Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
File:                     Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft (raw, json)
Hash identifier:          B89X+ikNj7vA9KIZY76d3mPpgaoxf5AX8mrsHJGrARQ=
Subject key identifier:   3B:74:2D:98:72:9C:93:EC:AB:08:C7:74:8C:5E:83:8F:FC:C3:76:DD
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Certificate issuer:       /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial:       019A300EA0659F1037FB3B6CE651267C3394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
Manifest number:          1330
Signing time:             Wed 29 Oct 2025 13:00:56 +0000
Manifest this update:     Wed 29 Oct 2025 13:00:56 +0000
Manifest next update:     Thu 30 Oct 2025 13:00:56 +0000
Files and hashes:         1: CInCW1-lseNxjR1N7IQV758AByA.roa (hash: WQM0UCIORrjfQkm9SW+GVd+jlu9ooi0KVsLj7jyMiok=)
                          2: Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl (hash: nSjFyzIIr7XRdtp1vMMuekA0Cs5Ape5m20kJ7st4Irg=)
                          3: U2paNb4m2qyQATbnhVbTs0-s6jM.roa (hash: S1RxCh/LJopZIJfT5SmUwql4+1cPwTZJIOK40saTkcw=)
                          4: zbSAdSSsmOU8X5iO-yfCK2-GsNo.roa (hash: qlcz7bJ9k+K7bMbtiBCeKabs37EBPQzpy/kDcVYHEOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 13:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:30:0e:a0:65:9f:10:37:fb:3b:6c:e6:51:26:7c:33:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
        Validity
            Not Before: Oct 29 13:00:56 2025 GMT
            Not After : Oct 30 13:00:56 2025 GMT
        Subject: CN=3b742d98729c93ecab08c7748c5e838ffcc376dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c6:74:2a:91:fe:6c:ad:29:01:c4:10:d1:33:
                    e7:a8:34:d8:2b:a8:45:1e:c3:ee:e3:f8:7e:41:5b:
                    52:0d:b6:95:63:6c:7a:37:96:84:d8:d3:8c:f8:04:
                    ed:a9:9f:80:da:0f:01:44:f3:6f:e2:75:cd:16:3d:
                    06:a4:41:99:df:03:16:6d:23:4c:be:b0:dc:eb:0d:
                    39:52:8d:38:1a:b8:56:0d:b9:51:ad:5d:28:6d:6f:
                    40:b3:88:54:a1:7a:ae:8b:08:0a:f3:76:f6:7a:3f:
                    a1:5e:66:8b:25:a2:bc:b1:dd:f2:27:a1:f6:67:01:
                    9a:a0:fe:b9:d6:95:c9:7a:bf:be:3b:ce:b0:1b:60:
                    94:19:3f:9c:30:3f:f7:8c:bc:3f:94:70:f8:4b:59:
                    9a:01:08:6d:bf:7e:94:e5:17:3b:bf:f6:12:63:4b:
                    f9:3c:19:24:b9:dd:bb:8f:cb:73:dd:f2:62:b9:83:
                    a3:d8:fb:8b:56:b8:49:a9:b7:01:5e:b3:bc:c4:63:
                    ae:be:3c:43:e5:bd:3e:04:6f:98:a8:87:eb:0d:67:
                    38:f1:33:6e:0c:1c:64:e0:90:31:02:4b:9e:6f:58:
                    35:ff:eb:9c:65:e3:9c:85:eb:b8:2f:12:f0:e8:5b:
                    11:da:c1:fd:fe:8b:1c:22:6c:16:c1:ef:5b:41:31:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:74:2D:98:72:9C:93:EC:AB:08:C7:74:8C:5E:83:8F:FC:C3:76:DD
            X509v3 Authority Key Identifier:
                keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:50:0e:3a:10:94:99:7b:49:da:cc:e0:11:f7:f5:17:35:
         6f:c9:cf:40:5f:94:25:e1:a1:6b:f8:eb:66:92:86:bb:4e:5c:
         09:85:4f:cd:69:4c:d1:30:25:7b:6f:80:76:f5:72:c8:35:e2:
         18:1e:6a:de:4d:94:55:c3:fb:96:5e:e5:84:c8:2e:01:ff:9a:
         6d:fb:1d:29:86:b1:bf:84:6e:aa:c7:11:be:cc:8d:3d:c8:07:
         53:59:ab:1c:6d:36:3a:be:d8:f4:ea:b7:32:61:a1:a4:66:1d:
         d9:4a:e5:56:ce:4e:4a:0f:b8:57:12:8a:57:d0:23:f2:fd:d4:
         9c:6c:d8:60:61:50:c4:e0:65:fe:1b:4c:89:aa:1e:77:75:46:
         54:7c:b6:ac:79:0e:2d:7f:bf:df:6d:92:67:2f:2d:0f:54:ee:
         e3:c6:3e:da:dc:2b:46:19:30:d3:2b:4b:ae:c6:ae:e6:a3:8a:
         55:dd:cb:26:71:33:2e:e8:1b:02:e6:87:46:ea:a8:f6:ec:78:
         79:21:bc:be:e1:11:e4:56:de:10:7e:be:9c:c8:0d:1d:e4:4c:
         76:62:d9:c2:77:3f:3b:39:d3:86:ca:14:35:f8:4d:a9:b4:46:
         c8:6f:b3:2b:13:0a:17:fa:76:60:f5:b7:c9:aa:1a:4d:12:4b:
         ff:6c:42:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 18:18:35 2025 by rpki-client