Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
File:                     CjC2NdNXRo1_ky0-H1nVNzz59GU.mft (raw, json)
Hash identifier:          l6dIOuQ/YgGNlc7r3YklApybc6ibPUrONLn/vdiq4no=
Subject key identifier:   E1:0E:2B:FC:DA:34:35:33:D4:17:D1:F2:E8:6E:2E:52:F6:D8:46:56
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Certificate issuer:       /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial:       019A2966F07108FEA321B98F703AA8C2B45B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
Manifest number:          1706
Signing time:             Tue 28 Oct 2025 06:00:03 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:03 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:03 +0000
Files and hashes:         1: 43hLg4tOOv7SoGn-XftXhK9a-NE.roa (hash: fTCV6jJu7vHlfoEQtZwLz0NW5RubKgDanJcVlL86nkI=)
                          2: CjC2NdNXRo1_ky0-H1nVNzz59GU.crl (hash: CnZvm1IM7nDVipnx8iATZIdYq9Kjw+STO0e45MtgEQQ=)
                          3: RservbDL-BVcPWiT5GY7GGmaqNg.roa (hash: 6kmm57SMuR609w7NX9SqjiOxJz1WjZ0ODARP+aV0g60=)
                          4: SpbFu7cu1hyzijH4Dcq1zO1wfcw.roa (hash: s7llN+uwGj/YltcQ4pU6jWvPZRuwP/LeuHpZEDrxXAg=)
                          5: X_Rtsxh8a-tRwYEIISqdxYeVheI.roa (hash: Xix6PIF+hRiDX1wXAP04l3u77j1tQfJifz6hRdA+cvE=)
                          6: nvYcptlp0PUhINL8di32N1PMAlE.roa (hash: pt/p/I9QSvcAJg81FJVs1CNUkiY+sFdwtB0jYLQnIjQ=)
                          7: wNh0jMOPHCGGtlAG3PiNBZzjcno.roa (hash: NaE5nCG+kp0N7iEIRzHU/rkLw5QEKaxFzRCaxMZ3BjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:66:f0:71:08:fe:a3:21:b9:8f:70:3a:a8:c2:b4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
        Validity
            Not Before: Oct 28 06:00:03 2025 GMT
            Not After : Oct 29 06:00:03 2025 GMT
        Subject: CN=e10e2bfcda343533d417d1f2e86e2e52f6d84656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:76:3e:a1:bf:22:19:14:c5:95:03:ef:a4:
                    10:26:b8:dd:01:74:69:cd:0f:0b:34:a5:7d:24:10:
                    98:19:37:2d:83:dd:90:a4:9d:60:ce:a4:b9:96:60:
                    a3:b8:80:82:e7:38:dc:15:04:38:8a:d2:3f:b9:51:
                    00:93:d0:27:0d:80:64:d5:69:68:10:59:4e:e9:14:
                    f3:2c:12:59:67:1e:ab:7e:e4:4a:da:cf:9d:23:aa:
                    ea:1a:28:71:47:f5:17:f5:d8:60:6d:43:fc:18:c7:
                    0c:d8:c7:37:6d:e5:2d:fc:35:e4:ef:03:8b:33:66:
                    3b:ad:b6:24:ad:c4:58:1f:f6:92:2b:a3:aa:84:ae:
                    32:50:3e:4c:e8:37:8e:f5:df:e9:68:4d:cf:e9:25:
                    21:69:fa:4f:86:14:b5:2a:d9:dc:5e:87:b4:75:c1:
                    20:ac:7c:bf:4e:ba:a2:db:c2:4a:1e:ad:b9:af:94:
                    e6:ed:e3:e1:47:3b:61:c8:54:38:bf:77:84:af:93:
                    54:be:35:9b:d0:a6:49:94:82:f4:8e:c5:ae:32:d3:
                    40:d5:ed:ec:18:c6:22:92:8b:00:3c:5a:6d:59:46:
                    af:8d:50:a7:37:06:9c:a5:8d:56:38:01:99:d2:43:
                    e5:c7:10:82:4d:84:6c:8e:fe:31:0c:07:28:da:d8:
                    d5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0E:2B:FC:DA:34:35:33:D4:17:D1:F2:E8:6E:2E:52:F6:D8:46:56
            X509v3 Authority Key Identifier:
                keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:10:fa:a7:25:f1:24:89:e3:9d:b6:41:da:7b:c7:0f:d4:5a:
         bd:70:79:30:59:42:ee:66:21:c3:15:80:5d:5d:1c:fb:3b:ea:
         87:81:62:c3:2a:df:fe:7a:bd:64:4d:ba:6f:fb:dd:f7:46:36:
         7b:6f:7b:d9:6d:a4:0d:2d:d7:25:63:d8:d5:45:50:c2:fc:95:
         6c:39:eb:09:ee:ac:95:e2:cf:80:e0:ba:ff:57:4c:71:4e:23:
         a0:08:46:98:a9:1a:b8:50:96:11:79:f4:b1:a0:7c:f0:16:8a:
         d6:10:36:16:5a:4e:1f:69:d8:7d:55:63:44:4a:f0:4b:cb:87:
         56:a0:64:04:df:82:61:00:fa:69:cd:da:b2:72:ef:58:97:df:
         5d:d7:07:2a:2e:33:32:93:bf:50:a2:34:6a:cc:5c:10:e3:f5:
         d0:ab:ad:dc:f1:a3:87:a5:fd:de:b1:44:7d:6d:96:8e:18:a5:
         23:6e:a9:75:a6:73:39:5a:62:9b:94:1b:47:d4:e4:eb:a9:e3:
         e5:45:40:25:9b:70:6f:5b:ce:9c:94:10:3b:77:a9:4b:51:2b:
         25:af:76:70:70:e1:34:0b:e8:cc:23:ef:6e:95:f3:72:29:45:
         98:17:36:b1:f4:80:ee:fd:23:e9:76:b2:68:f5:e7:93:7e:f1:
         40:47:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:05:17 2025 by rpki-client