Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
File:                     h19M6ROWIYHPfJN236taIl1uWuo.mft (raw, json)
Hash identifier:          C2ZJQdkamgJ0bdgzcfhVZDiKHx5ZQvftw9HHODZDDCE=
Subject key identifier:   07:CC:CB:EC:E5:9B:A5:D4:A0:0C:CD:5D:B6:DD:4C:F6:72:97:DA:B1
Authority key identifier: 87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA
Certificate issuer:       /CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
Certificate serial:       019951FADF22F42100D6C4D9B76759F3E56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
Manifest number:          0A12
Signing time:             Tue 16 Sep 2025 10:03:39 +0000
Manifest this update:     Tue 16 Sep 2025 10:03:39 +0000
Manifest next update:     Wed 17 Sep 2025 10:03:39 +0000
Files and hashes:         1: M5PtAUB6C0YQZ-t3ZklapHkEf_k.roa (hash: HXU2DQvPMIqoZLirjVORFRzXbGSClbgxExOEkxTMUAM=)
                          2: go-J-JwBrpAVGCsK-19AMahhYuM.roa (hash: +GNiaHGQJG90H7ohhR5iHSqVdKCjsbU2hGuORBme6Qs=)
                          3: h19M6ROWIYHPfJN236taIl1uWuo.crl (hash: 4umbQHZ/I5rvujfFCYbxNiqK2Qs4FtIszWHkPUUorEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Sep 2025 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:51:fa:df:22:f4:21:00:d6:c4:d9:b7:67:59:f3:e5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=875f4ce913962181cf7c9376dfab5a225d6e5aea
        Validity
            Not Before: Sep 16 10:03:39 2025 GMT
            Not After : Sep 17 10:03:39 2025 GMT
        Subject: CN=07cccbece59ba5d4a00ccd5db6dd4cf67297dab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:b1:c0:89:36:c3:67:7f:fe:ed:98:72:25:
                    69:c3:18:1a:46:d3:ef:7c:43:da:e3:89:ab:a1:0a:
                    0b:5d:f2:aa:c3:f4:39:c6:4d:81:47:93:cd:08:32:
                    d7:ab:ea:0e:9a:f8:1d:ca:27:d7:52:39:29:59:ef:
                    9c:67:75:74:8c:00:2e:fa:81:95:6b:c7:5e:ed:ff:
                    d6:9b:3b:e7:22:d4:77:d6:57:0b:78:f4:91:54:5b:
                    d2:1d:76:57:ea:3d:b4:61:f9:59:c1:0b:cb:d1:a6:
                    c3:04:28:8a:b7:1a:f4:7d:36:bc:7b:f7:bc:23:52:
                    71:fa:d5:e9:40:e3:c7:7a:f8:4d:21:7d:9e:79:22:
                    75:1a:f3:cd:30:66:b0:56:de:70:68:9b:12:a5:49:
                    f2:60:65:9d:0d:6d:94:8f:be:68:7c:bf:6d:fb:42:
                    e0:e8:a9:94:b6:31:99:5e:4e:c7:a9:33:10:57:f8:
                    d2:91:d0:7a:50:2a:fe:a8:04:a7:9d:3f:53:c4:45:
                    e4:ee:98:3b:e0:da:b5:8c:78:0e:e5:e6:10:0e:41:
                    46:99:3b:42:6b:c8:cb:3b:23:81:ed:96:c8:84:9f:
                    35:0c:06:e8:ca:c0:06:38:b2:05:a7:3e:09:79:78:
                    8c:92:f3:5e:ba:d5:06:ab:f6:fb:e0:37:47:b7:99:
                    ab:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CC:CB:EC:E5:9B:A5:D4:A0:0C:CD:5D:B6:DD:4C:F6:72:97:DA:B1
            X509v3 Authority Key Identifier:
                keyid:87:5F:4C:E9:13:96:21:81:CF:7C:93:76:DF:AB:5A:22:5D:6E:5A:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h19M6ROWIYHPfJN236taIl1uWuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/87607e-5c9a-43a6-8d8a-38dfeaf2b710/1/h19M6ROWIYHPfJN236taIl1uWuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:31:6a:7f:9a:5e:f9:5d:ac:70:bd:8e:86:09:96:1d:5b:a4:
         7c:c0:4d:bd:b8:dd:88:e2:7e:69:a0:cf:05:40:c1:c2:81:d8:
         f4:9a:c7:39:00:66:4e:86:52:61:7e:4d:f6:60:b4:17:29:2c:
         6b:d0:a6:5a:da:07:df:7a:98:da:2c:fa:e0:66:55:24:02:14:
         15:38:1d:75:f9:22:84:2b:1f:fa:5c:96:1c:eb:5b:c2:e3:be:
         2c:ea:b1:da:6f:34:f3:5a:c1:dd:6f:33:36:76:24:09:e7:2e:
         d9:a8:8e:23:e1:db:22:de:9a:6f:84:17:a7:6e:f6:03:d7:44:
         f9:12:04:e7:77:ac:91:f5:1c:6d:11:09:54:18:f3:a6:e6:07:
         18:c5:6e:76:f9:f0:6e:1a:55:76:de:35:f7:9c:d4:34:69:72:
         19:18:62:4e:ba:26:9c:f7:3b:e3:3f:67:7a:7c:90:7a:58:45:
         af:e0:8c:fa:3b:6b:32:14:52:cf:bb:3a:fe:67:c4:7f:b7:6e:
         89:3a:98:6a:bf:f4:75:35:35:31:83:c0:67:3d:60:96:ce:f4:
         da:01:2e:48:9f:85:6e:35:a1:15:ce:ff:42:ee:9c:66:d0:24:
         87:f3:79:9e:7b:e2:77:e2:1c:34:c3:98:11:4b:46:98:f3:80:
         f0:71:a3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 11:53:13 2025 by rpki-client