Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
File:                     SCc0v_AaPOqzULy4SyX3O-gp328.mft (raw, json)
Hash identifier:          5CbgVa1nNJks/JVwY+WxrI6tVxGRn9D33VRruIn5sxM=
Subject key identifier:   05:84:D1:88:F8:59:24:49:1F:23:AD:37:6C:93:1B:3E:D5:6D:2C:7E
Authority key identifier: 48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F
Certificate issuer:       /CN=482734bff01a3ceab350bcb84b25f73be829df6f
Certificate serial:       019A239C1102157CAE5D228AD1C1BF259E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
Manifest number:          013E
Signing time:             Mon 27 Oct 2025 03:00:21 +0000
Manifest this update:     Mon 27 Oct 2025 03:00:21 +0000
Manifest next update:     Tue 28 Oct 2025 03:00:21 +0000
Files and hashes:         1: FsbQ_xqqVCKA7JO_7TNtMcs5uDc.roa (hash: 8oLtr32VZblrtItn64+IZffUBFTx5wRyhUTx6ephSaw=)
                          2: SCc0v_AaPOqzULy4SyX3O-gp328.crl (hash: 1EyCmmCexZNYkdzTn0X4XPHUnzvfUoA8ekYrVBsrRQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 03:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:9c:11:02:15:7c:ae:5d:22:8a:d1:c1:bf:25:9e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482734bff01a3ceab350bcb84b25f73be829df6f
        Validity
            Not Before: Oct 27 03:00:21 2025 GMT
            Not After : Oct 28 03:00:21 2025 GMT
        Subject: CN=0584d188f85924491f23ad376c931b3ed56d2c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:78:b2:bc:cb:f1:74:6f:47:b4:c1:f8:b6:3d:
                    70:99:a6:79:29:3e:82:58:6b:2e:b3:76:80:8f:a5:
                    f2:3c:55:58:1f:df:e8:97:76:2d:87:be:e9:ec:29:
                    56:2f:b4:eb:0a:9c:9f:06:85:18:80:22:ae:50:e2:
                    a6:be:e2:46:a8:76:7d:3a:9c:03:28:3c:36:d2:c8:
                    dd:c0:64:46:5c:0c:39:3b:16:62:b5:37:74:22:84:
                    d6:b5:e8:90:f2:08:a7:83:b8:57:76:a6:c3:76:c7:
                    ff:f6:de:6c:d4:62:5c:fd:41:42:61:ce:9f:b9:7e:
                    9f:9e:c3:2c:de:ec:fe:00:33:52:ef:13:01:c1:71:
                    d5:47:05:f2:66:9e:38:27:d9:8a:dc:a5:d9:5e:4c:
                    55:bf:64:6b:ef:1e:e7:f4:54:58:88:75:32:1e:4a:
                    9a:d9:66:1e:8a:d9:92:de:38:ef:ea:0e:6e:fa:81:
                    20:be:dc:1e:69:39:b5:3d:32:c6:a5:37:8c:ba:a3:
                    80:30:ea:41:be:9e:6b:a7:16:e6:a0:41:14:85:66:
                    2b:4b:be:40:88:37:ec:3a:96:54:43:9c:4f:64:3d:
                    a7:f7:44:3a:0a:7b:ed:de:8b:c8:f2:c7:09:20:c9:
                    9d:59:c4:2c:f4:ed:b0:e8:3b:cb:5e:2d:46:f8:2d:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:84:D1:88:F8:59:24:49:1F:23:AD:37:6C:93:1B:3E:D5:6D:2C:7E
            X509v3 Authority Key Identifier:
                keyid:48:27:34:BF:F0:1A:3C:EA:B3:50:BC:B8:4B:25:F7:3B:E8:29:DF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SCc0v_AaPOqzULy4SyX3O-gp328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5294b6-6a8a-4695-b291-582a972054fc/1/SCc0v_AaPOqzULy4SyX3O-gp328.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a3:3d:57:67:7d:65:88:ff:60:86:6b:41:a8:15:b1:41:8c:
         1f:92:62:c2:74:cc:8c:67:45:67:90:5b:8b:c4:2e:f5:85:22:
         5b:44:73:f2:0f:87:3e:93:c6:23:5f:03:43:ab:60:6c:01:b6:
         ed:ee:f6:83:90:0c:14:aa:c6:ed:1b:7d:eb:5d:ad:1d:a1:cd:
         da:71:59:0e:63:1e:b6:c6:e9:53:2d:0b:b7:4d:6e:f3:5f:ff:
         e2:11:f8:e9:4a:25:fb:da:b6:b7:91:6b:44:cb:42:d8:cd:18:
         03:d5:01:2c:a2:cf:48:11:c4:1e:8e:50:b2:16:1c:70:5e:7e:
         ca:a8:30:01:a2:54:8d:1d:a2:f2:57:75:8e:31:31:b6:be:79:
         29:84:ce:79:72:ab:b6:ce:79:0a:99:cd:b1:3d:ad:34:50:3c:
         95:e5:54:55:12:c6:ef:6c:a2:a0:b2:73:bf:3c:be:ab:99:da:
         fe:8e:49:8e:1e:66:96:0f:c8:8c:90:08:43:87:01:72:fe:63:
         2c:26:71:db:10:61:a4:27:94:a8:15:a3:2b:af:e8:e5:37:54:
         39:bb:b6:09:23:ab:20:b0:0a:b8:ad:f2:b1:68:2a:76:a7:0f:
         b7:f5:ef:fc:69:da:16:26:47:2f:45:6a:bc:c0:63:d7:4f:fb:
         5b:ac:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:12 2025 by rpki-client