Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
File:                     p2_PrZZq5-gXHPzibbP2V3bSb-g.mft (raw, json)
Hash identifier:          Wnpnmk4gbhP//2DjQAsZfL2VlbDOFMBvA+gK0rdBCGo=
Subject key identifier:   6B:03:54:E6:95:A7:53:84:4B:67:DC:EF:A0:EA:83:6E:18:A0:C7:D5
Authority key identifier: A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8
Certificate issuer:       /CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
Certificate serial:       0199FD6ADA16158FEA78922E348864D6ACAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
Manifest number:          07D2
Signing time:             Sun 19 Oct 2025 17:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:02 +0000
Files and hashes:         1: HZzrBLqLniSsznGdguAgPtgtGbM.roa (hash: xGzu0AMRP3+zdSrMRPZ1toX3l/+Zg2MbklKfsZKKMdM=)
                          2: YH9rgvwa_c5tkfoIds2w3LcyxQU.roa (hash: O5b96K5UqDPwtmiTY4ipuOfWppIds6W4j/eFK50+Z/0=)
                          3: p2_PrZZq5-gXHPzibbP2V3bSb-g.crl (hash: 5Z9eW7rCUPRgzg4PrHolwuOBVJ6s8tkvdWAfUo27E+k=)
                          4: uu0B_lRFC2FFj-k7cmY35eNucIA.roa (hash: 45P7jNAbs5p5AqN2mETxLIaycHEKNPfSa4PeOiqxcQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6a:da:16:15:8f:ea:78:92:2e:34:88:64:d6:ac:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76fcfad966ae7e8171cfce26db3f65776d26fe8
        Validity
            Not Before: Oct 19 17:01:02 2025 GMT
            Not After : Oct 20 17:01:02 2025 GMT
        Subject: CN=6b0354e695a753844b67dcefa0ea836e18a0c7d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:0f:eb:b5:8e:8c:99:2f:d5:7d:36:3f:5b:
                    09:a9:cf:2e:d6:1c:15:90:72:85:f5:b7:16:45:ae:
                    ce:68:f3:f2:7a:11:5f:92:5c:73:e2:4b:45:85:be:
                    24:fc:0b:69:7c:11:97:9f:0d:e2:d8:c3:99:10:06:
                    97:56:77:3b:a1:5f:f5:bf:ea:0c:aa:a7:19:e4:83:
                    27:87:3d:0b:d7:56:eb:29:d6:05:50:c2:58:7b:4a:
                    9a:76:f5:08:96:f0:76:db:f4:5b:cd:c7:cf:7e:a2:
                    f4:b7:d6:26:61:76:6e:5f:24:ff:9e:b3:29:57:9b:
                    2d:a6:40:5f:af:c3:57:44:ad:21:5c:34:b4:f9:15:
                    1b:8c:e4:aa:09:1e:18:02:83:47:0c:74:71:d8:67:
                    97:54:8d:f1:19:4d:88:26:8b:fd:62:03:32:b7:09:
                    80:b4:a8:0d:4b:8e:50:ff:c5:d3:9d:7d:78:25:0e:
                    c9:89:1d:18:61:e6:1d:18:7b:8d:35:e1:77:46:7b:
                    cb:26:3d:1a:27:77:72:ff:ef:37:4b:59:1d:5a:04:
                    f1:22:2d:f1:9c:54:19:d1:d7:37:40:5b:cf:31:24:
                    66:5a:79:d5:ec:97:d4:b0:7c:2d:79:05:39:c9:fa:
                    5a:e0:9a:12:c8:c4:f2:67:2b:6c:60:89:3d:b3:64:
                    a2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:03:54:E6:95:A7:53:84:4B:67:DC:EF:A0:EA:83:6E:18:A0:C7:D5
            X509v3 Authority Key Identifier:
                keyid:A7:6F:CF:AD:96:6A:E7:E8:17:1C:FC:E2:6D:B3:F6:57:76:D2:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2_PrZZq5-gXHPzibbP2V3bSb-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/db8752-84b2-438a-9bc1-c5401f6d91d1/1/p2_PrZZq5-gXHPzibbP2V3bSb-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:13:43:23:30:3d:3a:51:eb:8f:43:7f:5f:b6:81:f4:e3:f8:
         78:73:29:40:78:61:c6:f4:59:4d:84:37:40:86:ab:5d:ec:30:
         1d:b7:ff:f3:fb:a5:79:06:cb:0b:ea:76:81:05:51:db:20:4f:
         9a:53:8d:a3:a3:d1:e7:dd:99:54:21:80:ea:31:70:99:c4:9b:
         17:9f:1b:cc:2a:33:db:71:2c:d8:9f:c8:b3:cf:1d:cb:72:2f:
         d1:55:78:12:38:7d:37:c1:6f:3c:c7:b6:93:5a:c3:21:fb:96:
         d8:43:6c:06:48:f4:1d:6d:3e:fc:19:5d:29:c4:b8:f4:ef:94:
         22:6a:92:72:0b:82:c8:62:2e:95:39:87:ff:b3:dd:91:93:85:
         13:d4:c9:86:5d:cc:ee:8e:7a:7e:24:6b:27:4f:18:44:fd:7b:
         e8:f6:0f:30:98:0a:cd:f9:aa:7c:f9:49:14:10:ba:f7:de:19:
         f4:61:46:52:58:37:b9:66:b9:7b:cd:2a:5b:78:48:e9:51:4f:
         32:d7:32:c2:e6:b6:fe:8c:c6:b0:09:b0:66:fc:32:30:67:ae:
         52:ed:d0:5c:f4:a2:c6:02:12:81:79:18:7f:9f:90:5c:ad:87:
         75:ee:8a:6b:ee:77:0e:85:08:eb:53:d1:9a:15:cd:ac:fe:4d:
         b7:a9:6e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:37:42 2025 by rpki-client