Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          WJ/VBxDliqRJYA4h9PGKhh6CRvXCWDEFY0Wp7brZB+I=
Subject key identifier:   A9:3F:47:D5:0E:D6:83:FE:51:31:EC:7A:AF:0F:0E:2A:BB:33:97:C8
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       01991CC202153B09017CCCBB0F0904794051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          0EDD
Signing time:             Sat 06 Sep 2025 02:01:40 +0000
Manifest this update:     Sat 06 Sep 2025 02:01:40 +0000
Manifest next update:     Sun 07 Sep 2025 02:01:40 +0000
Files and hashes:         1: NFuZfl53-8KYTLVCa1Hv_etfQ9k.roa (hash: mKJy52sXoia7oCRphyiyMklvY+QAOAh6np8WR+mJ8DQ=)
                          2: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: uNCjLn7eDYFPPEzSF7Oxu51CXcwDmstGczSE8XXNznY=)
                          3: iOS4ElaxvQeRHxYqYTv9ArvMOF0.roa (hash: bD+y12vYe0rJphDbgeizPQmjlToeySPQDb7cfEEdLrg=)
                          4: pOxKs9dWhUdQCvSLYTnAr4vpa7U.roa (hash: /5GRlXnM3rNmijk0WyBlasj7lnCycK3nTmymAKQJFjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Sep 2025 02:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:1c:c2:02:15:3b:09:01:7c:cc:bb:0f:09:04:79:40:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Sep  6 02:01:40 2025 GMT
            Not After : Sep  7 02:01:40 2025 GMT
        Subject: CN=a93f47d50ed683fe5131ec7aaf0f0e2abb3397c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:d3:30:1f:af:2e:83:25:4b:31:59:9d:6d:
                    8a:46:3b:c0:39:05:38:3d:01:a2:76:3a:dd:d4:c3:
                    57:d3:1b:7c:1d:2a:17:82:ac:d2:da:74:41:43:13:
                    8e:ff:91:60:1e:9a:90:52:20:d5:5b:26:a2:fb:8d:
                    29:a6:6d:c8:63:66:6d:eb:52:fc:04:ae:aa:61:1f:
                    0b:6f:7f:b0:89:58:30:9a:90:8f:d7:20:3f:ae:bc:
                    23:49:32:fb:28:d8:1d:99:ed:86:db:9a:03:8a:32:
                    ee:e2:5b:5c:9b:e7:60:f1:76:78:f8:e3:fc:c2:ce:
                    75:10:7e:9b:b5:82:c6:d5:87:da:21:00:0a:3c:43:
                    d3:a0:df:9b:1f:4e:0f:93:5d:7c:65:10:ae:09:dd:
                    85:92:cc:ad:99:ec:22:41:d3:45:a7:17:ea:c7:0c:
                    ec:7d:e5:8a:62:6d:8d:42:11:09:cd:59:fb:43:ae:
                    de:1b:56:09:07:69:25:24:5d:1b:94:52:a8:f0:f1:
                    0a:f6:97:87:8f:90:52:30:a3:84:7d:fb:f0:e0:49:
                    38:bc:6e:c6:dc:d7:91:01:9c:b4:f7:12:31:83:db:
                    1e:96:11:b4:b1:40:fc:3f:aa:9e:96:61:50:4d:ea:
                    81:21:c1:9f:b3:a8:57:31:54:e7:89:6c:f0:31:d7:
                    aa:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3F:47:D5:0E:D6:83:FE:51:31:EC:7A:AF:0F:0E:2A:BB:33:97:C8
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7c:fe:f6:9f:15:c8:8f:d7:d3:cc:da:33:50:b9:9a:62:8d:
         36:3e:b4:7a:1f:9c:55:d3:68:61:f7:1c:77:0a:21:99:fa:f7:
         5d:2e:59:ac:f4:63:ba:4c:0c:60:06:5e:ce:84:ed:58:56:9c:
         15:ad:5b:cf:26:96:e3:08:d7:3e:4e:7c:6a:60:5e:b3:77:d3:
         4a:fe:ae:cf:08:58:3e:85:08:58:89:0e:80:c3:0d:bb:21:2a:
         73:a2:60:7f:01:61:95:4f:ec:29:bb:9b:31:8b:4a:e3:61:30:
         5c:f3:5e:39:62:46:e8:d8:71:74:71:c1:4d:bd:de:c1:49:7a:
         39:c9:b5:b9:fc:07:bf:99:f0:cd:59:e9:80:85:e8:15:0c:12:
         ca:d4:ca:c4:60:94:44:38:34:00:45:92:d6:2b:c6:f6:4c:49:
         eb:3c:7b:c8:ea:e7:7a:c5:37:a3:c0:63:8c:4a:0c:19:59:c5:
         e3:5a:83:15:0b:29:ad:c1:78:ce:a9:bf:a9:f2:1e:76:65:85:
         4f:a6:c4:10:8f:11:48:7a:40:41:73:6e:73:bb:e7:bd:99:82:
         cd:d2:c4:d8:55:62:0e:7a:3d:66:59:72:60:e8:78:fd:90:e4:
         0f:40:c0:44:ab:f5:4d:50:5f:15:e9:42:cc:eb:85:d4:72:ac:
         16:59:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:27:21 2025 by rpki-client