Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
File:                     _EMwm9pG6O0l7AweipMAbyJpHjw.mft (raw, json)
Hash identifier:          I4rb+PsLcz1h5G/IOx70fONf1Kji3JLnon4xQawNtpw=
Subject key identifier:   95:8A:31:51:C3:3F:DA:FF:AE:CE:79:0F:D2:22:2F:E9:8D:EB:1C:53
Authority key identifier: FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C
Certificate issuer:       /CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
Certificate serial:       0198D583662F450A8C5C3B1B3BBAF03921BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
Manifest number:          0B2E
Signing time:             Sat 23 Aug 2025 06:00:15 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:15 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:15 +0000
Files and hashes:         1: P4VoQSF7lCnsq5vr3E2b_J-Itmg.roa (hash: 75J3FI/MjvsUpmT1+e7f6kq+Idon95nr5b/vGurSSfM=)
                          2: _EMwm9pG6O0l7AweipMAbyJpHjw.crl (hash: LAeXrXCo5NfptCD+K7Roz7IOPIH8Mpfzr9ycf9K7sf0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:66:2f:45:0a:8c:5c:3b:1b:3b:ba:f0:39:21:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc43309bda46e8ed25ec0c1e8a93006f22691e3c
        Validity
            Not Before: Aug 23 06:00:15 2025 GMT
            Not After : Aug 24 06:00:15 2025 GMT
        Subject: CN=958a3151c33fdaffaece790fd2222fe98deb1c53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:92:d9:a3:b9:db:7b:3f:eb:7e:f0:f9:7e:
                    78:cb:37:b0:7a:fc:3f:b4:23:d1:23:e2:85:75:52:
                    82:28:15:5e:f2:2b:06:f7:10:30:a0:7b:9a:76:3a:
                    da:6b:87:93:24:ed:87:53:dd:7a:40:4e:23:22:af:
                    9d:6c:72:e5:d8:7d:f2:d4:97:7c:8c:b3:20:13:4d:
                    28:a9:7c:4f:75:96:e1:1b:83:f6:4b:b4:6e:e6:9e:
                    af:a5:f1:5a:bd:58:3e:9f:13:f6:c2:1c:7a:ac:d3:
                    45:5f:97:93:c4:00:ec:35:a6:e5:43:ba:e7:c5:45:
                    a9:72:d1:13:35:d1:c7:0a:48:3d:fc:5f:40:f8:ad:
                    34:3c:c4:d9:ed:f2:bd:09:2c:44:40:d5:3a:29:2d:
                    3b:bb:1b:28:e4:b4:8f:75:ea:21:a1:02:2f:05:5f:
                    bd:04:2c:df:72:ce:f5:2e:bb:78:6e:ba:62:09:24:
                    be:5f:45:5d:8d:2a:f6:73:5a:72:59:ee:20:05:c0:
                    e8:dc:e1:e4:12:da:d0:fd:0d:bb:86:c3:84:4c:ed:
                    ac:16:02:3e:17:7b:ab:8c:29:c9:0b:7a:56:77:62:
                    3d:3e:32:4c:a8:2d:5a:50:6b:c5:ce:1f:2a:b7:ea:
                    0f:78:30:55:6e:a5:0e:fb:16:20:cf:2b:ef:95:12:
                    9a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:31:51:C3:3F:DA:FF:AE:CE:79:0F:D2:22:2F:E9:8D:EB:1C:53
            X509v3 Authority Key Identifier:
                keyid:FC:43:30:9B:DA:46:E8:ED:25:EC:0C:1E:8A:93:00:6F:22:69:1E:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EMwm9pG6O0l7AweipMAbyJpHjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/008217-6034-4f8f-8e28-602473de6e3d/1/_EMwm9pG6O0l7AweipMAbyJpHjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f4:7b:f2:6e:e5:9f:99:15:92:2c:bf:88:34:0f:f6:14:55:
         3c:47:ba:20:1e:c7:8e:6e:59:81:5a:03:d3:cc:68:c5:8a:f2:
         7f:77:3e:57:07:db:9f:f2:d4:c0:a2:7b:b4:9e:a6:19:cd:b8:
         d9:14:6b:4e:7d:3c:d0:99:60:cd:4b:9f:e9:35:99:d4:26:33:
         ec:03:4e:a3:d3:3f:14:77:46:61:cd:c0:2a:02:c3:58:87:34:
         2c:cd:fa:99:29:b8:2a:c5:d6:ff:96:4d:7c:67:5f:ed:ae:24:
         c6:bb:d6:d0:12:85:b6:f3:3f:23:56:09:dd:77:5b:84:5d:67:
         0d:57:52:e9:95:c4:c8:60:65:30:f0:f0:7a:79:83:09:f6:62:
         6a:ad:93:19:e4:b8:a5:76:ea:d8:a7:dc:04:5b:99:f0:19:37:
         0c:82:b4:5e:be:76:3e:d1:79:fe:58:46:74:99:93:bc:38:5e:
         33:ef:37:67:d0:92:21:7c:7d:ce:4f:7d:0b:98:de:50:df:37:
         b7:f9:7d:c3:0b:f2:12:da:13:0f:45:de:50:d0:24:d3:d6:05:
         e3:f4:2b:fe:34:e1:58:43:79:95:5f:22:4c:76:c0:1c:ce:6b:
         7e:d3:6d:14:d5:05:2d:d1:23:c9:16:b9:5a:c0:77:99:92:3d:
         c2:ba:4e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:04 2025 by rpki-client