:28:09:
         b0:f7:0d:53:63:36:00:ee:7c:d3:d4:15:25:01:ac:ca:ff:b3:
         3c:ab:e9:57:3b:d6:32:e4:f1:d9:83:c5:54:31:6d:d6:73:db:
         3f:90:10:ce:72:3f:e9:53:21:a8:42:ab:51:3d:bd:d9:d4:af:
         fb:e7:e6:7e:59:bc:2d:f5:e8:7e:12:e6:e9:cb:82:25:ed:83:
         19:e5:c5:26:e7:2b:c3:a1:eb:b2:90:55:07:e1:2d:b5:7b:9f:
         db:fd:ed:35:91:2c:27:36:84:ed:c6:50:a5:b1:5d:16:8f:4a:
         08:c0:2b:85:c2:a8:ec:b5:01:22:3b:7c:48:53:e5:f3:55:ea:
         9f:76:9e:9f:a1:b4:e8:29:0f:96:85:87:72:09:61:03:f5:eb:
         49:d7:fb:7b:b1:9d:98:67:ec:03:9a:2c:3c:65:f3:b0:c3:de:
         2b:85:4f:a5:18:fd:03:6c:82:df:b0:46:2b:da:62:c4:99:41:
         20:51:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:41 2025 by rpki-client