Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          +K5bTM+ehE6mBT73gRC9mEpAZxEkMMDdqUNPNj2+jvI=
Subject key identifier:   04:44:E8:B9:42:82:9B:31:75:E2:38:EE:B0:66:21:B2:3D:10:20:D8
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       019930B5F075E2EA7848E95A37A48DB5BB60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0A3A
Signing time:             Tue 09 Sep 2025 23:00:53 +0000
Manifest this update:     Tue 09 Sep 2025 23:00:53 +0000
Manifest next update:     Wed 10 Sep 2025 23:00:53 +0000
Files and hashes:         1: Srh5g0ojceAQmtMmznAeDlPYrmw.roa (hash: BwzeKUJcI7HC+qaLX49heipiCGP9LZF83f1jKxCnaAY=)
                          2: YJaCMuaqIfvKw8ug1wakmaHiyAo.roa (hash: HquheyE6JifaPiBPOhyTjTI1vWpMbf7om8VgpSRLgdk=)
                          3: gcpwJGsxkTuqm5lkp6udqQ0ESiY.roa (hash: gi7helaQYpbx77moO9p/Ln33KR60Z884I8k4Z0Fll14=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: I4DhRhAKpUHwiVomKz157vig5QXVmJtzDynWgNPJel0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 21:45:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:30:b5:f0:75:e2:ea:78:48:e9:5a:37:a4:8d:b5:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Sep  9 23:00:53 2025 GMT
            Not After : Sep 10 23:00:53 2025 GMT
        Subject: CN=0444e8b942829b3175e238eeb06621b23d1020d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:82:51:ae:f7:1e:d0:80:33:6b:b0:89:16:bf:
                    6d:e3:d9:0c:14:c4:4d:46:5e:cb:f3:56:2d:9a:39:
                    20:cb:57:09:37:7d:95:bb:fd:a5:bd:d7:e3:d3:52:
                    95:71:ec:a5:f9:1a:df:5c:52:1f:15:e4:fa:5e:89:
                    de:7a:01:3e:53:c6:38:84:8e:64:98:30:6b:18:b8:
                    c6:81:3d:ac:b5:40:1f:cb:e3:53:48:bd:d4:c0:4c:
                    63:b2:ac:ef:8b:8c:e6:f2:e3:55:a6:a0:6a:07:3a:
                    6a:e7:9b:83:37:ef:f5:3d:e6:c7:b4:41:8e:5a:6c:
                    60:cc:d3:b9:c4:2a:0d:0a:d5:96:50:06:a9:06:6e:
                    b0:05:12:f7:66:bd:ed:05:a9:51:6c:76:bd:4b:a4:
                    89:ab:c7:ba:31:58:ed:4b:3f:cb:1f:0b:c0:c0:38:
                    7f:48:74:c5:ef:aa:3b:3d:74:f4:99:d9:19:83:6b:
                    0b:7a:fe:83:e3:c7:ea:2e:a3:04:1e:60:b9:e6:65:
                    52:63:72:2c:29:bb:96:95:53:4b:ef:fb:c2:d7:e0:
                    a7:a4:ca:32:1d:30:21:1b:29:dc:ec:58:73:ec:28:
                    15:db:ae:72:c0:9f:88:c0:64:39:e9:be:98:f1:28:
                    6f:c4:fb:6e:73:c7:59:5d:c5:4d:be:6a:13:a7:4e:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:E8:B9:42:82:9B:31:75:E2:38:EE:B0:66:21:B2:3D:10:20:D8
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:72:89:2d:b5:21:c1:47:55:1f:e9:a9:c0:f1:f0:d5:e3:11:
         00:55:3e:7b:4c:ba:f8:48:2b:eb:4b:1a:8a:a6:e2:90:db:ce:
         16:12:e0:8d:50:98:f5:35:3a:ac:8f:df:af:a7:81:4d:4a:40:
         8f:c7:86:48:87:52:a4:ad:d6:0d:32:6e:f4:10:1f:e2:ba:20:
         7b:c9:4d:62:a1:6c:7d:c4:ab:5a:c2:67:1d:ae:4f:43:33:65:
         95:14:85:b9:2a:b3:a6:30:e5:d1:e2:d5:fc:c7:c1:77:1a:02:
         5d:80:c7:1c:4e:8a:37:7a:53:cb:7b:ca:53:59:ef:15:cd:65:
         42:97:3c:2f:67:6a:ef:a9:55:dd:3d:62:e3:c1:73:e2:da:3f:
         1a:0f:50:bb:ab:4c:1b:10:67:fd:4a:f9:76:c6:50:be:ca:55:
         76:ac:66:15:5b:70:c8:db:9f:9c:5d:74:22:45:4b:5b:77:72:
         43:0f:0a:7f:cb:04:da:c0:b4:da:d3:d4:b8:ea:02:a6:06:62:
         08:4b:76:f8:da:a2:1d:1e:ed:fa:d7:92:93:e0:4e:a7:7d:6e:
         f1:f6:03:c7:73:b8:97:df:19:71:85:fd:96:4a:1b:6b:16:a0:
         1a:5c:c3:de:ab:fa:d8:49:39:fc:1b:dd:2a:c5:6b:b7:74:8e:
         41:eb:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 04:55:07 2025 by rpki-client