Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          CPXyR2lzpGFRDWc1qRUzsLFbL+pypaproUD9neMMfaM=
Subject key identifier:   9A:68:03:0B:8B:AD:7D:84:36:E1:BE:BD:07:05:67:D4:DB:B4:79:75
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       0199C3E8FC43D9A2B23E1829B382FBFE9152
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          0995
Signing time:             Wed 08 Oct 2025 13:00:49 +0000
Manifest this update:     Wed 08 Oct 2025 13:00:49 +0000
Manifest next update:     Thu 09 Oct 2025 13:00:49 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: QV5O75VeikzVjbeJfLe/2bx/WNyFbj9hefFQT4xH6fQ=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c3:e8:fc:43:d9:a2:b2:3e:18:29:b3:82:fb:fe:91:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Oct  8 13:00:49 2025 GMT
            Not After : Oct  9 13:00:49 2025 GMT
        Subject: CN=9a68030b8bad7d8436e1bebd070567d4dbb47975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:89:62:c1:e5:23:40:9a:98:e5:24:7d:7d:
                    e2:11:9d:96:2f:42:7b:09:45:c8:22:5d:2f:b0:35:
                    64:6b:88:c6:5e:b3:8f:b1:1a:d4:71:c6:67:85:52:
                    3e:85:f5:55:66:ae:ca:d6:68:dc:07:2f:df:8c:ae:
                    bd:56:9b:e3:fb:4a:61:5e:64:f9:be:bb:8a:22:10:
                    90:bd:da:57:22:ac:21:12:21:56:d4:ce:46:f5:39:
                    82:76:e6:7a:44:22:d9:61:55:a9:41:4a:d5:be:4a:
                    3f:32:68:8c:24:0b:b2:49:59:62:0f:9d:26:10:50:
                    6d:84:89:d4:29:b5:43:c4:bf:f9:94:1c:e2:5d:60:
                    5c:45:54:67:6a:11:19:1e:a4:f7:ae:0e:cd:5f:91:
                    74:13:ae:31:ed:2f:f7:90:85:70:8e:4a:0d:d0:0d:
                    f0:a9:fd:56:da:9f:15:db:89:1d:89:0e:49:41:64:
                    7f:1e:18:59:32:8f:3b:3c:ec:18:a8:32:04:3b:83:
                    2b:8a:72:82:ad:4a:49:0b:62:92:34:48:d5:01:55:
                    47:35:76:35:f7:91:84:5a:f0:9e:d7:c1:24:6a:d4:
                    d7:e0:68:53:e8:83:f4:62:23:47:b8:bb:cd:44:67:
                    5b:f4:6c:66:1f:85:9d:f9:b7:a4:bd:2b:f2:69:66:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:68:03:0B:8B:AD:7D:84:36:E1:BE:BD:07:05:67:D4:DB:B4:79:75
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7c:9d:81:4e:5a:37:3e:c6:3f:d8:c6:9b:ec:62:43:11:ff:
         ee:6d:ca:b6:c5:73:3f:4f:0c:a0:31:59:3e:cd:84:b4:24:70:
         77:83:5e:e3:6d:67:50:bd:4a:f6:cc:d9:cd:4f:a7:64:22:4a:
         30:31:15:67:9d:a4:63:da:a8:73:fa:c8:e8:a4:8a:01:80:44:
         c2:69:7d:30:ba:4d:28:9d:9c:80:5a:ff:ca:bf:b5:ae:0a:fb:
         7f:b2:d1:77:a1:3b:12:a2:c6:bf:9c:77:fd:74:fd:f9:76:be:
         21:d1:81:ed:26:da:50:fc:29:88:25:19:c3:69:f5:61:0c:10:
         c9:ef:e5:e0:be:f4:30:ca:6a:ce:96:01:7b:1b:7b:6d:ec:80:
         0c:26:0b:48:5a:b2:89:de:80:ce:70:b5:80:fc:4d:7b:18:73:
         6e:7a:93:cc:03:c4:2c:09:cb:d1:de:37:f0:00:28:fe:08:35:
         c7:87:d0:c0:07:d6:aa:44:06:61:31:fa:a5:4d:49:a7:62:36:
         9a:f9:e7:2d:0f:7c:7b:ec:2a:e7:d2:a3:d5:7e:6d:5c:80:1b:
         da:d0:1a:4a:ee:26:06:67:0d:c6:fe:c4:3d:18:60:c6:a9:7c:
         26:86:91:02:1d:5d:27:bc:cd:ad:a2:4c:52:b1:d8:1b:23:63:
         67:79:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:22:47 2025 by rpki-client