Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
File:                     Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft (raw, json)
Hash identifier:          Rv2nucxStZADmy2LcJ3Abe7B1yvdrfx/Q1ot11IWspg=
Subject key identifier:   43:53:6B:AC:D8:19:9D:05:BC:8B:86:CC:0A:E4:25:30:29:72:AE:BF
Authority key identifier: 32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB
Certificate issuer:       /CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
Certificate serial:       0199FE7E1504FFC4C69F1B8AA256ABDA79F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
Manifest number:          10B2
Signing time:             Sun 19 Oct 2025 22:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:39 +0000
Files and hashes:         1: 1-GIE1ZNs_a58uffTHyRFm6JVqgA.roa (hash: gy76Xlf9casHiqbf8OmkekUAgQNXTcj0O5qhx7aDk8A=)
                          2: Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl (hash: CWPF9Ha9wnCbS8GnQYsOqGkCCT91/P8dZYhgMOQxyq4=)
                          3: U11EgxJj3vWydMXXj47fu6c9oJU.roa (hash: O6q4O52x0/hSWdM6G8XHS8BF1GrAPa5PsVo4kAs071U=)
                          4: eZeH1iCaJCqVSM-iEx9uMe6pR7s.roa (hash: rqwN44hH8sdKM+nwnj0SNae9MB6yS4MWbE4dyJjYG2Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 22:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7e:15:04:ff:c4:c6:9f:1b:8a:a2:56:ab:da:79:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32ad80d411acb93685f558aa7e12f46bd170a7fb
        Validity
            Not Before: Oct 19 22:01:39 2025 GMT
            Not After : Oct 20 22:01:39 2025 GMT
        Subject: CN=43536bacd8199d05bc8b86cc0ae425302972aebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:3f:9c:9f:c8:0c:c8:07:9e:a4:fd:ae:b5:
                    32:13:bf:b9:23:ef:fa:f8:82:13:8d:6b:a7:7c:27:
                    9c:a4:6a:ab:3c:63:a5:47:a6:f4:d5:02:b2:4f:43:
                    13:a4:9b:91:74:81:41:76:e2:20:19:22:60:dd:e5:
                    0a:7e:49:43:5e:90:4e:d2:c8:09:22:53:93:e9:20:
                    7d:ea:69:39:3a:dc:50:33:d9:45:65:86:82:7d:e3:
                    24:a3:52:60:63:ca:bf:d6:25:65:19:63:fd:d2:ae:
                    56:23:d9:a7:c6:a6:53:89:ab:db:c7:85:39:92:ee:
                    2b:b7:96:90:4f:94:9c:c9:95:a2:92:23:0e:5e:41:
                    a4:35:2b:c0:0e:03:b4:31:29:38:39:49:14:f8:e6:
                    81:45:84:a7:fb:26:0f:a5:dc:a3:62:d6:b3:15:11:
                    5b:e7:18:b4:bb:00:70:f7:a9:da:6f:9a:c1:3f:dc:
                    12:36:2a:46:91:93:43:7c:ee:49:ce:cb:9c:19:d4:
                    03:cd:11:77:77:95:0c:52:68:fd:82:e4:1a:1b:16:
                    42:7c:90:c4:ed:51:7b:ac:f5:84:19:0f:5c:84:82:
                    aa:9f:53:54:d2:68:87:32:00:10:3c:41:3c:40:3a:
                    fa:0a:01:26:a7:3d:8a:06:3b:2d:62:d4:97:1b:70:
                    ee:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:53:6B:AC:D8:19:9D:05:BC:8B:86:CC:0A:E4:25:30:29:72:AE:BF
            X509v3 Authority Key Identifier:
                keyid:32:AD:80:D4:11:AC:B9:36:85:F5:58:AA:7E:12:F4:6B:D1:70:A7:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9c2508-f69b-444b-b860-dc0e81a9d7b4/1/Mq2A1BGsuTaF9ViqfhL0a9Fwp_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:08:7c:e8:5f:e1:ac:50:b4:a0:e0:0d:20:80:9a:fd:7f:27:
         36:14:1c:0b:15:a5:83:af:1d:1f:4e:b1:83:5d:73:44:5f:ac:
         f7:04:0c:1a:6b:10:b6:80:0d:59:80:ec:7a:8a:1c:99:c8:99:
         9b:53:90:6b:e8:09:ca:94:f6:87:69:84:8a:7c:2f:9d:50:62:
         34:37:c6:7c:c7:9f:79:67:13:34:79:c5:34:90:0d:ec:5e:f7:
         91:3a:dc:bd:a2:df:7e:e0:07:08:27:6b:09:09:10:40:5d:6d:
         39:fa:54:ae:da:a9:8f:97:69:f4:cf:a8:0c:c8:cd:99:ed:8d:
         93:d8:e8:e9:94:45:58:b8:0f:6e:1e:4c:a6:e0:af:d1:b2:77:
         2f:17:65:7f:bc:68:42:3a:c9:9b:11:7f:48:24:b2:0a:01:2a:
         e0:28:72:5a:31:0b:45:9c:32:0a:3e:3a:ed:5c:29:3f:b7:5e:
         23:d4:18:75:d4:da:b7:59:43:5d:e1:ef:c2:62:80:fa:44:d4:
         04:82:a0:aa:bd:f2:36:9e:26:28:dd:4f:15:7c:15:b3:96:ae:
         32:01:84:0d:6e:2b:35:80:23:a4:0e:cb:2a:6d:8d:5f:89:10:
         e7:9f:22:2a:a1:71:dd:d4:69:84:4d:7e:d9:97:8e:f3:8b:6e:
         bd:df:f9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:41 2025 by rpki-client