Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          H9J9mIjoALKXf6xAePNgidJ9EnwA+c51xPV4N6z9DKY=
Subject key identifier:   7F:BB:E7:11:82:F0:81:44:35:04:F2:1A:A3:92:F5:52:AE:1C:43:B8
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       019A4DAAA7074EB97651A17688BA31A02E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          10DB
Signing time:             Tue 04 Nov 2025 07:00:20 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:20 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:20 +0000
Files and hashes:         1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: XgmPmT4Pyzjh2ipjwkb+XSWl/GSbJ2X7wh1Yi1UFmXY=)
                          3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
                          4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 00:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:a7:07:4e:b9:76:51:a1:76:88:ba:31:a0:2e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Nov  4 07:00:20 2025 GMT
            Not After : Nov  5 07:00:20 2025 GMT
        Subject: CN=7fbbe71182f081443504f21aa392f552ae1c43b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:b8:6d:d8:81:e4:7c:76:d6:a6:69:60:cd:
                    b3:e5:98:fb:62:7d:5f:a8:f4:fc:9e:fb:b7:fe:18:
                    94:9b:0a:ef:cb:ae:ba:7c:1f:5b:ed:85:d1:29:f7:
                    4d:59:68:38:bc:23:a2:43:ce:e5:49:7b:65:39:a0:
                    eb:1e:22:bf:ff:f8:9f:77:e6:31:7f:d6:ed:d8:83:
                    1e:5b:47:f1:40:32:db:c6:19:d5:81:3d:f6:1f:b2:
                    12:6f:14:6e:0c:f5:0c:af:00:ae:bd:a5:80:9d:91:
                    2d:7f:53:ce:18:72:29:fc:57:b1:85:78:4f:eb:cd:
                    02:e7:65:7e:f2:9f:6f:45:05:58:36:81:7f:5c:bd:
                    b1:d3:2a:91:d2:30:52:dd:e5:85:ce:1c:58:51:f8:
                    bb:39:09:b6:eb:b7:6a:26:2d:07:db:32:db:b7:ba:
                    c6:47:19:21:ab:44:e3:24:7e:cc:84:90:2a:56:9a:
                    67:54:23:84:ff:6d:54:39:2c:3d:2a:2d:7f:61:d4:
                    9a:b8:90:36:d2:8c:62:74:39:53:cf:b2:e3:fd:9e:
                    3e:29:d9:a7:31:95:e9:2d:d0:43:ee:2c:12:fb:40:
                    8f:1b:07:52:a1:90:7b:17:14:e0:df:ea:27:da:71:
                    11:ae:0c:ad:a8:02:4f:fd:dd:91:41:85:62:87:36:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:E7:11:82:F0:81:44:35:04:F2:1A:A3:92:F5:52:AE:1C:43:B8
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:64:89:a7:c0:1d:c0:49:2a:63:b3:73:3d:6c:12:ee:2b:
         0a:19:89:e2:ff:ff:86:27:b1:6d:a4:cc:cb:9c:a3:f7:1d:3c:
         f0:3e:6b:39:1e:d4:60:a1:54:4a:71:97:9d:20:16:8c:c1:20:
         3b:0e:13:d4:24:06:bc:15:4f:ef:a4:b9:e6:f5:06:6e:7d:c8:
         a9:9a:0a:0d:8c:ed:f8:9a:e7:f3:36:b6:21:43:02:c5:37:d9:
         02:da:7a:a4:51:68:f0:fd:3d:c6:68:b5:31:b7:36:f1:54:29:
         fb:36:5e:5f:d2:1d:72:64:82:3f:d7:a6:3f:ec:2a:95:07:dc:
         14:68:cb:14:f0:5b:c2:95:3d:ed:23:17:01:4c:12:03:39:11:
         d5:32:32:00:53:31:75:3b:a0:e0:6d:31:f6:33:f4:17:45:d5:
         b0:66:d1:58:f0:4d:bf:61:d7:24:b4:63:b8:32:03:74:f1:87:
         16:40:91:0e:13:0e:ee:44:ef:b8:de:d5:40:d5:a4:13:ab:e4:
         d7:db:64:3b:b5:a6:37:19:aa:b1:ed:35:29:5d:62:bf:e3:94:
         b8:f3:ed:da:22:0c:dc:5d:dc:85:eb:c8:56:91:46:60:c8:50:
         44:78:c5:5d:49:f7:47:83:8b:70:38:1f:7b:53:c1:77:c3:26:
         51:b3:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:25:24 2025 by rpki-client