Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
File:                     Myrs0kO-9YfIebv-H-TFpb6zNFU.mft (raw, json)
Hash identifier:          ngAZZprLgZ3R5n40+f5WGAwREN1zoLr/RJEztDBIPJQ=
Subject key identifier:   53:DC:E5:A7:88:10:AB:59:7C:51:0B:5E:B6:7A:7E:2E:FA:C0:26:0E
Authority key identifier: 33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55
Certificate issuer:       /CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
Certificate serial:       019A29678B4B9C3B5D7B97E14A49359A7CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
Manifest number:          A3
Signing time:             Tue 28 Oct 2025 06:00:43 +0000
Manifest this update:     Tue 28 Oct 2025 06:00:43 +0000
Manifest next update:     Wed 29 Oct 2025 06:00:43 +0000
Files and hashes:         1: Myrs0kO-9YfIebv-H-TFpb6zNFU.crl (hash: uY4vD+WpgZPV1fYKMffQIlqtJRdaFn4vD94LK91R3yM=)
                          2: YCOzpt6m55VdUCTyaUiIpHbbaAw.roa (hash: 8KEhXczZ5fk5hHX3jazf7zw7DRdBM2iZ9Jxn8A/DTF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:67:8b:4b:9c:3b:5d:7b:97:e1:4a:49:35:9a:7c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332aecd243bef587c879bbfe1fe4c5a5beb33455
        Validity
            Not Before: Oct 28 06:00:43 2025 GMT
            Not After : Oct 29 06:00:43 2025 GMT
        Subject: CN=53dce5a78810ab597c510b5eb67a7e2efac0260e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b7:01:f1:3a:c4:4a:c5:4b:c7:2b:f5:36:6c:
                    55:68:24:56:05:c5:2e:1a:51:0d:b6:2b:de:ce:64:
                    e6:b1:b2:a0:44:b9:18:5d:1a:02:ee:41:3a:44:0c:
                    8e:78:a3:db:32:34:b6:a5:97:6e:bf:80:6d:c0:95:
                    f0:66:bc:12:01:a5:1d:69:34:13:9f:f9:00:a1:40:
                    f1:19:a8:cc:d7:22:a9:b0:50:30:42:15:2b:26:77:
                    47:30:5d:ae:eb:dc:01:1b:0f:d1:cf:19:d9:5c:3d:
                    2d:57:fa:f1:b2:08:83:e8:b2:e8:bf:fa:d7:3c:a0:
                    c5:84:fe:f7:98:7f:cf:b9:5d:45:62:e8:0f:f3:36:
                    79:b0:48:88:13:db:6a:d5:cb:11:8d:82:19:f5:7e:
                    9b:66:81:bb:d2:25:58:49:6e:33:3c:fb:f0:2d:8a:
                    a5:14:a7:d6:ae:41:04:b1:c1:79:57:60:96:51:d2:
                    96:66:ac:dd:4d:61:dd:a5:36:3d:17:2a:dd:80:d2:
                    4a:ac:6b:0f:f0:d2:a6:e7:f0:6d:8d:e2:37:53:3c:
                    84:57:11:46:f0:35:3b:75:ff:bc:ff:74:0b:13:b2:
                    40:13:45:85:04:8d:44:e8:29:6a:e9:38:3c:7c:2d:
                    3d:94:a3:4a:4a:8c:ab:04:4a:a0:15:a3:95:bb:5f:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:E5:A7:88:10:AB:59:7C:51:0B:5E:B6:7A:7E:2E:FA:C0:26:0E
            X509v3 Authority Key Identifier:
                keyid:33:2A:EC:D2:43:BE:F5:87:C8:79:BB:FE:1F:E4:C5:A5:BE:B3:34:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Myrs0kO-9YfIebv-H-TFpb6zNFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4c4ff2-c7eb-4fde-ad45-33dd70210ff5/1/Myrs0kO-9YfIebv-H-TFpb6zNFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:1d:f5:1f:ed:e1:e2:ca:6b:41:33:f7:fd:f5:b3:a9:da:a6:
         47:f4:48:f9:35:f0:51:97:3b:47:39:be:63:77:80:4c:68:72:
         8a:e8:94:be:9d:5c:7d:e4:6d:6c:d9:45:2a:33:a3:26:63:ad:
         16:ef:a7:41:bf:e1:e5:cf:f7:e5:c2:36:55:27:b8:04:78:f9:
         92:c5:e4:dc:58:1c:d9:21:26:b0:70:d3:65:44:ea:44:9b:1a:
         92:8a:6c:ae:3b:1b:47:e6:9a:e9:a1:38:12:fc:8f:fb:d2:a1:
         57:89:e7:34:24:2f:14:9b:70:1f:5a:88:61:70:0d:81:07:5a:
         fb:74:9a:39:02:ae:5c:42:1b:54:5c:c9:a9:05:2e:db:3b:ef:
         4d:8d:e9:6c:1f:47:57:b4:47:dd:1e:db:d7:bf:bd:73:6c:2e:
         c1:14:02:ab:b1:b2:4c:bb:16:31:31:02:01:ba:39:9f:3c:b6:
         48:65:f9:e6:72:a6:1a:79:4a:c4:3c:20:41:21:4b:06:5e:4d:
         ca:4a:6a:5a:98:23:25:50:b0:d4:53:c7:2e:a6:bd:c3:8a:da:
         64:e9:74:85:cb:1a:22:80:e3:0c:40:e4:4f:e7:4c:01:48:c6:
         73:e2:d6:44:41:1b:ec:be:54:55:30:2b:e0:fc:3c:2a:01:ae:
         a4:da:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:43:18 2025 by rpki-client