Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
File:                     A3hitGCMefRQKV7FyAx8etbf4qI.mft (raw, json)
Hash identifier:          M/ox7svDnrtNwG6E4745tWDgzaejZixYqgZLMej1xyY=
Subject key identifier:   2D:9E:CC:2C:23:A4:38:B3:1F:26:8E:71:51:0A:C5:9B:8D:F2:6C:76
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Certificate issuer:       /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial:       019930B5A72B50195089053F46C1A81803A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
Manifest number:          1189
Signing time:             Tue 09 Sep 2025 23:00:35 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:35 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:35 +0000
Files and hashes:         1: A3hitGCMefRQKV7FyAx8etbf4qI.crl (hash: 8i6JPTPYffloGfyEs9k4IODs2uoH/tLxgngdJX7i1Qw=)
                          2: H1OMOC2BAR_5642Cu7ZwMViudi8.roa (hash: XWP0BQbCva9Xp/f//R3LpuOJ9bWFeCg7RqrDman+FAE=)
                          3: _KO8Oi7vtPgAowOISHE5epxFK5Q.roa (hash: 8164lOA7eSdWjoo8q/K2tQc7tm9W3hWFjEkyCggGOH4=)
                          4: pg2Uo1mGaRZ4g8oAbIXuXT68ouw.roa (hash: dY7d7wlBY9scutfRZI+Jc0/ht66poZjZN1QodpAABEg=)
                          5: rS4RgydKxGdwOWf1j4StfouO-tE.roa (hash: sFUBBhbDyvVoCqaYLXicDjVpE7stEZC/MmSdQhndwec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:a7:2b:50:19:50:89:05:3f:46:c1:a8:18:03:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
        Validity
            Not Before: Sep  9 23:00:35 2025 GMT
            Not After : Sep 10 23:00:35 2025 GMT
        Subject: CN=2d9ecc2c23a438b31f268e71510ac59b8df26c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:dd:50:71:ce:9c:52:3f:c9:08:13:17:4b:9f:
                    25:fd:67:37:04:da:75:a6:23:d7:24:15:84:ad:f3:
                    d5:7f:dd:fa:ea:e3:11:08:17:8b:69:3e:32:54:17:
                    fe:ec:62:83:7b:f8:73:9f:e9:c2:e6:ca:33:a1:c2:
                    9d:ab:71:f4:96:d0:0c:34:96:3e:c7:ac:68:09:78:
                    3c:41:fa:47:8b:a6:2c:ea:b2:28:ac:6e:a7:89:95:
                    11:91:d8:58:1f:e0:c1:c2:31:2f:54:69:50:bb:16:
                    63:ad:f6:37:ac:93:b7:5e:7e:07:89:8a:9f:cc:f3:
                    c4:71:f1:1a:5b:73:78:6f:5d:d7:e5:78:45:22:05:
                    54:d7:4e:3d:22:f8:2a:10:cc:24:01:62:ee:e3:f4:
                    9f:13:9a:fa:b8:59:d0:c8:48:68:14:41:00:08:91:
                    31:37:91:fa:f4:a2:ee:bd:63:d8:9b:ef:0f:1d:8d:
                    90:99:26:cc:d6:bc:9d:3b:4b:f5:5c:c6:11:fb:29:
                    5f:28:d5:5f:e1:0a:18:bf:53:3c:e9:71:36:14:1c:
                    4e:ec:48:b3:d8:08:91:a2:6c:24:bb:9f:94:82:d0:
                    c4:c3:03:d3:96:0e:fa:b0:c4:5e:d5:dd:ce:0f:63:
                    cb:ae:88:31:db:de:7f:ca:74:84:3c:49:d8:8c:78:
                    07:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9E:CC:2C:23:A4:38:B3:1F:26:8E:71:51:0A:C5:9B:8D:F2:6C:76
            X509v3 Authority Key Identifier:
                keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:86:d1:bc:60:0e:82:69:02:6f:17:1c:c5:bb:f0:42:b2:b9:
         5d:22:6a:3f:9b:86:c2:2e:af:4c:bb:42:8f:22:8e:50:b3:fc:
         f0:0a:c7:15:f4:80:6d:cd:9d:a7:09:03:3e:b6:38:e9:82:61:
         21:d6:f3:63:d3:95:29:02:9d:bd:48:6b:d8:c6:2c:66:3d:1c:
         90:fa:08:94:40:95:44:10:c3:ea:d9:25:d0:d9:ad:02:f1:e3:
         3f:25:2b:13:6e:b1:0d:88:58:d5:1b:3e:4b:d1:76:e1:2e:1a:
         7d:60:25:d1:35:b3:7a:6a:7c:a7:a5:ff:ec:fd:57:7a:fd:b0:
         58:fb:d6:ff:66:d1:47:13:be:89:0f:2c:12:5b:52:a3:d3:59:
         49:1b:51:45:3a:e1:11:d1:bc:7a:d5:d8:ba:70:7e:90:18:25:
         16:94:1d:27:db:bd:6b:ec:2e:17:8f:b8:e3:27:bd:1e:2f:d9:
         a3:4b:f1:7e:83:db:d9:61:48:28:32:39:f8:09:18:53:34:cb:
         21:ba:5e:f7:71:33:90:d2:2c:f0:f7:b7:f6:57:5c:37:fc:b6:
         d3:16:a7:dd:3f:a7:e1:a2:c9:7f:61:66:52:a5:70:8c:16:91:
         a7:ef:72:8e:4d:8e:60:17:73:16:49:a7:62:5a:44:41:ad:35:
         ad:49:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:01:14 2025 by rpki-client