Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File:                     u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier:          +SHy0Y/OTGdtWnhU5lQ1WAiMhIl/VL1Cg/yKxDE0rtY=
Subject key identifier:   EF:38:47:85:09:62:9F:32:D3:53:6F:2C:5E:B9:F2:CB:DB:D2:94:00
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer:       /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial:       019922C3951128C54E1B88A2795CB536D24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number:          106B
Signing time:             Sun 07 Sep 2025 06:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 06:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 06:01:06 +0000
Files and hashes:         1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
                          2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: M9C58OQk/NCq2gjdqRNC74JBJI7fd9/XSWvoKw96bKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:95:11:28:c5:4e:1b:88:a2:79:5c:b5:36:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
        Validity
            Not Before: Sep  7 06:01:06 2025 GMT
            Not After : Sep  8 06:01:06 2025 GMT
        Subject: CN=ef38478509629f32d3536f2c5eb9f2cbdbd29400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:32:b7:88:fc:fe:8d:6f:62:04:1d:af:2a:f3:
                    2a:30:21:44:a3:43:20:23:07:5f:3f:9d:4c:18:d2:
                    f1:dc:34:88:70:3f:c8:21:b1:fc:55:b6:90:ed:c7:
                    1b:67:9b:cd:4a:72:a6:e4:a6:70:7d:64:3b:eb:8a:
                    b1:84:32:23:c1:d5:f2:28:ee:b5:09:45:c5:26:d7:
                    0d:e3:cc:c8:e5:90:8c:aa:f9:62:62:85:39:6f:2f:
                    bb:ce:fb:f9:ab:78:97:70:3d:67:5a:91:94:ff:09:
                    4c:f5:e9:0f:61:ca:e9:5a:3f:a0:f3:00:42:d8:26:
                    91:a5:89:98:09:04:03:84:2b:99:6a:5d:68:93:b9:
                    08:ab:7b:db:1e:1d:3f:27:e6:42:39:01:84:b7:9c:
                    58:52:2e:42:13:74:8d:d7:34:e7:d0:19:c7:74:f9:
                    15:4a:26:48:d3:5b:78:4f:1d:07:8a:15:0e:3e:0f:
                    e2:20:f1:ab:f9:de:a3:f3:96:45:5a:da:38:e0:a0:
                    3b:f1:0d:f2:c7:75:f0:61:91:dc:04:cb:57:94:be:
                    04:b1:0f:eb:96:5a:ba:22:91:d6:d9:59:01:15:fc:
                    33:08:9d:28:07:3f:14:6e:06:c4:0b:09:a2:fb:8d:
                    7c:bb:b7:9f:81:c7:66:37:3c:76:cb:8c:54:d4:43:
                    c9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:47:85:09:62:9F:32:D3:53:6F:2C:5E:B9:F2:CB:DB:D2:94:00
            X509v3 Authority Key Identifier:
                keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:25:c9:5c:51:1c:35:ea:06:0a:1e:56:67:93:fe:73:20:
         ea:cb:86:7e:7a:91:0f:13:b4:fe:a7:1b:57:76:9c:40:8f:fe:
         04:4a:fa:4a:38:c5:13:0d:da:72:84:3d:c2:c5:b3:c8:a6:b5:
         b4:dc:74:91:10:ea:26:b9:c8:3b:4b:ef:9e:67:ec:d8:56:8a:
         bd:a3:d5:e8:c2:17:1c:11:30:3b:ff:87:3a:23:8e:a3:35:ed:
         66:d1:90:8e:b3:d0:d1:3f:43:47:b9:3c:e4:f7:90:fa:64:2d:
         2a:44:9a:fb:ad:e4:9d:4d:f4:2e:5b:4f:92:5f:4b:2f:c7:07:
         c1:ff:68:5b:da:14:8b:66:e2:fb:1a:19:60:b5:17:6c:4e:36:
         01:00:55:2e:f7:58:d8:19:95:4e:2b:83:b3:23:d9:da:12:08:
         4a:29:58:d5:cd:bd:85:1c:6e:cf:90:e9:86:94:d8:63:b4:f8:
         19:1b:1a:e3:40:1c:8c:90:89:af:24:a0:40:d7:42:37:13:6e:
         78:99:16:f0:e5:7b:4a:64:7b:2c:4b:d0:4f:57:a4:f8:eb:c1:
         a9:d2:91:0e:60:a0:2f:a0:0c:44:c7:17:0b:f8:b5:68:a9:de:
         1f:8a:93:19:aa:3a:5b:b4:37:2c:0d:0c:22:c7:f3:d1:3d:3c:
         08:13:08:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:18 2025 by rpki-client