Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
File:                     03lp9dJTIQsKvo4HoIb2CNbyoK8.mft (raw, json)
Hash identifier:          0LFxAgrcH4L4yXES5SWiQkV49/9VbbMA3bBrwSyN56k=
Subject key identifier:   39:63:2D:E0:2E:11:EE:B9:9C:03:FA:AE:AF:CD:64:08:DF:BF:CD:4A
Authority key identifier: D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF
Certificate issuer:       /CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
Certificate serial:       019A730176C4357C6EEBF944CC9C7F77C1EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
Manifest number:          01B2
Signing time:             Tue 11 Nov 2025 13:01:07 +0000
Manifest this update:     Tue 11 Nov 2025 13:01:07 +0000
Manifest next update:     Wed 12 Nov 2025 13:01:07 +0000
Files and hashes:         1: 03lp9dJTIQsKvo4HoIb2CNbyoK8.crl (hash: 0WDRwklf4qePBCxq6Lq+3z4SuJE9HO3XPqdsWS7xO4A=)
                          2: uPuOBXO8b4-bI2P5P3XpiRIEXXA.roa (hash: q/g5oVhV8oJmXJeCRjYEShHLH12PHyzIo7YhSAchvwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:76:c4:35:7c:6e:eb:f9:44:cc:9c:7f:77:c1:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d37969f5d253210b0abe8e07a086f608d6f2a0af
        Validity
            Not Before: Nov 11 13:01:07 2025 GMT
            Not After : Nov 12 13:01:07 2025 GMT
        Subject: CN=39632de02e11eeb99c03faaeafcd6408dfbfcd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:46:5c:5b:ad:4b:b2:09:48:84:b7:9d:e4:8e:
                    3e:46:0c:c1:d2:a4:8b:91:46:91:94:0e:75:57:73:
                    0b:d6:64:63:28:16:25:48:11:ee:95:ad:3e:f7:2e:
                    de:03:29:ef:99:d4:29:f5:8c:7b:d6:46:e6:a2:b6:
                    72:e0:0e:c1:d6:3b:15:05:39:e7:28:fb:ca:90:84:
                    e6:d8:f6:a9:e7:37:a9:e4:9a:c7:14:68:d1:24:cc:
                    ee:e7:85:a9:ac:33:aa:d9:6f:a0:b3:38:6a:86:9d:
                    c0:da:46:e9:56:30:40:e1:6a:64:b5:13:3b:b6:84:
                    40:8c:31:5b:ea:ca:42:7a:2a:b7:37:c8:a6:43:9c:
                    de:af:8a:e7:16:09:62:03:b1:64:57:6c:00:a1:e3:
                    83:91:2f:94:9e:e2:8f:bf:3b:d1:d1:95:e4:9f:9f:
                    a2:d8:d9:20:a6:97:31:37:c5:16:f5:3a:c9:d9:bc:
                    a0:4d:58:c3:cf:c7:a3:2f:90:8b:9e:cc:3c:4c:ca:
                    26:4b:0f:aa:d8:c2:57:df:fd:f1:3d:a8:31:5d:9f:
                    7e:4c:72:c7:e5:6c:5b:b3:c5:62:d0:65:68:af:7b:
                    cf:2e:4f:a9:f4:f0:ec:9a:85:8d:61:86:78:68:ac:
                    d2:85:8e:e7:ea:39:7a:89:c9:f9:f0:21:03:63:e0:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:63:2D:E0:2E:11:EE:B9:9C:03:FA:AE:AF:CD:64:08:DF:BF:CD:4A
            X509v3 Authority Key Identifier:
                keyid:D3:79:69:F5:D2:53:21:0B:0A:BE:8E:07:A0:86:F6:08:D6:F2:A0:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03lp9dJTIQsKvo4HoIb2CNbyoK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5240a6-cd61-4e0c-88b6-f59d20ef27b4/1/03lp9dJTIQsKvo4HoIb2CNbyoK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:38:58:f7:02:2a:00:0c:42:2f:56:8d:4f:24:ec:1e:2b:1d:
         8e:0a:4b:e1:6c:35:fe:57:c2:14:48:78:e2:f9:14:d0:db:80:
         12:2d:7e:44:3a:e0:4a:ca:28:a3:68:7c:9c:b4:ab:26:5a:54:
         d2:cf:e4:bc:f1:47:9f:28:a5:8f:48:19:09:e4:a0:44:c3:a1:
         8b:67:90:5f:d5:d2:8f:e4:47:67:50:12:e1:75:73:e0:87:4d:
         86:14:a1:59:5f:ad:ea:10:39:c3:ed:d8:ca:73:21:57:9b:d5:
         68:dd:0d:1b:61:4c:c4:32:a8:24:ba:80:9c:04:8f:f8:04:ed:
         5f:7e:82:a4:60:fb:85:c8:e0:f0:c4:ee:be:cd:ea:e2:df:bd:
         84:51:82:a4:eb:25:6a:0b:07:e5:ec:b1:6c:a9:89:f0:cb:46:
         db:7e:a5:dd:59:a9:4f:07:c2:32:56:31:80:fd:bc:1f:54:c8:
         ec:45:da:ad:3b:74:e7:74:a3:dd:51:63:ac:e7:30:35:09:58:
         1a:9e:60:24:db:08:d2:94:eb:f5:0b:de:f1:2b:55:86:95:3c:
         6a:e5:05:b1:5a:ee:85:ad:c8:04:12:14:e6:4b:05:ff:b4:74:
         11:f5:7c:92:b6:d0:7e:28:e5:3f:61:8d:41:5f:7d:0d:91:19:
         a9:9a:14:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:48 2025 by rpki-client