Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
File:                     h9f30vwTSJFMAGtVq5Py0uM5DeY.mft (raw, json)
Hash identifier:          Xe3y6Eiqimwy3bPZ48fet2YcgaAlW87cbdRusiJEf68=
Subject key identifier:   CB:FF:68:18:5B:BD:5B:39:37:9D:83:E5:FF:80:21:C1:A5:8D:86:24
Authority key identifier: 87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6
Certificate issuer:       /CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
Certificate serial:       0199FF5963DEC2DA5015E5C213DB8BD767BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
Manifest number:          144C
Signing time:             Mon 20 Oct 2025 02:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:12 +0000
Files and hashes:         1: h9f30vwTSJFMAGtVq5Py0uM5DeY.crl (hash: PEGnTUv8idiCvlCAP3fdrF3qfD6BKX8etnxsOnpY2MY=)
                          2: pd4NfQq1m5q0gJRIY8-JV63L0Ug.roa (hash: 2jDsm0ha9EaVCILusmCVnInYpOVbfVEOKEtxwwvPFb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:63:de:c2:da:50:15:e5:c2:13:db:8b:d7:67:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87d7f7d2fc1348914c006b55ab93f2d2e3390de6
        Validity
            Not Before: Oct 20 02:01:12 2025 GMT
            Not After : Oct 21 02:01:12 2025 GMT
        Subject: CN=cbff68185bbd5b39379d83e5ff8021c1a58d8624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:14:35:cf:2a:2e:19:81:62:77:8e:b2:4d:5b:
                    1a:fa:16:37:1f:cd:c3:6a:17:8c:39:9f:ba:c4:99:
                    52:40:58:38:8a:3f:a3:d0:c1:32:be:71:c7:18:4a:
                    fc:77:22:68:f9:90:2e:a4:74:5e:c4:2e:c2:3c:d2:
                    87:52:db:22:82:1c:69:ee:9d:71:5c:fe:f7:a9:13:
                    da:5c:fa:8a:01:57:67:2d:51:1d:f4:e4:de:b8:48:
                    2b:d8:47:cd:09:65:9c:9a:d8:d0:97:92:c9:51:2e:
                    6b:82:ed:ba:a1:26:65:f1:7b:1b:17:54:97:d1:db:
                    78:48:d3:47:b4:17:04:b6:37:f7:fe:b6:32:f0:b6:
                    22:cf:28:9d:b6:a5:08:fa:9f:89:8c:8e:60:92:03:
                    9a:76:c5:33:17:a1:59:44:e7:73:0a:7e:53:e7:4f:
                    1b:0d:60:4f:59:ea:a0:62:c2:c2:20:7c:82:99:9b:
                    6f:9b:36:d9:73:6d:70:ad:49:77:4c:76:c6:09:ca:
                    36:ab:28:8b:6b:68:b4:ef:0c:0f:5f:e2:e8:2e:40:
                    8a:95:58:9d:99:f0:3e:de:68:03:3e:e8:03:7f:9d:
                    a3:a2:a2:25:cb:a7:c3:f9:be:e2:81:46:e7:e5:3a:
                    13:e5:1e:7a:d2:2e:24:9e:5a:47:49:77:d9:51:66:
                    fe:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:FF:68:18:5B:BD:5B:39:37:9D:83:E5:FF:80:21:C1:A5:8D:86:24
            X509v3 Authority Key Identifier:
                keyid:87:D7:F7:D2:FC:13:48:91:4C:00:6B:55:AB:93:F2:D2:E3:39:0D:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9f30vwTSJFMAGtVq5Py0uM5DeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6592e-b1c1-407c-8f04-301df272152e/1/h9f30vwTSJFMAGtVq5Py0uM5DeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:91:cb:cc:ec:95:61:3c:ef:a8:de:ad:72:7b:81:59:4e:59:
         15:da:e5:be:02:e5:66:92:6b:51:f4:f6:8a:cc:08:7b:37:87:
         8d:d4:68:65:bb:ff:61:b8:7f:7a:9a:34:d1:d9:1f:cf:7b:75:
         02:32:3c:92:d8:54:01:0a:b7:b1:fe:30:8f:47:d4:78:ec:86:
         60:f2:b9:76:33:e5:48:bc:91:18:22:e2:85:e1:d8:30:7b:7c:
         d6:8e:4b:66:46:4d:b1:8a:a4:98:96:94:d2:1e:94:a1:ab:f1:
         af:ed:e6:10:df:21:d8:75:0e:21:45:90:bc:10:41:33:e8:cc:
         cb:f4:e6:1e:c4:b4:99:55:3b:9c:51:e6:c0:23:67:fe:3a:2a:
         ca:c7:26:55:ad:bf:d6:18:5c:bf:09:9a:9a:b0:24:7e:c3:d8:
         07:4c:6c:1a:ef:33:87:94:15:48:b7:9b:cb:2d:f5:0c:48:c7:
         01:95:5e:c7:19:f1:f3:08:12:a6:86:3e:97:54:fc:03:f2:df:
         10:52:9c:81:dd:33:7a:4a:08:52:19:37:8e:af:70:8a:1c:ca:
         33:d3:e2:cd:88:c3:bb:6f:e4:77:d6:6f:70:18:5d:e3:2b:68:
         99:8b:c1:b9:85:d2:2e:a8:77:75:83:6d:23:86:85:37:81:64:
         2d:24:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:30 2025 by rpki-client