Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
File:                     9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json)
Hash identifier:          sxENJN+RiwYSx5/kVXr65uJum/yRsjkaJaw8PeZS1JE=
Subject key identifier:   15:37:78:B0:FD:A1:48:BB:EE:F7:C2:B2:97:4E:93:B8:50:D7:12:FB
Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93
Certificate issuer:       /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
Certificate serial:       0198D6610163D8B9805DAB1DB235DE698945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
Manifest number:          0A94
Signing time:             Sat 23 Aug 2025 10:02:18 +0000
Manifest this update:     Sat 23 Aug 2025 10:02:18 +0000
Manifest next update:     Sun 24 Aug 2025 10:02:18 +0000
Files and hashes:         1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: 7s4EA74Gdpogb8jtObOSF+oUWBAMnsB5Yk6DmmCZNeA=)
                          2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:61:01:63:d8:b9:80:5d:ab:1d:b2:35:de:69:89:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593
        Validity
            Not Before: Aug 23 10:02:18 2025 GMT
            Not After : Aug 24 10:02:18 2025 GMT
        Subject: CN=153778b0fda148bbeef7c2b2974e93b850d712fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:c7:ef:3f:42:0d:cb:01:8f:d8:00:b3:8e:
                    40:12:d2:1a:ce:c2:0e:78:b8:61:1b:0b:69:6b:2f:
                    9a:0c:86:e2:67:71:17:f2:44:94:f8:85:35:00:14:
                    ff:bc:0a:fe:34:cb:0a:39:cc:2e:d3:fb:19:e3:40:
                    02:8d:d5:76:bd:d3:23:0b:42:42:00:14:34:db:80:
                    0f:2a:fa:c0:f4:42:8c:6e:f6:81:bf:b6:1e:71:34:
                    d3:7b:da:18:47:6d:56:e4:a3:e4:b5:53:0a:61:45:
                    2c:f5:8b:f8:4d:6d:92:c7:63:8d:5b:c3:f7:c2:cc:
                    2a:34:f7:4b:af:bc:b0:de:90:df:fe:ae:56:f8:21:
                    39:a5:7c:0d:3f:6a:cf:29:b0:2d:05:39:d0:49:aa:
                    26:80:fe:8c:6a:df:11:c1:b9:88:12:b9:80:cd:79:
                    2a:39:50:27:af:a2:6e:4f:eb:82:4c:96:9a:41:9b:
                    a5:8a:bf:3a:0a:14:2d:89:67:cf:5b:a5:21:95:03:
                    9c:c1:4f:12:a5:c1:98:da:15:a6:26:e6:4f:58:4c:
                    d8:ac:c9:d2:db:53:7d:83:1d:5f:8e:d6:fe:49:0a:
                    0d:4e:54:4c:0b:fb:cd:a8:6c:43:e9:e9:c0:dd:2c:
                    b7:d1:38:44:ac:9d:79:57:02:c2:0d:9c:3e:b6:35:
                    8c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:37:78:B0:FD:A1:48:BB:EE:F7:C2:B2:97:4E:93:B8:50:D7:12:FB
            X509v3 Authority Key Identifier:
                keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ce:ee:73:ca:44:1b:65:7b:e7:15:f4:86:87:2b:13:06:ba:
         e7:59:ae:fe:f4:07:63:be:06:4d:8e:18:44:e8:14:9b:4d:cb:
         18:34:32:13:9e:82:8c:4f:73:84:ff:5e:a7:79:98:04:67:61:
         b8:cd:90:2d:6f:92:01:80:54:79:df:00:55:46:00:42:6e:25:
         33:f5:4c:4e:3f:9b:4f:6e:81:22:d4:2b:9e:60:48:f6:f2:ae:
         f2:84:a7:ca:d0:38:ac:e5:ac:fb:30:ba:76:fc:45:71:44:e0:
         fe:46:36:9a:6c:17:c2:55:a9:40:36:84:ca:27:37:29:ba:e5:
         fc:ee:98:39:28:9b:26:dd:0d:40:9b:89:da:3d:0d:ce:1b:87:
         4f:8f:83:a8:e4:ee:7d:19:81:95:24:60:fd:e3:1b:3e:21:11:
         e2:e1:c8:81:6b:3f:53:66:c1:a9:25:2d:2e:7b:cc:62:44:13:
         80:3a:71:f3:15:48:df:ff:e5:d5:00:1c:71:3c:eb:bb:8a:94:
         c3:43:32:5f:3b:b5:81:31:3c:84:98:f2:84:1c:ba:db:e1:84:
         01:70:d6:95:14:28:c1:64:6a:97:fb:02:bd:cd:d1:1e:06:45:
         e5:46:c8:43:8b:4b:e3:7c:a4:e1:c1:f2:92:f7:da:b6:67:93:
         e0:9d:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:32 2025 by rpki-client