Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          4Yah8ro/qB6tT2NQbs2fdhr42kZRKaZF29PC3V9/Mjg=
Subject key identifier:   0D:2D:EA:A5:7A:1A:21:42:CE:9E:54:AE:26:3B:93:F7:39:9F:64:16
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019961A21C45A62A3535B6EE379A957E74A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0A3D
Signing time:             Fri 19 Sep 2025 11:00:37 +0000
Manifest this update:     Fri 19 Sep 2025 11:00:37 +0000
Manifest next update:     Sat 20 Sep 2025 11:00:37 +0000
Files and hashes:         1: 9BckWYd3Zpv7VuHw83B3GgbSq2c.roa (hash: 1ciDlQb2CZ1qp4TAdUK8jkR1eFPaY1eqjyHYTIjMv0Y=)
                          2: H1EL1U-GIPFFr0f1Q-aFy7Wb8e4.roa (hash: iqzV8mEdZbkZ5VJezg/UaqQeyUszupnBM56S/6XnGcM=)
                          3: ZgwCc5_6MulL4iL_zC1XUNHyAbI.roa (hash: /jcVyr8eQJZjytkrqctvHq37ILkIvanUDZTLnrClopA=)
                          4: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: 8DxIGEQv8+G2hMCxprkPvNnIV/cQFWNfxS9zGXairPA=)
                          5: eedbzYzEcmD0bN8sTsEevoG4QUg.roa (hash: 6jdJpPkj8W0Pxp6tNFGamsmHhGO42KF7tGZ5t9MB8aQ=)
                          6: u95K4fV2qtYCciDZ9UwzIFzAw5A.roa (hash: ayZrkho31pPxiVCGyzfE95bEFSC8qkDwrF+lSVt63SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Sep 2025 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:61:a2:1c:45:a6:2a:35:35:b6:ee:37:9a:95:7e:74:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Sep 19 11:00:37 2025 GMT
            Not After : Sep 20 11:00:37 2025 GMT
        Subject: CN=0d2deaa57a1a2142ce9e54ae263b93f7399f6416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ab:34:af:c3:8a:95:36:56:2f:b7:25:58:73:
                    7f:ca:c4:91:e8:ea:03:0d:95:c3:4b:90:e5:35:2f:
                    0e:3d:cc:c9:6b:69:d9:f7:8e:5a:2a:3b:69:4b:3e:
                    bd:68:a3:52:48:6d:94:52:c1:d2:cb:7d:f0:fb:0f:
                    2c:29:8e:19:dc:e1:fc:d0:1b:d2:83:9e:dd:ee:dc:
                    60:8a:e4:cf:b2:3c:23:bb:5a:d1:c9:a1:2a:2e:14:
                    f8:01:44:c7:45:08:91:71:c5:92:5b:2e:65:44:6a:
                    40:5b:00:fa:9f:37:6a:17:e2:89:49:a9:43:1c:0a:
                    24:24:68:eb:08:c6:40:aa:b6:93:de:3d:63:7d:1f:
                    23:86:9e:05:d4:71:a7:d5:eb:dc:69:f2:af:05:7b:
                    ac:3b:1d:bb:71:f0:1e:be:11:4e:6f:12:74:fc:07:
                    0c:bd:5d:49:06:f0:99:29:12:01:3e:c2:88:b8:cf:
                    0f:6c:92:54:a6:29:82:ea:b1:3b:13:62:f4:e8:19:
                    7e:37:93:8b:98:a5:25:69:86:fc:36:dc:54:00:8f:
                    d5:c1:d3:26:67:77:8a:b8:20:f4:cf:14:bf:c8:95:
                    d2:5d:c6:8e:83:87:38:d0:77:c4:c6:d9:74:2a:85:
                    6a:2e:3d:8b:1b:53:6d:2b:58:c4:e3:9d:2d:a9:fb:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2D:EA:A5:7A:1A:21:42:CE:9E:54:AE:26:3B:93:F7:39:9F:64:16
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:06:5b:46:0c:c1:46:d7:da:21:72:50:75:43:78:93:85:78:
         4c:1d:1a:66:48:5a:68:de:43:4b:5c:75:96:53:72:de:fb:b8:
         4a:a0:62:27:39:22:94:f0:4e:6f:f0:29:f0:7c:39:65:71:1a:
         b1:d5:3a:82:5f:a9:ec:03:0d:f0:97:cb:4d:96:f7:5a:aa:3d:
         7b:6a:7e:5e:25:7f:de:79:d0:e2:37:a1:dc:fd:8e:fa:14:c2:
         a1:9d:c2:af:6c:d8:41:43:69:d2:66:a6:24:bd:23:e5:74:78:
         ba:d8:2a:d4:35:3f:2f:03:a3:fb:6e:fe:97:4b:43:02:ef:d6:
         ad:ee:68:6f:4e:2f:03:53:3d:60:5c:aa:88:bf:d7:cb:f0:79:
         30:cc:98:a7:f7:5a:e8:8d:93:63:1b:a3:8e:9e:75:b9:d2:f4:
         e2:84:7e:b2:26:0c:95:cc:5f:7b:d2:ef:10:2a:04:49:d2:2c:
         06:77:1b:c0:92:59:0c:5f:4e:47:1d:79:63:bb:7b:ae:c9:1b:
         15:d8:c6:36:39:09:0d:3f:c4:d2:0b:db:fc:a8:eb:70:92:0a:
         ce:ea:d9:54:a2:67:f1:fd:20:d5:07:13:b1:78:70:ed:01:f4:
         96:6c:ed:55:1b:a9:4c:80:6d:de:9c:2f:75:e1:3f:32:8f:7f:
         f9:71:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:37:03 2025 by rpki-client