Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
File:                     iPhM2j8rn5Z9noqEhdmeaht_fG4.mft (raw, json)
Hash identifier:          d2mM5EgLR6XH2Hi+1llk7oio+3DEnnfmGsYa4bcpGHo=
Subject key identifier:   EA:9F:EA:44:A3:CB:B5:5C:79:E8:17:BA:00:43:A2:9B:DA:70:68:11
Authority key identifier: 88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E
Certificate issuer:       /CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
Certificate serial:       0199FBEBF4F841A6C984E00E7483B112EA80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
Manifest number:          03C8
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: iPhM2j8rn5Z9noqEhdmeaht_fG4.crl (hash: TH+URDHWU+QJxWrrVlWsd3ppQndD5Pqu54ZsnzvNNms=)
                          2: txmFyUOnE8z2a-lXpSSWeNlZGdM.roa (hash: tHzEEY6u+Izo5THIfW02uc7TbpIzTWXGA5LdSe/FigM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f4:f8:41:a6:c9:84:e0:0e:74:83:b1:12:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88f84cda3f2b9f967d9e8a8485d99e6a1b7f7c6e
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=ea9fea44a3cbb55c79e817ba0043a29bda706811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c8:3a:6a:f5:b5:64:5b:ef:da:80:0e:79:19:
                    c6:19:2c:c0:ff:1a:f3:6d:93:ea:3b:b1:b7:f8:e1:
                    16:76:f9:02:87:f5:fa:54:78:aa:d1:20:93:9f:2b:
                    1c:a7:f3:e4:a5:fc:e8:56:8d:63:e7:f3:5f:93:ae:
                    bb:56:5f:81:b2:b9:a3:4d:c4:2f:0b:0c:e3:bf:e0:
                    9c:77:f0:d3:f3:ef:56:b8:3b:82:6c:81:21:1e:66:
                    d3:59:12:63:d9:c8:0b:25:f0:bf:ef:61:da:8d:77:
                    44:41:07:ea:c0:27:7c:d2:89:ed:fc:c2:23:bb:d7:
                    0c:8b:b3:c6:3e:37:f8:9d:2d:8c:af:21:d3:76:08:
                    ca:d6:ac:82:59:13:68:db:bc:a7:30:30:cf:89:53:
                    0d:36:fd:7f:97:cb:c5:08:6e:e6:10:3e:20:ac:d1:
                    98:59:4c:49:48:7e:c6:4a:ae:54:41:f8:aa:f7:7f:
                    0a:13:0b:4f:8d:c7:55:d0:4d:d0:56:06:0c:69:df:
                    bc:f4:15:33:5e:04:45:28:1f:49:87:0f:3f:f8:b3:
                    e4:5c:cc:29:47:a9:ba:9c:96:e7:a2:f8:b8:78:57:
                    7a:fe:f3:d0:c0:c3:ad:8a:6c:f7:61:e0:bc:fb:9b:
                    fe:e3:ad:90:e0:63:46:c5:fd:84:cf:b9:eb:fa:ce:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:9F:EA:44:A3:CB:B5:5C:79:E8:17:BA:00:43:A2:9B:DA:70:68:11
            X509v3 Authority Key Identifier:
                keyid:88:F8:4C:DA:3F:2B:9F:96:7D:9E:8A:84:85:D9:9E:6A:1B:7F:7C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPhM2j8rn5Z9noqEhdmeaht_fG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/f23831-6eb5-4427-81b0-34d341c5eb61/1/iPhM2j8rn5Z9noqEhdmeaht_fG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ca:20:f1:21:59:0b:77:36:e3:87:e9:66:8a:ab:99:80:c0:
         1e:06:dc:91:a1:06:4b:82:d7:b3:e8:9c:4c:0e:ca:64:70:24:
         c2:31:44:8d:ba:5a:fb:3a:07:00:e6:bf:a9:87:77:91:58:60:
         8d:21:a4:d5:8e:89:e0:c6:32:42:77:5e:fe:1b:4f:35:20:6e:
         13:ed:b5:5b:cb:85:79:79:92:9c:e1:26:3c:a4:a0:15:8e:26:
         51:cc:5f:dd:58:4f:74:c4:d5:24:ac:d1:c9:f7:77:c1:89:80:
         21:61:f3:b9:0d:47:11:79:a6:85:08:32:06:69:77:84:3f:f7:
         f0:e2:46:4b:3a:01:37:56:eb:6c:fe:af:bc:28:ab:1a:1a:3f:
         41:76:39:4e:ee:82:20:d7:a4:3b:b0:7d:c0:a7:a2:66:54:70:
         a1:e4:0e:43:4f:bd:59:8a:c0:19:49:e1:b0:39:b4:62:75:8e:
         c5:3b:45:17:9d:d6:29:f3:53:71:e7:48:06:7f:06:e1:3d:b8:
         c0:84:d7:79:e2:f0:d3:90:67:9b:4a:ec:31:97:f2:be:37:d3:
         c1:bd:3a:63:ea:e7:d0:43:1a:f0:7c:9e:f3:9a:4c:ae:a4:b2:
         30:37:53:25:e5:d2:81:e4:71:91:62:0f:aa:b9:42:bc:7c:37:
         60:15:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:21 2025 by rpki-client