Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          Pt1Pfz7XmUbRIeHPYoXlwqJ6ibhpvxyuTCrLCRfT3GY=
Subject key identifier:   9E:AF:7B:F5:43:A4:F1:25:2D:3E:AF:81:32:A5:70:7C:A5:D4:4B:6B
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019A1A6245343EDD490405EEB5AE415726AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          0360
Signing time:             Sat 25 Oct 2025 08:00:39 +0000
Manifest this update:     Sat 25 Oct 2025 08:00:39 +0000
Manifest next update:     Sun 26 Oct 2025 08:00:39 +0000
Files and hashes:         1: FMgcehrq11NYnach5jymNFMSCJo.roa (hash: 23485LoqiVIG63SHNB561yBglraAa3rXuSfMUv494ng=)
                          2: h0nRURZObDQGUY3lgCCRW5dgsdU.roa (hash: tHlLzC2mNo3zNr8LZV0r1UgQyBm2/nkWYYJopdfozpA=)
                          3: jPHsQlGx_ZTE4YgBiHZXwzUhhaA.roa (hash: qBF1JuuPaQkLpju5JJkqO3MhIuKn8gMr+bEddTrSCho=)
                          4: nvo5kYS5Gt5n8tNt2QdYcZApDBc.roa (hash: zlWPVIjJT4fAh1Xfi/EWmZKxdKql19zmnHIxNlxz2Ss=)
                          5: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: C7XjXrRn8GwV3eLd/3QU5C2WdoHGa/X+GPurc21wJ78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:62:45:34:3e:dd:49:04:05:ee:b5:ae:41:57:26:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Oct 25 08:00:39 2025 GMT
            Not After : Oct 26 08:00:39 2025 GMT
        Subject: CN=9eaf7bf543a4f1252d3eaf8132a5707ca5d44b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:98:9c:4a:51:16:f1:b1:e9:38:eb:a7:a5:e8:
                    84:aa:5e:6f:6d:65:1e:c5:dd:a1:e6:cc:e2:0c:c9:
                    6d:c4:a9:e5:3b:d7:18:98:70:39:0c:fc:db:fd:8a:
                    c0:e1:ae:84:32:9f:e8:f8:9d:7c:ce:d4:75:a9:43:
                    34:ba:9f:24:20:37:bc:92:9a:ed:97:ec:d3:83:52:
                    a8:f8:84:d2:9b:3e:b2:35:31:07:18:0b:03:a8:37:
                    3e:f9:f9:fc:8c:88:b0:79:bf:1b:28:9e:39:ea:12:
                    3d:66:b8:b2:74:e1:dd:c5:9b:ad:23:4c:fa:29:1b:
                    6f:f2:cb:54:9c:c9:5c:bc:bc:f0:7f:92:04:3f:d2:
                    63:b4:a3:d8:07:9b:6d:0c:bc:36:9f:6a:dd:b3:eb:
                    33:b6:0d:26:32:e9:62:8e:d0:57:a1:f6:cf:56:eb:
                    54:50:70:b7:58:8f:fa:ae:73:dd:f2:26:1b:bb:3d:
                    d7:c9:77:26:b9:0b:6f:ae:2b:5e:31:93:f5:ac:60:
                    f8:b3:1b:3f:b9:60:59:ea:ce:37:8e:85:aa:24:30:
                    8d:72:a0:11:0a:37:a0:d6:a0:b7:2e:1c:22:e9:21:
                    8a:49:6d:2f:df:01:0d:b0:5e:d2:f5:2c:4c:7d:a7:
                    64:49:65:11:f2:ff:fd:55:19:d3:e7:3e:5a:b4:49:
                    7c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AF:7B:F5:43:A4:F1:25:2D:3E:AF:81:32:A5:70:7C:A5:D4:4B:6B
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:89:1e:76:7c:35:af:85:d3:cc:7b:27:f3:c4:27:f5:79:9f:
         17:c9:51:45:31:20:df:57:1a:61:1c:89:b5:89:84:cd:ae:b9:
         0d:75:88:86:4b:a0:8a:49:7c:6e:89:24:ab:04:ab:59:2e:27:
         55:db:de:ac:e4:b2:4d:ee:94:d6:51:2d:f7:2b:30:24:75:ff:
         6b:1a:42:6d:45:11:10:85:f3:3d:3c:31:32:b0:d5:c3:fd:45:
         b0:40:fa:78:ce:1d:3d:9f:b6:c5:6d:87:cf:d5:45:2c:b0:4b:
         b3:eb:0d:a0:f9:9e:c4:e3:fa:ee:60:c1:cd:ef:a1:e3:61:18:
         1b:50:57:82:c3:35:27:d3:74:48:78:fb:71:8b:e0:55:f3:a6:
         fe:ad:52:a6:9c:15:73:bc:18:1e:8b:84:80:89:d3:6a:c0:ea:
         aa:f6:81:6e:ac:15:88:71:c5:f5:01:0f:be:18:99:90:2f:d0:
         f5:04:32:10:3d:36:72:d0:69:e1:27:a4:51:f4:03:10:67:a9:
         6b:36:51:a4:1f:13:47:c2:8a:3f:76:bb:10:b9:1f:8a:a5:59:
         cc:08:c2:4d:5d:7c:a0:de:fe:fc:1e:29:b2:de:52:8a:c3:d6:
         b6:e0:a0:cc:90:7f:0c:01:2a:f3:e2:a9:5a:7f:07:29:ea:34:
         f8:6e:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:30:53 2025 by rpki-client