Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
File:                     9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json)
Hash identifier:          w6khu6cEFqJuBTdoMG3t/pcgY2jhPpAY8QTA5iEizSc=
Subject key identifier:   3C:94:8B:BD:93:03:67:19:64:8F:CB:95:69:BF:3E:FB:4C:36:21:48
Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15
Certificate issuer:       /CN=f56403bc1c874eef09b8a1344155abc3f0575b15
Certificate serial:       019A21E5170CD5F3E4D95CEC01C06D339D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
Manifest number:          106A
Signing time:             Sun 26 Oct 2025 19:00:53 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:53 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:53 +0000
Files and hashes:         1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: pwRx4lRTIvSXuT3EniX4VzCYyQwEV/D/AKM4LyPmgNg=)
                          2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e5:17:0c:d5:f3:e4:d9:5c:ec:01:c0:6d:33:9d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15
        Validity
            Not Before: Oct 26 19:00:53 2025 GMT
            Not After : Oct 27 19:00:53 2025 GMT
        Subject: CN=3c948bbd93036719648fcb9569bf3efb4c362148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2f:7e:ab:ea:6c:8e:2a:67:9c:d7:2f:c4:3e:
                    d0:3c:30:a7:bf:9b:77:77:4a:9b:04:db:bf:fb:d5:
                    de:67:06:80:15:ad:f0:e3:be:88:97:e8:ae:a8:cd:
                    1d:5f:fb:15:da:41:07:23:4e:aa:3d:de:69:03:61:
                    95:24:c4:82:b9:a7:3b:7a:98:71:07:56:e4:ac:fb:
                    9f:5c:4c:43:aa:0f:30:fa:9b:2b:72:19:21:40:e9:
                    44:78:f8:ac:8c:38:2e:25:9f:0f:c2:6a:4c:b9:b8:
                    b9:7c:d6:b6:21:ac:1b:a1:46:e4:9f:95:9c:87:c3:
                    8a:ae:07:a4:e2:84:21:2b:85:46:1f:34:18:f1:60:
                    eb:e8:84:65:09:fe:36:b3:32:4d:43:9c:69:b0:ad:
                    a4:c0:f8:57:19:19:23:c4:16:ab:be:87:fa:a9:10:
                    9d:a1:3f:93:8e:32:9c:18:ea:f5:55:c4:57:36:31:
                    69:0c:e9:49:df:61:4d:e6:e0:e8:ea:21:7a:0c:35:
                    bb:59:b0:a5:6a:39:1a:f6:ab:c4:ff:c6:cf:6b:37:
                    9d:17:19:11:e6:e4:aa:bc:60:5c:aa:c2:2e:6e:4f:
                    ca:da:27:33:16:03:7e:5b:f8:2a:f5:8c:b1:b6:f4:
                    74:7d:19:88:cd:43:67:c9:54:74:ca:79:eb:8c:d3:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:8B:BD:93:03:67:19:64:8F:CB:95:69:BF:3E:FB:4C:36:21:48
            X509v3 Authority Key Identifier:
                keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:84:d8:0e:72:82:f6:ab:f7:ef:8c:c5:57:a8:4c:2a:72:78:
         12:d0:43:65:db:78:70:c6:95:94:1b:bc:ad:54:c1:bc:82:94:
         f8:e8:a3:e6:6b:00:b4:b2:f5:7a:93:24:26:c2:eb:8b:0a:1e:
         48:9b:3c:67:1c:7f:4e:02:fe:2e:11:78:07:f9:9d:f7:f1:a3:
         ed:d2:10:9d:0d:d4:f1:0c:a1:c6:c7:bf:20:9b:0e:c9:6d:95:
         27:aa:70:54:6e:e1:0e:b0:d0:37:56:d8:23:a3:9c:88:df:28:
         77:4f:57:4a:a0:9c:53:ed:b7:cf:be:4e:21:02:6b:f0:11:e8:
         54:f5:3d:61:16:b9:07:f9:40:f6:62:4a:ec:1d:95:57:0c:e0:
         f5:1c:75:fa:21:f0:2d:d8:0b:b0:b4:9f:f4:d4:67:cd:08:a1:
         2d:c0:61:29:20:aa:da:d2:04:44:7b:0a:90:a9:5a:01:96:e3:
         20:63:3c:3e:1f:69:1a:36:df:6d:3f:9e:0f:ce:15:e8:46:68:
         f6:57:ce:0e:f2:c6:3c:b2:87:84:c0:c0:63:97:ce:9d:f7:f5:
         79:73:b7:81:f2:16:45:9b:05:4a:67:81:13:40:76:ef:b4:35:
         52:45:be:22:87:82:fd:f5:18:c7:49:98:9f:35:17:e2:60:b6:
         48:22:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:28:01 2025 by rpki-client