Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          KXKweFbD4Y/K4Rfcx+enWiLMjrTy+/zcIm4zDevd97k=
Subject key identifier:   E2:8F:24:2C:B9:1F:1C:C7:E6:F2:7A:C3:B0:F2:46:41:F9:0D:64:E4
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       019960218AD91517250BE65267BB2B9916C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          1060
Signing time:             Fri 19 Sep 2025 04:00:34 +0000
Manifest this update:     Fri 19 Sep 2025 04:00:34 +0000
Manifest next update:     Sat 20 Sep 2025 04:00:34 +0000
Files and hashes:         1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: bl/dKImNDUBPAItUDYur4xEII8+mnV626NDbWPX/NeQ=)
                          3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
                          4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 04:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:60:21:8a:d9:15:17:25:0b:e6:52:67:bb:2b:99:16:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Sep 19 04:00:34 2025 GMT
            Not After : Sep 20 04:00:34 2025 GMT
        Subject: CN=e28f242cb91f1cc7e6f27ac3b0f24641f90d64e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:34:1e:55:0c:64:c0:e5:dd:a4:fd:6f:c0:
                    ed:ca:72:63:51:62:e4:20:56:09:e2:db:bf:0e:48:
                    f5:da:66:c5:8c:76:23:0e:4f:e3:60:b2:da:68:14:
                    7f:4d:8d:f6:86:37:a0:ab:ff:51:e3:d8:99:8a:1f:
                    16:08:52:6c:b1:d0:71:45:22:a1:b1:ae:dd:5f:32:
                    6f:e4:30:ca:ec:15:c9:b8:aa:37:5b:5b:d0:2f:6c:
                    cd:c5:17:8e:db:a2:ab:ab:ac:a6:2c:a6:ed:32:4f:
                    40:cc:a5:ff:9a:ac:9a:56:79:c0:b5:12:21:37:6d:
                    78:0a:11:e4:22:4d:47:f5:73:ec:e9:c7:d9:68:89:
                    40:5b:8d:be:55:18:68:43:00:72:b6:a9:fd:09:25:
                    b1:aa:90:4e:dd:5e:c8:b6:26:22:30:44:5a:df:e9:
                    2b:5b:47:51:7a:bf:fe:5a:9d:63:51:45:8b:ef:f9:
                    ee:a5:23:76:9f:64:fb:54:3a:4a:3a:b8:29:e8:01:
                    c4:fc:9b:95:36:c6:ce:33:6e:76:b1:75:9f:da:df:
                    c0:49:55:3d:8d:d3:73:8a:0c:ae:38:dd:83:ac:f0:
                    ca:a5:d9:49:d7:4d:fe:5a:c6:6f:80:c3:dd:1a:9d:
                    4e:74:4f:8a:a1:6a:25:ec:b2:e7:8f:c0:e1:87:f8:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8F:24:2C:B9:1F:1C:C7:E6:F2:7A:C3:B0:F2:46:41:F9:0D:64:E4
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:b4:89:62:60:98:34:43:6d:1f:38:cc:6a:78:7f:13:95:
         2d:cc:e2:37:71:bb:2f:e5:d9:aa:76:4c:0c:29:50:ff:07:77:
         cf:83:e9:e5:80:a2:fb:8a:2a:a9:d7:69:28:ff:3b:56:af:ba:
         23:8d:c6:59:ac:a8:ef:df:26:d1:d9:34:9b:0b:4f:21:75:08:
         19:dc:5b:13:9a:7c:7f:25:9b:3d:11:68:04:0e:c3:27:49:f6:
         77:29:a6:4d:07:f1:93:72:c5:92:aa:84:81:1d:53:19:28:03:
         c3:77:6c:ab:66:e8:bf:ee:06:51:0d:da:f8:78:93:fc:e7:5d:
         67:cb:a6:38:eb:ed:86:70:ff:55:29:c3:05:44:c2:d6:9e:9a:
         ea:12:f7:21:95:9e:bb:7d:81:6f:1d:6a:3e:2b:75:9f:6f:c9:
         f0:aa:d5:5d:ca:fe:f4:5c:9f:f3:b4:32:1c:12:7b:07:e4:eb:
         65:f5:80:e3:a5:b3:54:11:af:5d:c4:57:1b:67:c5:8f:05:ee:
         23:6d:f7:27:e2:49:63:1d:d8:37:74:f2:ea:12:23:28:2e:90:
         3b:83:1c:fb:44:23:71:08:20:27:b9:f3:7e:8b:a0:ca:9e:93:
         48:90:0f:0e:fb:bc:7b:73:a7:1a:25:cc:2f:59:e3:81:d6:2a:
         89:8b:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:03:31 2025 by rpki-client