Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          9BZYkcHAtdSUW+qvPnzHo+Y8oRA+1qz+/6YU2qCgePE=
Subject key identifier:   46:A5:E8:A8:C0:BA:56:E8:F3:D4:86:AE:F5:A6:65:54:DC:D0:61:66
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       019A01112D06203A61FF0732524B242B09D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          1034
Signing time:             Mon 20 Oct 2025 10:01:33 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:33 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:33 +0000
Files and hashes:         1: Xx4qE33JyRm22QhkLWfKDRWAGnk.roa (hash: VBDGbrM1tTGjVGL2Bxa5hAlgL/jyV9v4XsVJ8TB6uSs=)
                          2: eG2TuLX8aQVwCJ3-wzt6pkOEazU.roa (hash: I5NjIqWx/H03PJ2xIH/VMY1e8Yxikj5eCAeypnxIYcY=)
                          3: mHOne7l3lhdaqSro0d11vLE5d_4.roa (hash: 3sZoQqde77oR7zY/rsYSyM4QGdtUrSErY7LS0PKr8xo=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: fS7X4kvx72g3AlecYT3Y2xRiphD2ByrzCGKtfv9iX9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:2d:06:20:3a:61:ff:07:32:52:4b:24:2b:09:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Oct 20 10:01:33 2025 GMT
            Not After : Oct 21 10:01:33 2025 GMT
        Subject: CN=46a5e8a8c0ba56e8f3d486aef5a66554dcd06166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f5:ee:02:94:aa:cb:de:82:c4:ff:96:33:30:
                    43:8b:1c:42:b2:12:a3:9a:f3:c5:88:04:8c:23:ca:
                    2a:f2:ba:89:89:30:b0:b3:15:01:b8:5d:cc:cc:6e:
                    28:0e:09:8f:02:c3:93:f1:88:b7:56:70:51:fe:d0:
                    9d:ac:be:c2:de:1f:6a:48:03:7b:06:22:a3:3e:82:
                    4b:61:2d:41:5d:a0:69:85:e0:87:39:d3:3d:d8:c3:
                    8b:24:5c:00:c9:4f:ef:ab:43:39:67:64:63:89:99:
                    03:90:ed:44:90:17:a9:22:b0:e9:46:5a:2b:e1:03:
                    a2:8f:33:e8:72:74:38:42:98:15:93:c5:f7:7b:17:
                    e6:2b:98:c5:28:b2:7b:20:58:9e:5d:4d:d2:d9:70:
                    2a:24:e1:e1:5a:9c:b4:b4:d7:d5:cf:00:8c:28:79:
                    e3:25:42:ea:57:b6:be:12:ff:ac:b6:4c:bb:92:f0:
                    a2:c8:7d:cb:04:eb:11:72:3b:bd:63:26:d9:fe:15:
                    44:be:d8:99:c6:eb:5c:6d:0e:5b:98:72:4b:a9:1b:
                    4e:0f:3e:5f:32:aa:2e:91:a6:ca:2a:ce:7b:5c:08:
                    60:40:2e:d3:83:bc:68:e4:c9:19:1a:66:9f:9e:a5:
                    52:c7:23:bf:bb:ce:59:12:32:ee:f5:9d:f2:cc:06:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A5:E8:A8:C0:BA:56:E8:F3:D4:86:AE:F5:A6:65:54:DC:D0:61:66
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:35:80:87:48:f6:dc:96:83:87:38:eb:c5:4d:4c:f0:52:95:
         5a:09:f1:22:dc:cb:7c:cc:72:d1:36:0e:18:a3:3b:7a:98:62:
         43:e2:c9:6f:e8:ed:43:df:73:75:07:49:29:97:87:2e:6b:5c:
         5f:64:04:8f:54:86:c3:d3:ce:58:04:9f:18:78:4e:24:12:49:
         52:7e:1e:e8:64:b0:c1:68:16:39:83:0d:15:87:67:df:64:1c:
         38:cc:05:ed:42:fc:a5:94:07:e7:fe:6c:7c:d6:40:f8:d2:d9:
         4d:b4:de:03:9e:9d:aa:92:24:77:0f:bb:a6:d7:21:e3:4d:55:
         65:f8:12:36:04:45:2d:1a:64:4a:b8:aa:dd:33:3d:cf:85:55:
         95:d5:6a:b9:cd:fc:ca:44:e2:9c:63:ec:88:ad:6b:2b:66:96:
         47:ab:2d:27:46:f0:13:10:1f:f6:5d:f5:e9:39:3a:50:70:53:
         e3:73:f1:0d:94:5e:8a:5b:ef:2a:da:ee:a1:b2:3d:ec:17:62:
         f3:33:92:6d:7c:01:c7:e7:45:bc:bd:1b:5c:c0:f3:54:06:3f:
         cb:af:56:43:84:d3:f6:7d:1d:9d:4c:30:0a:5c:f2:99:49:3b:
         bc:04:c8:1e:67:07:0b:b0:4b:22:58:54:33:87:8c:a3:fa:b9:
         4c:29:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:16:56 2025 by rpki-client