Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
File:                     Rro_gAObnnhM-yS_LH3bJOGQCnY.mft (raw, json)
Hash identifier:          RbaznKBjZih0QdLck3Asi7pdwLRoLNQudWKym2XRpEs=
Subject key identifier:   14:76:E0:8F:0F:60:7F:02:EE:2D:10:D0:39:A3:AC:08:A7:4E:62:93
Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76
Certificate issuer:       /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
Certificate serial:       0199529E77FCF63B343BBE75E10C65C5572D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
Manifest number:          1695
Signing time:             Tue 16 Sep 2025 13:02:21 +0000
Manifest this update:     Tue 16 Sep 2025 13:02:21 +0000
Manifest next update:     Wed 17 Sep 2025 13:02:21 +0000
Files and hashes:         1: 6OzuFuoHFoTdTwv4FRn7LoIvB5s.roa (hash: e4WYSwjwkMxNR6fSo9iakfDeNdFMp+Vk1BRcdY4nLcA=)
                          2: Rro_gAObnnhM-yS_LH3bJOGQCnY.crl (hash: lyOHQ02lL4rJZ68RuB+cTBA8l4spTuZD3hV0x6zv96Q=)
                          3: TrNuqWdgLhGTxn5VxoYeyfzOKkg.roa (hash: Rqi2Sn0fAAAxy2y3ILi9hXub3082liYhSLIo32eP1Fg=)
                          4: VlDA6Ug6cUL_yTYBt63ZARwd1mw.roa (hash: kx60AZ5dZTQ/qqeCrvP99skkzaJh8HaHmSw61ZkqSCc=)
                          5: Xd-kVhv1wvUCMFGkclVtFTV9N-Y.roa (hash: GQJxOGAvPg3sAXcYghbtcTO+/Blw76yCa2ak8uLEs2c=)
                          6: _npBPU_qU8Q1a65hoUMHOBSefXQ.roa (hash: e8tqm7dxs7+LcvLZgwgmWSIzqUCH5DxQZJAY7CIpCfc=)
                          7: sb8iFvZQpOKvIJHbQq_wneS-_xo.roa (hash: ZcwJ2Aq0h+x6gFyGaf2iA1L+iKFHuWvjzDw5EUsE6Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 13:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:52:9e:77:fc:f6:3b:34:3b:be:75:e1:0c:65:c5:57:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76
        Validity
            Not Before: Sep 16 13:02:21 2025 GMT
            Not After : Sep 17 13:02:21 2025 GMT
        Subject: CN=1476e08f0f607f02ee2d10d039a3ac08a74e6293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4b:3a:28:bd:c2:3d:a8:76:6d:94:e0:55:85:
                    3c:a4:bb:29:1b:a1:66:a5:ea:cb:f7:31:d9:f2:18:
                    3a:f3:40:62:b5:2c:c5:37:e7:ae:a9:6a:5e:46:ed:
                    3f:9a:a8:21:32:6c:06:4b:18:67:43:a8:ab:3e:7c:
                    aa:e9:2b:5a:b2:7a:dc:32:ac:5c:59:37:2c:6f:91:
                    e8:88:1e:18:6e:d4:1d:35:f6:ec:28:3f:60:39:8e:
                    52:9c:d2:46:66:57:b5:d1:92:21:f9:6b:90:40:f7:
                    bb:59:78:f7:75:1d:3c:79:06:e0:be:70:c9:5c:7d:
                    af:0e:50:b0:9e:19:74:f5:df:2f:a0:05:2c:d1:52:
                    c8:70:78:fb:26:f1:32:50:90:bd:d6:48:c2:09:1d:
                    d6:c6:a1:8d:78:58:e0:fb:12:17:d1:03:e4:a7:5f:
                    9b:ab:2c:4e:55:a4:65:30:d5:69:1d:a9:b2:61:45:
                    b0:e2:7d:37:79:5e:ae:93:cf:45:04:91:81:11:ac:
                    32:60:a5:20:5e:46:ad:8e:d1:f6:f9:9e:9f:25:c9:
                    c9:0f:c2:d6:d2:d7:9b:6f:1a:84:a5:02:ff:34:c7:
                    38:bf:f2:bd:fa:09:39:44:7c:98:81:18:fe:47:9d:
                    17:05:23:2d:db:c7:d3:5b:30:cc:7d:f7:7c:63:27:
                    4b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:76:E0:8F:0F:60:7F:02:EE:2D:10:D0:39:A3:AC:08:A7:4E:62:93
            X509v3 Authority Key Identifier:
                keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:d6:9b:bb:e4:bf:ad:b4:fc:97:bc:37:f8:4e:4c:24:e1:
         e4:8e:98:f0:bb:fa:4d:cf:04:79:d6:1f:ec:55:77:50:02:00:
         b9:05:3b:00:ff:71:57:28:62:94:ae:41:e5:91:53:46:36:56:
         13:96:d0:6b:c5:ba:fc:7e:e1:25:8e:08:52:95:75:c8:55:e7:
         e1:2e:9e:d7:0a:e7:11:5c:f7:09:46:b6:05:ac:0d:c4:18:ff:
         d5:b9:87:80:ce:5f:b2:8d:74:26:43:29:31:16:47:70:4d:41:
         49:fb:a5:ac:38:d2:81:5b:4a:44:66:65:ca:a7:8b:9f:ed:2f:
         a6:75:dc:e0:da:86:69:0b:fe:36:b4:62:47:ed:38:78:ce:28:
         37:db:e8:cd:22:ef:f1:97:22:11:02:0f:d5:c1:65:5c:5a:a1:
         d3:65:c2:c9:3f:5d:3e:91:b4:38:24:e7:9c:71:e3:a0:44:cc:
         98:e4:84:ba:4b:cd:a4:1b:8f:28:e1:ea:a4:35:91:14:eb:26:
         7e:61:76:9d:2c:89:0f:a5:1c:8c:52:1c:55:82:71:f6:a1:af:
         e8:00:07:83:64:7d:d1:6f:85:8d:96:08:91:b9:d0:4f:13:7a:
         d4:c7:7d:b2:3a:d1:4d:aa:6d:ce:7c:da:1b:96:44:87:d0:08:
         d2:14:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 16:11:57 2025 by rpki-client