Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File:                     mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier:          09h8OE3HuTB/TH+S6HUw8AfHdjbZ6y2YZUGnb89DLNg=
Subject key identifier:   66:03:B7:5F:0A:16:58:52:B2:AA:32:7A:3D:E4:D6:DF:FD:7F:8E:8C
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer:       /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial:       019A1C50C53A3B54368F5661521E69B9BEE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number:          06C2
Signing time:             Sat 25 Oct 2025 17:00:46 +0000
Manifest this update:     Sat 25 Oct 2025 17:00:46 +0000
Manifest next update:     Sun 26 Oct 2025 17:00:46 +0000
Files and hashes:         1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
                          2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: Nd+zZVuyyKhWypUGrBwR6ncAclgoYrryHpre9FRRPkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1c:50:c5:3a:3b:54:36:8f:56:61:52:1e:69:b9:be:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
        Validity
            Not Before: Oct 25 17:00:46 2025 GMT
            Not After : Oct 26 17:00:46 2025 GMT
        Subject: CN=6603b75f0a165852b2aa327a3de4d6dffd7f8e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:d1:12:e7:41:f5:86:be:c2:8a:96:fb:67:
                    e5:19:a7:47:bf:bd:f4:ef:28:a3:47:1c:68:96:fb:
                    8d:b2:95:29:9f:97:8a:80:f0:90:ef:40:68:7a:4a:
                    0f:2a:2e:50:19:16:49:8b:2c:ac:35:07:63:1d:94:
                    1e:c9:ab:b8:51:a3:4f:8f:1a:73:61:fe:ae:7d:57:
                    14:bc:25:6f:94:38:4f:35:59:da:b8:65:89:36:af:
                    d4:be:1f:ee:69:34:40:0c:23:c8:d5:ba:f6:af:6f:
                    b8:75:da:66:e7:0a:bc:1e:66:df:bf:58:f3:24:79:
                    68:33:69:2f:2c:3e:63:d1:77:bd:5a:6b:68:c1:1e:
                    42:e3:82:9b:51:65:6a:fc:aa:fe:21:f2:22:d3:09:
                    d3:9f:85:db:10:d5:ad:e6:db:ee:a7:83:a1:e5:f3:
                    47:1c:89:a3:6e:27:fa:3b:df:f7:4f:83:ca:0c:0b:
                    08:fc:98:1c:0f:b4:6d:34:08:c9:1a:1b:6c:e2:6f:
                    b2:d2:b3:78:fa:58:b7:b4:ca:02:f8:89:49:d8:87:
                    8a:5e:ad:c2:f9:9f:e3:74:d6:fc:c2:de:4e:af:7d:
                    40:76:24:63:17:8e:d5:3f:47:0c:cc:9a:96:60:f3:
                    a6:e8:98:0e:7a:ca:ac:34:2f:b7:e8:7e:a2:8d:83:
                    8e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:B7:5F:0A:16:58:52:B2:AA:32:7A:3D:E4:D6:DF:FD:7F:8E:8C
            X509v3 Authority Key Identifier:
                keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:05:98:7b:15:41:d6:b4:5d:2d:af:c2:99:6f:88:b8:58:a6:
         b3:21:e8:e2:ea:92:a6:a5:d5:c7:96:fa:d2:2a:ce:12:c9:93:
         2f:ab:df:66:76:6b:f8:45:e2:57:ca:a5:5d:be:81:d3:cd:6f:
         bd:81:27:c5:45:de:98:73:77:11:3e:cb:9a:e6:3e:1b:ba:47:
         b3:da:b7:5d:c2:94:b0:13:d9:98:0e:d5:b2:c6:79:2c:4d:62:
         92:0c:67:37:8c:4b:5c:09:8b:af:af:67:6a:be:5f:6c:68:7e:
         c3:16:eb:0c:ad:a0:a1:0f:a3:c3:b8:8a:70:7a:ad:ad:18:5f:
         2c:d7:56:fe:6d:b1:f1:83:f8:4a:76:e5:21:09:6c:2d:1c:f4:
         ca:89:17:2e:c6:87:dc:78:5f:ff:c8:ee:21:b5:0f:fc:e8:32:
         4f:19:23:bc:05:a5:a4:c3:3b:19:be:e7:2b:09:16:11:36:86:
         7e:f8:e7:98:b1:34:65:84:2e:60:06:16:48:57:82:fa:11:c3:
         09:72:7f:27:d6:29:05:b1:10:bb:d6:47:cd:f7:fc:45:4d:a3:
         d6:69:66:82:22:86:a1:b7:7e:cf:fb:4a:9b:7b:13:98:c5:d5:
         5f:dc:8b:49:15:53:0b:4b:73:72:9e:07:9e:33:3f:a1:98:d2:
         3c:ac:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:45:41 2025 by rpki-client