Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          UQCrzGc0N1dawHx46eG+//TBmEqgsXlse7Az7/90u+U=
Subject key identifier:   49:82:F7:D7:BE:6F:4F:1D:B2:2F:65:28:C6:2A:D4:F5:1B:47:C9:80
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       019933EE1DD90BE19F672DC70910CF3E6280
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          0373
Signing time:             Wed 10 Sep 2025 14:01:07 +0000
Manifest this update:     Wed 10 Sep 2025 14:01:07 +0000
Manifest next update:     Thu 11 Sep 2025 14:01:07 +0000
Files and hashes:         1: Ou9DEYWo3su4Hpz7mWRAUY0_xHI.roa (hash: 8FTp4AmQ8yrNnOSj2Y/1nrH6lz6jMuxxvh24QGuNmXY=)
                          2: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: 1PUTgI0qYBJt7y2t3px0cJzirYloSRtcITkgBWkpg3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:ee:1d:d9:0b:e1:9f:67:2d:c7:09:10:cf:3e:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Sep 10 14:01:07 2025 GMT
            Not After : Sep 11 14:01:07 2025 GMT
        Subject: CN=4982f7d7be6f4f1db22f6528c62ad4f51b47c980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:bb:88:f4:b7:51:b7:29:87:b8:f6:bc:c9:
                    3a:98:fc:00:7e:ae:f3:5c:12:64:35:71:20:c3:48:
                    9f:09:d5:06:de:c5:fe:9f:86:43:10:14:09:60:1f:
                    09:0f:e5:af:2a:c2:a4:e4:8a:a6:5a:c1:ff:31:e8:
                    a3:8b:8a:e6:91:59:34:62:7f:64:07:44:6a:01:14:
                    8d:db:0f:33:bd:05:a1:b2:77:49:a2:91:26:e9:86:
                    8d:31:a3:9f:bf:2c:37:61:6d:e1:a5:c4:11:bd:b2:
                    a4:15:f8:ea:2a:78:cc:a5:28:55:29:d7:23:4b:3f:
                    39:cf:9a:e7:59:b3:79:76:2c:0c:b9:0a:9e:49:45:
                    c3:4c:5f:75:57:af:e9:08:48:89:cf:fd:ed:cd:f1:
                    51:34:03:5e:00:b2:8e:f0:30:41:87:c1:75:36:b2:
                    a0:3e:96:23:43:c3:a9:89:cb:6c:ae:db:df:72:39:
                    7b:8a:b7:b3:1d:b5:33:b2:0c:40:c9:60:03:c8:cc:
                    82:79:93:36:70:15:a5:f5:68:b3:a0:19:9c:8f:67:
                    29:47:3a:7e:bc:6d:6b:d4:f5:15:e4:9a:54:95:18:
                    6a:df:4c:c3:2c:00:bd:c3:2d:be:01:64:66:8e:61:
                    0b:b2:54:e0:e6:21:a6:d6:6b:bb:67:15:31:c5:7b:
                    cd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:82:F7:D7:BE:6F:4F:1D:B2:2F:65:28:C6:2A:D4:F5:1B:47:C9:80
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:44:00:8f:d3:c9:50:92:10:8e:13:55:40:03:43:b3:15:3b:
         d9:5b:4d:b2:5f:b6:ee:72:ac:0f:55:0d:81:e9:5d:0b:37:7b:
         18:78:da:9c:a6:b0:dc:d5:72:84:0d:2e:64:80:f7:23:d4:d0:
         5b:76:f2:0a:1f:da:5f:c3:0e:39:fe:f5:14:ea:da:23:46:ba:
         25:90:61:12:8c:dc:9b:f4:b3:6d:d1:a0:1e:94:60:11:0f:80:
         26:af:98:fc:59:e3:7a:ca:bc:a0:b8:d0:6e:31:7b:6f:6b:e9:
         87:10:4a:7f:f8:35:bc:47:8a:81:a1:60:bd:62:be:c5:3b:c1:
         b7:c8:b5:5f:d7:52:66:c5:b6:c0:78:25:90:bd:2a:80:92:1e:
         e7:6a:6c:e7:ef:a8:6d:a5:2d:22:58:ff:da:b0:0f:8a:9e:2b:
         6c:77:e6:98:9f:49:a1:16:17:f1:ad:83:5d:d0:43:e3:2f:0a:
         e2:9e:c9:74:d8:05:fd:44:c0:15:4f:e7:14:94:5f:a4:a4:ee:
         9d:89:f5:2e:c8:cf:5e:a6:28:87:ff:a3:62:8c:4c:a4:e3:3a:
         2b:a4:f2:7c:74:f1:50:34:da:9c:34:29:a0:f8:ab:29:32:c0:
         cd:53:b3:4f:09:57:16:33:9f:7f:17:f5:c5:4a:37:0c:c7:13:
         75:36:af:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:39:12 2025 by rpki-client