Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          S6minSMZZSeyiwfQYx0xL4bWMbqkVf2HJQXLw6jcc3U=
Subject key identifier:   12:82:B5:68:99:DB:92:EC:A4:4F:23:A0:A6:C1:46:8D:9F:BD:65:31
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       019A134D82E17D3A0153CCA9BFBE4D101149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          0A0E
Signing time:             Thu 23 Oct 2025 23:00:38 +0000
Manifest this update:     Thu 23 Oct 2025 23:00:38 +0000
Manifest next update:     Fri 24 Oct 2025 23:00:38 +0000
Files and hashes:         1: 2qrxmxFhyT-yCENM1h6TmxhPB8o.roa (hash: 7dE75s8f6pPL61Y94sO2ElyJScDRYTLZvobRATQ5r8k=)
                          2: K7_w83CbqB50p5lcpbyDnATtK4Y.roa (hash: /8SCcb2O2tmxF/iex69u1hAPcq9K2D7sGmmIbln+NaE=)
                          3: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (hash: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=)
                          4: lupOL9qqLysg0mnUx6C8i2JeLHI.roa (hash: EfyA+Sh8l0uPBdYnXAoYnr9+KW83Fnvqu/9CGcABYvo=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: ebrNvvq9NDerxwFTNjfUsUYl/hMVJuPMFH1KjcxDZIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:13:4d:82:e1:7d:3a:01:53:cc:a9:bf:be:4d:10:11:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Oct 23 23:00:38 2025 GMT
            Not After : Oct 24 23:00:38 2025 GMT
        Subject: CN=1282b56899db92eca44f23a0a6c1468d9fbd6531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:a1:3c:a6:e0:07:61:a9:d1:75:9d:9e:f6:
                    26:da:a2:5c:ae:2f:59:83:75:8f:e9:f1:c6:b6:e6:
                    95:f6:43:67:d2:2d:a5:32:49:1c:c1:27:09:e1:6e:
                    30:d3:d8:64:d3:75:5b:fb:df:4c:47:51:c0:2b:c2:
                    33:9a:38:c3:0a:e5:f8:f2:de:8f:14:f0:77:71:89:
                    27:e3:76:99:98:27:8f:24:7d:2b:50:79:bc:72:dc:
                    a8:ee:66:d3:c3:03:53:d8:c1:fd:ce:d5:ea:d6:71:
                    b6:9c:f5:0e:9f:74:b9:ef:7c:61:15:f6:74:64:b6:
                    4f:7a:e6:b0:4f:eb:44:6a:83:4a:e3:c2:a5:8f:91:
                    53:c7:92:93:04:59:49:a2:51:8b:ee:66:10:99:f5:
                    6c:d3:2c:46:ea:9b:2f:a3:10:f5:19:90:d8:79:a6:
                    2a:d6:50:6a:46:07:fd:82:0c:71:ce:f7:3b:2b:fa:
                    b4:03:e7:61:9d:d5:5d:52:47:7c:7c:ed:53:db:e8:
                    7f:20:8d:06:e4:3b:b5:4d:fc:3a:82:63:82:77:f2:
                    52:1b:d6:78:d4:62:9a:c5:c7:3f:ba:15:e2:a8:67:
                    b6:11:b3:2c:6d:66:2d:29:53:60:eb:f2:49:27:26:
                    a9:07:cc:00:1f:30:99:ec:4e:93:ce:2a:31:9c:e3:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:82:B5:68:99:DB:92:EC:A4:4F:23:A0:A6:C1:46:8D:9F:BD:65:31
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:3f:e7:ac:86:9d:a5:c4:34:03:4f:ce:3e:d4:07:92:6a:
         5d:d9:53:42:3d:8a:0e:97:cd:8e:46:3a:00:16:7a:58:f9:cf:
         b6:58:28:b1:22:15:ef:7a:cc:38:dd:b6:3e:7d:f0:df:fc:5a:
         14:10:a5:36:b8:1c:db:b1:7d:62:b5:d5:da:9e:f9:2a:c0:1e:
         c0:63:cf:ed:09:7c:40:00:fc:8f:d6:eb:94:3f:0d:cc:f8:e4:
         69:36:83:40:29:cd:00:85:61:64:3d:c7:84:8e:2c:f0:8c:d5:
         86:dc:62:d5:28:91:3b:db:5d:ae:90:bf:2f:3d:dd:17:66:58:
         97:e3:0f:49:d1:00:8f:b4:38:ca:2d:9d:2b:d7:dc:9f:50:4b:
         37:cd:c7:ec:49:80:2b:73:21:03:c7:2a:d5:55:d2:c6:ea:68:
         de:ba:d0:0f:87:75:f7:0b:31:a6:c4:44:a6:2b:79:43:1c:40:
         fc:3e:66:b1:59:7b:d2:53:48:75:1a:bc:73:40:71:ed:db:da:
         c0:31:9f:2b:1a:2c:c4:1e:51:4d:60:3e:86:be:ad:18:e5:eb:
         dd:6b:59:a2:f7:da:62:44:f9:b4:2f:e7:19:61:46:27:76:8a:
         c0:a1:5e:ba:d6:c7:78:90:0f:49:d4:0b:c7:6e:89:c8:0f:7f:
         1e:5c:b9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:01:16 2025 by rpki-client