Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
File:                     zM1YPI1xokJ-AGDjzJJPMtwaggs.mft (raw, json)
Hash identifier:          qcXjrGL+nY1IhEiMTKy31D+PmtHSdNwiLu6f085aNTs=
Subject key identifier:   5B:C0:11:24:19:E4:E3:8F:C1:76:CC:77:C7:D6:92:05:CE:EB:75:62
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Certificate issuer:       /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial:       019A09A5AFA1A5074CF140B41052928B4119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
Manifest number:          0C85
Signing time:             Wed 22 Oct 2025 02:00:44 +0000
Manifest this update:     Wed 22 Oct 2025 02:00:44 +0000
Manifest next update:     Thu 23 Oct 2025 02:00:44 +0000
Files and hashes:         1: G8EdfZKFW8uYcHc--s5iLeZKssQ.roa (hash: umqam3Wbg2iqJ3zJ/1WLiY5F6ucm17RieGxMmVvzD0o=)
                          2: _2rlTorI9d4EskVB3Q2AELQgntg.roa (hash: MJ/JOjkufW/i3x6kFr8d78WsqqTFtkNpKnXIQ8qokdg=)
                          3: aXdWyB6YGPpk-J46No4vsmKxGCE.roa (hash: TIgYhNRVQ3p/R3gXtf1t15mu2N3p/Mr9E78IoFCU1PY=)
                          4: lTK57WKRl8JHYSn3Me1JiHVYX6c.roa (hash: OsSENyDZ+wkTwyFgI+grH7k0F+jqVnxydXIxiH9U0Ng=)
                          5: oJSpmKHDBTQennb3bFM-AUri38c.roa (hash: gaj/8isA/Vy8LzqeD5fj8KpWVmIYxfupI+6YOWca7WI=)
                          6: yroUuw1scM5vJqw9L2C1NZloBMg.roa (hash: tq+65QQs/oxlmOUT1sm7YA/yaQJk+Rn+QS41OHsKCiw=)
                          7: zM1YPI1xokJ-AGDjzJJPMtwaggs.crl (hash: RrvholLR/Zfjq1ZDLxd9IIAoMmTaRprV6HhqGdyGY7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:09:a5:af:a1:a5:07:4c:f1:40:b4:10:52:92:8b:41:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
        Validity
            Not Before: Oct 22 02:00:44 2025 GMT
            Not After : Oct 23 02:00:44 2025 GMT
        Subject: CN=5bc0112419e4e38fc176cc77c7d69205ceeb7562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:16:06:d4:95:0a:d8:3a:74:1b:6b:d6:7e:
                    62:7d:7e:3c:35:1d:4c:c2:7f:9e:ad:2b:1f:da:e6:
                    60:9c:48:44:2a:94:2c:60:49:d0:80:fc:a3:fe:89:
                    82:46:4d:5e:31:03:e8:9d:40:eb:a7:fc:1b:90:83:
                    dc:be:00:2d:44:72:4c:0d:4c:bf:2e:7f:d6:81:07:
                    45:37:d0:df:dc:ce:ec:53:33:57:34:23:d4:f0:e6:
                    f2:bb:97:71:1f:33:cf:88:76:2b:41:42:ab:3e:ad:
                    11:1e:6c:0d:20:11:a3:1f:42:66:0e:17:d6:67:ac:
                    82:0e:0b:3b:c6:50:ee:f9:1a:c4:e2:f5:4b:88:a5:
                    30:03:a2:b5:4b:dd:64:7d:a7:71:57:75:4a:ba:81:
                    bd:c2:6a:d5:64:5e:c6:67:e3:2f:f9:c7:f4:10:65:
                    e2:68:c1:f7:a3:ca:99:38:cd:3e:fe:44:94:db:ca:
                    ca:46:88:37:03:fd:2d:09:ee:45:69:43:cb:e5:ff:
                    23:c1:00:04:f6:9e:41:37:85:f2:2d:2f:42:27:16:
                    f6:56:ee:1f:13:40:35:8f:82:ed:16:7e:e6:84:8b:
                    c9:ac:c7:48:f8:c4:55:7e:d5:b6:9a:37:da:3c:d0:
                    63:f3:a4:5d:16:42:84:a1:0e:36:e7:15:23:f3:05:
                    d9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C0:11:24:19:E4:E3:8F:C1:76:CC:77:C7:D6:92:05:CE:EB:75:62
            X509v3 Authority Key Identifier:
                keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f5:c5:34:d3:1a:cf:31:44:85:c9:32:58:79:9e:53:e1:af:
         71:5c:3a:f0:c3:86:24:76:db:61:d3:7d:dd:85:00:34:53:50:
         78:3e:5a:fe:7f:5e:2b:48:b4:a9:47:27:2c:6a:ba:aa:82:08:
         30:8c:94:ea:87:7d:9e:8d:53:d3:42:2f:2d:c8:fd:d7:6b:4b:
         14:a5:3e:da:29:17:f2:74:f0:7c:78:54:9a:8c:41:61:88:02:
         2f:3f:6e:9f:56:bd:60:78:27:53:a2:8f:0f:0a:67:9b:66:03:
         62:a3:15:cf:44:35:a9:5b:22:57:f3:32:e1:b7:cf:36:64:15:
         d9:32:13:70:83:e1:fa:0e:5d:85:89:ad:f0:be:6c:9d:95:f3:
         f5:9f:26:4d:45:c7:77:88:28:ee:ac:c6:76:0a:45:ce:65:a9:
         d8:83:2f:80:dc:cc:83:16:aa:60:92:63:25:f1:ee:3b:bf:ee:
         94:8f:55:1f:9c:da:69:56:55:46:e0:a4:63:2c:83:42:0c:7b:
         56:a6:71:31:c9:02:6c:9d:98:83:bc:50:a3:62:ca:e0:53:e9:
         c0:53:f7:bc:16:a4:a8:4c:2a:2e:08:a9:76:06:de:04:3c:9e:
         64:12:e4:ca:32:4f:7d:a2:a2:ca:a6:42:64:6c:04:dd:d6:7c:
         80:3c:2a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 06:57:11 2025 by rpki-client