Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
File:                     pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft (raw, json)
Hash identifier:          24s6YV4NqNLEzqUr+3fsHMo3CRlLgDkpnSKRZtwxzus=
Subject key identifier:   0C:21:35:49:61:20:F5:4A:A7:B2:7C:4F:4A:B8:A4:25:2B:31:AE:2E
Authority key identifier: A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24
Certificate issuer:       /CN=a4b707300e869467be5e5273222d90e0b618f924
Certificate serial:       0199D2495B1FED56A7312298FF716AD6013F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
Manifest number:          C1
Signing time:             Sat 11 Oct 2025 08:00:46 +0000
Manifest this update:     Sat 11 Oct 2025 08:00:46 +0000
Manifest next update:     Sun 12 Oct 2025 08:00:46 +0000
Files and hashes:         1: AxTL5BScJRGplpNW74DWcKj7QGE.roa (hash: Tyrri95TWx80Zrp2m4wcSxu+fjugZnCuLxz4W2k0N7E=)
                          2: FzYunAfXIbAtMm8QIW2Ik_u5Pxo.roa (hash: Xg8cJgDDQk7BXhyX/Ij+B4fnpVtV86uWM+NQF821ZPs=)
                          3: MR_f-x3g7wcjluP2eCx_et2XgAo.roa (hash: bnbauqYg41qtiywoh5HUkv8me54R7s04AvQU8Lpnw6o=)
                          4: P5sDSR0HZnHki4I0AlMWpThVrhE.roa (hash: e88MDF3UQ11sNY2bgPKcHFav86x/WiIPqzESbe9NCCs=)
                          5: pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl (hash: /jCFHRdXV2wChl987gGO6b9ppE8GyfB7pkJwMNM564s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Oct 2025 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:d2:49:5b:1f:ed:56:a7:31:22:98:ff:71:6a:d6:01:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b707300e869467be5e5273222d90e0b618f924
        Validity
            Not Before: Oct 11 08:00:46 2025 GMT
            Not After : Oct 12 08:00:46 2025 GMT
        Subject: CN=0c2135496120f54aa7b27c4f4ab8a4252b31ae2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:ca:80:2a:20:f3:88:6b:a4:9d:c3:9c:a5:
                    6f:18:7a:b0:97:cb:70:a8:38:a2:15:a8:ba:4e:d0:
                    78:1e:7e:28:25:83:ce:94:eb:2b:9b:d2:f9:9c:38:
                    e6:b4:fb:9e:5b:7f:56:50:6d:7b:93:5e:5a:c6:70:
                    74:e2:83:7e:67:c2:f6:47:52:de:07:b2:c6:59:f5:
                    f1:e6:bb:d9:09:16:0b:38:19:f5:de:66:2b:a5:6a:
                    75:dd:95:09:3e:be:f6:6a:fd:ad:e6:3d:90:99:5a:
                    d9:f4:00:81:e5:42:80:90:64:4b:de:da:0b:42:d9:
                    b1:39:d5:89:5a:46:33:b9:12:d5:80:d0:d9:68:a1:
                    ff:59:17:6b:d6:c4:7a:31:7b:73:68:b6:d0:e5:43:
                    4a:0f:f2:05:56:6f:a6:dc:d7:30:af:62:53:90:e6:
                    b0:30:b8:4c:e2:0a:f8:24:12:86:91:22:80:14:60:
                    50:ef:41:0b:7a:50:f6:75:6f:da:a9:1d:eb:7a:4f:
                    9c:6a:86:91:06:74:09:74:6a:f7:d2:e3:67:57:02:
                    53:ee:90:8b:3d:5e:d3:62:6a:40:44:42:fc:d3:b4:
                    05:7f:08:c4:8b:de:e9:0e:74:5e:70:1c:a5:eb:64:
                    75:95:d7:6b:d8:0f:54:f9:b1:a6:80:7e:37:a9:45:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:21:35:49:61:20:F5:4A:A7:B2:7C:4F:4A:B8:A4:25:2B:31:AE:2E
            X509v3 Authority Key Identifier:
                keyid:A4:B7:07:30:0E:86:94:67:BE:5E:52:73:22:2D:90:E0:B6:18:F9:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc8519-62e4-4289-9917-3e55c49f2d4e/1/pLcHMA6GlGe-XlJzIi2Q4LYY-SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:46:fb:98:00:45:0b:02:94:38:f1:db:5f:9a:d4:d2:34:0e:
         28:a1:d6:e3:38:ec:01:d6:c4:10:bd:e4:e7:4f:3e:6b:29:a0:
         92:d9:89:4f:84:88:7a:d3:aa:55:77:63:88:d9:7d:13:91:fd:
         93:82:d7:14:a5:a3:53:b0:8d:03:b6:64:cb:4b:57:19:36:55:
         13:dc:8d:25:2e:82:84:a7:14:45:8f:5d:c8:ff:2e:22:b4:89:
         78:80:69:e0:23:8f:7e:16:f1:ef:9f:5a:aa:de:f1:ff:01:35:
         3a:b0:0d:61:4a:ca:e3:29:43:93:cf:a0:5f:3f:7f:5d:cd:ab:
         80:bf:f4:95:49:c5:5c:04:a6:8e:aa:53:11:92:78:35:dc:77:
         55:33:6b:ad:86:95:61:86:45:6c:c2:ea:ed:71:70:34:d9:e1:
         79:d0:4b:2b:9d:0e:a7:e2:08:25:ab:7f:92:47:ce:3c:a2:e5:
         03:f0:0e:47:7f:34:c6:c6:13:3c:9e:bc:85:2e:04:9c:f8:5c:
         46:62:c2:88:5b:29:eb:1b:aa:50:24:99:ba:fd:74:71:37:b4:
         95:4b:eb:c2:45:91:14:23:27:aa:4e:8d:c7:c4:83:89:7f:eb:
         c3:0f:47:2e:47:a9:2a:b5:ef:32:8e:31:58:7d:75:80:44:10:
         4d:2b:0a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:00:30 2025 by rpki-client