Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
File:                     AzG4fpHqJxBG0xmV56bAOL8bFHw.mft (raw, json)
Hash identifier:          +jflm3NnoahLWOUyirZ8t4nSdq2dmyCE+KdNumhCBKk=
Subject key identifier:   FF:CE:0C:31:AB:78:BF:39:B2:3A:4D:6F:32:DA:0D:27:69:4B:90:4B
Authority key identifier: 03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C
Certificate issuer:       /CN=0331b87e91ea271046d31995e7a6c038bf1b147c
Certificate serial:       0199FDD9B73522637469550D9AFD73B4BA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
Manifest number:          1096
Signing time:             Sun 19 Oct 2025 19:02:07 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:07 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:07 +0000
Files and hashes:         1: AzG4fpHqJxBG0xmV56bAOL8bFHw.crl (hash: If30B+DsgJXjYX8tkUuaGUPoKha5hE3kY0JGLhZZDcs=)
                          2: p59K7aev36ERUItnhS5Mz1k5-Bc.roa (hash: yncXPcPIvJo8NAHq8Y//lz3+TC6bWI59QGBmAMQf5A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:b7:35:22:63:74:69:55:0d:9a:fd:73:b4:ba:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0331b87e91ea271046d31995e7a6c038bf1b147c
        Validity
            Not Before: Oct 19 19:02:07 2025 GMT
            Not After : Oct 20 19:02:07 2025 GMT
        Subject: CN=ffce0c31ab78bf39b23a4d6f32da0d27694b904b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:ad:35:46:13:5e:45:2f:66:f2:56:f2:9a:
                    1e:29:98:5b:0d:8c:df:1b:ba:cd:9b:08:79:f2:c6:
                    45:48:17:46:d6:69:1c:fd:0e:98:08:eb:04:7e:0c:
                    b0:fd:9d:58:c8:c4:b9:8b:5f:bf:8d:bb:8a:0a:d7:
                    6f:9f:54:3a:e1:06:14:cd:f5:a2:3f:5f:55:8b:fe:
                    33:5e:b8:ed:64:a4:25:3b:4d:d1:58:0a:18:fd:3b:
                    94:9d:93:1b:77:79:1d:ce:2b:4e:ce:c9:ac:fb:9e:
                    0d:7a:b7:0d:6b:44:93:f2:aa:ea:ce:eb:3f:01:46:
                    ef:ed:1e:90:f3:7a:af:8b:b0:13:4c:36:a3:21:1a:
                    d1:fc:05:5a:d8:6b:b3:6f:0b:9a:d1:a5:7a:85:d9:
                    47:10:55:3b:e8:44:fd:22:53:13:6e:81:4d:4a:a3:
                    68:64:1b:ed:1a:d4:f0:0a:9e:bd:3c:5d:76:b4:90:
                    7a:fe:66:a6:18:ab:0d:9c:e8:d3:4a:04:1a:77:53:
                    1b:c9:c3:7a:3e:f3:98:3b:fc:34:1c:45:87:fc:a3:
                    94:29:12:69:c3:82:da:6d:fa:6b:18:a1:e1:42:80:
                    f8:6b:dd:a3:c0:9c:51:29:62:68:b1:a2:92:60:f0:
                    34:9b:37:8e:07:e4:b8:1b:34:6f:7d:1b:b7:5a:22:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CE:0C:31:AB:78:BF:39:B2:3A:4D:6F:32:DA:0D:27:69:4B:90:4B
            X509v3 Authority Key Identifier:
                keyid:03:31:B8:7E:91:EA:27:10:46:D3:19:95:E7:A6:C0:38:BF:1B:14:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzG4fpHqJxBG0xmV56bAOL8bFHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1a24f6-c5a0-40bf-abb6-8da5373a6a6d/1/AzG4fpHqJxBG0xmV56bAOL8bFHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:19:97:37:45:a2:78:a5:be:44:73:51:f8:28:b9:88:d2:
         ed:11:86:d3:7b:33:10:fe:30:ed:12:65:c7:c1:4d:7d:f7:a7:
         9e:de:2b:c2:08:a0:da:b1:2a:98:b3:0c:dd:1e:91:2a:97:59:
         26:b0:ee:5f:75:88:70:7b:9e:bc:16:31:2f:5a:ec:c2:5f:28:
         00:7e:44:31:4f:be:fd:21:3d:5d:80:e0:4e:a8:5b:3a:e4:c9:
         56:38:2e:f8:c7:f2:79:94:90:50:15:59:c1:df:f4:fb:73:4e:
         ec:ce:a9:8f:db:e8:d1:74:a7:77:07:0e:e0:08:d7:21:22:61:
         4b:d0:47:30:f0:b0:8d:97:01:a6:35:1b:d8:9c:7a:40:78:a5:
         fd:b2:91:ef:c6:72:47:a1:b3:96:9d:4a:d0:cc:0f:13:6b:a3:
         e3:b5:ac:e7:ba:7f:05:07:d6:69:15:c5:d2:84:38:2c:6e:8d:
         46:6e:56:b9:f9:b5:31:de:2e:47:bf:89:5f:e2:ff:2a:3c:7d:
         61:61:37:80:d6:d9:71:6a:5f:8a:dc:8e:2d:cd:d0:a8:b9:b0:
         6d:7b:6a:be:4e:71:ff:08:9f:b0:49:01:e6:fc:c9:19:60:56:
         bd:70:42:b7:40:5e:2a:91:d7:4c:d5:19:52:ca:c4:88:a1:1a:
         a9:a7:32:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:00:03 2025 by rpki-client