Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
File:                     sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft (raw, json)
Hash identifier:          X8mrcxtaldSCAEw4yWnH/jy1lXdTc3LfHRxCIazTbZg=
Subject key identifier:   75:1B:74:E2:E4:8A:9D:F5:3C:B0:68:78:9B:F8:F2:E2:C0:84:FE:00
Authority key identifier: B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57
Certificate issuer:       /CN=b061bd3cca3d33645a276e0f3224ff89eee44857
Certificate serial:       0199D35C9ACDF9341F4EAB1C56ED3E3F632F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
Manifest number:          0A5E
Signing time:             Sat 11 Oct 2025 13:01:25 +0000
Manifest this update:     Sat 11 Oct 2025 13:01:25 +0000
Manifest next update:     Sun 12 Oct 2025 13:01:25 +0000
Files and hashes:         1: YijLZfZ1VVcQMfbO2kW4jsYTug8.roa (hash: f055fbJfO/jOl/pVZwNG+0XakEEdz2iyjouPpXHwKII=)
                          2: sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl (hash: 4iEOHmEAoMlAb6e1nUhK2efpxDsuQYT9tD9FIsvV99Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:d3:5c:9a:cd:f9:34:1f:4e:ab:1c:56:ed:3e:3f:63:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b061bd3cca3d33645a276e0f3224ff89eee44857
        Validity
            Not Before: Oct 11 13:01:25 2025 GMT
            Not After : Oct 12 13:01:25 2025 GMT
        Subject: CN=751b74e2e48a9df53cb068789bf8f2e2c084fe00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:6e:30:62:9c:88:a0:7e:f0:60:25:dd:2e:
                    a6:c3:37:53:6e:79:05:c0:37:77:c4:2f:b9:bd:ad:
                    bc:60:14:58:b7:d0:9f:bf:b0:40:5f:c9:b6:29:85:
                    15:f1:28:5f:8a:25:e7:93:41:52:c6:fd:02:ea:fa:
                    e6:1a:3c:04:a0:6a:92:ea:d1:95:f7:4e:1f:35:94:
                    49:77:01:b1:c0:19:02:c6:fc:90:87:9f:47:d7:bd:
                    f8:79:14:ea:eb:a6:d8:6c:2f:a1:eb:f8:a3:08:9f:
                    a2:26:de:7d:02:92:8a:79:0a:fe:c4:12:97:a7:e8:
                    e2:ab:34:30:04:44:31:4a:b7:2b:02:46:05:4d:ab:
                    b7:3e:2e:09:f8:f9:1a:63:c4:74:95:a6:7e:40:94:
                    b4:c6:8e:ea:ce:f1:d2:04:db:44:73:c9:c1:ac:9a:
                    83:68:09:90:4b:4a:52:87:e3:a8:6b:bc:24:54:36:
                    cc:a0:9b:fa:50:d6:41:1e:89:45:68:82:40:e5:a0:
                    dc:cd:21:bf:50:1e:d3:6b:38:61:07:a4:09:23:3d:
                    7e:8e:15:59:e7:a2:95:49:e9:5f:89:91:da:ec:3a:
                    ba:03:71:58:07:e7:2b:92:f7:17:3c:70:31:ee:95:
                    6d:36:9b:a8:76:ee:76:ce:87:3e:3f:a2:de:5b:05:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1B:74:E2:E4:8A:9D:F5:3C:B0:68:78:9B:F8:F2:E2:C0:84:FE:00
            X509v3 Authority Key Identifier:
                keyid:B0:61:BD:3C:CA:3D:33:64:5A:27:6E:0F:32:24:FF:89:EE:E4:48:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sGG9PMo9M2RaJ24PMiT_ie7kSFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/657533-11ec-484b-be6a-32fda31186ef/1/sGG9PMo9M2RaJ24PMiT_ie7kSFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:a6:64:a8:2c:7f:95:dc:f7:ac:f3:a5:8c:69:aa:18:96:
         a9:24:4f:ca:86:2e:ec:82:c2:30:2c:c4:e2:e3:9a:80:82:e1:
         c9:88:2e:83:d9:a9:8c:b8:fa:d5:da:31:cf:8c:e9:ab:87:25:
         76:97:dd:9f:07:96:aa:db:36:32:4e:97:30:e8:82:09:03:8e:
         5e:a5:6e:fe:04:dd:1c:b6:24:c1:8e:a2:6c:da:0d:14:0e:cf:
         a8:60:e4:a9:21:75:39:05:38:64:c5:3d:fc:14:3b:27:c3:dd:
         fc:3b:99:3c:ac:64:13:e8:0e:c1:6e:87:fe:fd:ce:d8:7c:34:
         02:58:b5:5a:d4:fa:73:dc:29:1d:92:e2:5a:5b:f8:6e:73:74:
         94:50:b8:93:76:93:36:0c:7d:1f:e4:15:ef:83:ed:41:54:d2:
         d7:e1:17:b0:ba:72:7a:0f:55:82:68:c4:99:0f:b6:01:f6:39:
         56:fa:77:51:a8:90:42:99:aa:01:87:28:53:cd:50:69:48:01:
         76:fb:21:b8:f4:7a:e3:b4:9d:89:8a:23:90:42:f2:e4:f0:9f:
         b2:fa:2c:05:6f:48:ce:d0:70:11:b4:57:d1:68:0e:32:58:70:
         c1:aa:b6:4e:88:25:29:11:db:96:03:2b:97:08:17:49:24:c1:
         ce:4a:79:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:29:03 2025 by rpki-client