Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          LjOU2IGHXVrhTsazJO6xs4T0bHSuEJOMt7Jopye/MnU=
Subject key identifier:   56:E4:1C:CF:BB:8A:67:99:6C:24:B2:A4:93:A3:A0:86:5A:37:F1:3C
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       019A2EC4F55BB7D9122940F3CC1830BFCBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          16FF
Signing time:             Wed 29 Oct 2025 07:00:51 +0000
Manifest this update:     Wed 29 Oct 2025 07:00:51 +0000
Manifest next update:     Thu 30 Oct 2025 07:00:51 +0000
Files and hashes:         1: 8gvSRkioiol7AtclW0w3QDNdRw0.roa (hash: pAF2HpC02c8LxHhm/ivKqiw2U8OBqawxXoZZFN2vllM=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: Duu3KcViC5B4Cmr0la+h+BsdxyIqNLqvZCTLrpAcOIE=)
                          3: VqJZEln3bccahadYDW0ePgV1gdw.roa (hash: CgpHiF36vVgykBJlcL4O9MnI1LRoTpD9E00VJ7RhYwg=)
                          4: wQk6P3JazTtfJ7Qbak1iF7pmDzU.roa (hash: yyhyj8+uWZT4ObCsZinsPoUAt/nN+0r3AmItPKtF2y8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Oct 2025 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2e:c4:f5:5b:b7:d9:12:29:40:f3:cc:18:30:bf:cb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Oct 29 07:00:51 2025 GMT
            Not After : Oct 30 07:00:51 2025 GMT
        Subject: CN=56e41ccfbb8a67996c24b2a493a3a0865a37f13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:60:68:d8:84:ed:a1:6c:ee:5b:b3:c1:76:
                    c9:02:62:b5:1a:ed:55:cd:bd:e6:35:20:76:4b:51:
                    cb:c4:98:79:c7:71:da:2a:ed:74:28:6a:55:fd:54:
                    5d:81:fe:11:c2:d4:93:10:eb:47:3b:17:5c:79:61:
                    56:23:36:b8:fa:5e:fe:43:92:e2:d7:ec:af:19:5b:
                    7c:09:93:24:29:8e:55:59:2b:1a:92:61:18:46:35:
                    57:a6:48:45:29:53:6e:1b:d6:40:5d:24:16:b5:f3:
                    ef:fe:9a:36:57:d5:cc:cb:bf:2c:58:38:0b:52:a6:
                    50:65:15:7b:bd:9f:1c:c9:9f:b5:26:06:88:b2:bd:
                    b4:7b:06:c6:8e:7b:e1:ef:01:56:c7:ef:9f:df:5c:
                    80:43:61:e3:7b:33:ed:d9:80:cb:27:85:1e:ef:77:
                    4f:2d:fe:a8:a2:c4:e6:6b:2b:16:9b:de:be:77:c1:
                    4f:b7:27:fb:cd:b2:4e:d0:0c:03:40:f1:a3:0c:ba:
                    6b:ce:77:91:a7:5a:a7:84:27:84:03:ba:2a:36:0c:
                    db:51:00:2f:fa:8d:13:b8:c9:f6:e1:58:cf:de:d4:
                    c3:ad:13:44:73:8b:ca:d5:a3:25:64:30:7f:8d:5f:
                    bb:6d:6d:32:de:49:5b:cf:53:25:e1:5c:68:63:14:
                    c5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E4:1C:CF:BB:8A:67:99:6C:24:B2:A4:93:A3:A0:86:5A:37:F1:3C
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:74:e0:06:e1:94:3b:fb:d2:d8:c6:0b:42:3a:76:44:d3:02:
         ba:42:c1:4f:46:c5:fe:c0:9c:63:5f:2b:c4:af:ca:22:b9:2e:
         f8:6e:c0:c3:ff:56:11:b4:82:a4:1b:30:d4:18:b7:e6:8f:08:
         08:32:4c:16:93:42:d0:7f:b0:0b:39:49:a6:27:51:2a:23:6e:
         94:47:7d:90:dd:d5:0f:e3:3d:59:93:6e:d9:d3:7b:21:53:71:
         0d:ce:90:33:f3:d6:4d:41:df:7e:39:ea:87:2b:37:f1:cf:cb:
         f8:5c:fe:ab:41:cb:79:3b:a8:43:0c:3f:f2:8a:b2:d3:4e:8f:
         af:d9:4c:9c:81:ef:08:a4:e2:52:b2:aa:91:e3:c6:8d:bb:b9:
         f9:0b:3c:0a:88:51:bd:92:06:5f:71:f9:e7:ba:f8:22:f6:a4:
         38:0b:8c:ee:fa:98:09:94:a6:ad:1a:93:e4:67:ad:75:2c:d9:
         86:7d:1c:55:6b:03:75:b8:39:47:aa:34:f0:1b:37:9b:d2:dd:
         58:e5:c0:cd:c9:55:a8:19:bc:35:76:50:fd:ea:67:db:8f:01:
         a4:1c:ce:a0:c0:5d:58:72:c7:df:b9:60:b1:f6:06:53:91:44:
         5c:a3:85:f7:b0:16:64:d1:d2:3a:65:29:27:e2:5e:1b:28:fb:
         51:af:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 12:22:08 2025 by rpki-client