Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
File:                     lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft (raw, json)
Hash identifier:          5vlRpea1fMUvUjB07Ktz5oT+BIXUKZz/ja5ehFYJ1Bw=
Subject key identifier:   04:31:3B:3B:F9:89:1E:AB:C0:65:4C:5A:CB:F8:47:EB:DB:AE:F2:73
Authority key identifier: 95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7
Certificate issuer:       /CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
Certificate serial:       0199FBEBF6C11ACE46E753B2DA9BD89B8103
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
Manifest number:          03C3
Signing time:             Sun 19 Oct 2025 10:02:49 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:49 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:49 +0000
Files and hashes:         1: fxlFgI3EysiECIF3mL-wg3P66gA.roa (hash: WG+Wf/XaXu5fK/R90C0HW02K/9LIUpQXBf5GmZqFRDg=)
                          2: lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl (hash: z6bpdQqJH3lm1gnQei7f326luC1Kc66f9H7GRSVeVMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f6:c1:1a:ce:46:e7:53:b2:da:9b:d8:9b:81:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952ddcb35078267f4f3752e5b4ccc65a663a63e7
        Validity
            Not Before: Oct 19 10:02:49 2025 GMT
            Not After : Oct 20 10:02:49 2025 GMT
        Subject: CN=04313b3bf9891eabc0654c5acbf847ebdbaef273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:43:e2:7d:00:b4:7d:61:97:b0:aa:00:d7:
                    bb:25:a3:5f:72:ec:8e:2e:31:1e:64:2c:d3:1b:ce:
                    a0:31:c4:9b:d9:41:33:b9:9b:75:c9:8d:cf:86:9b:
                    ec:c2:04:bf:5f:d8:4e:57:9b:03:5b:78:bc:4c:9e:
                    16:23:ee:b2:1c:b5:df:31:ba:bd:8c:4a:7e:38:1e:
                    6f:3b:95:7d:8d:73:a2:cb:fc:a1:ea:c2:a7:4c:5d:
                    f7:f4:49:a3:80:a5:d2:bf:ad:36:6b:12:5e:6c:60:
                    f6:95:60:f5:ae:11:56:ab:60:45:29:0b:d8:ae:cb:
                    5b:45:bc:91:3a:7b:64:87:ca:ca:13:28:a4:95:35:
                    6a:a7:31:ce:94:7a:3e:4e:72:3a:5f:e2:d6:d7:98:
                    f8:c3:27:aa:8e:cd:d5:97:64:32:3f:04:cc:af:ea:
                    40:6a:83:23:39:46:64:2d:d0:ab:07:f0:38:78:d8:
                    85:33:23:4d:f0:80:da:14:b3:d2:3e:70:62:24:d2:
                    df:fd:7e:ba:da:78:8e:a2:5f:1a:48:23:9c:03:a0:
                    aa:ca:85:55:d6:db:84:8e:cf:0d:32:93:c3:8c:a2:
                    90:17:ff:98:9b:f1:e6:eb:a8:f3:78:0e:50:72:e8:
                    c3:ba:36:45:ca:ba:c3:20:d9:30:6e:7e:38:c3:f2:
                    81:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:31:3B:3B:F9:89:1E:AB:C0:65:4C:5A:CB:F8:47:EB:DB:AE:F2:73
            X509v3 Authority Key Identifier:
                keyid:95:2D:DC:B3:50:78:26:7F:4F:37:52:E5:B4:CC:C6:5A:66:3A:63:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/c59b61-9115-415f-81f2-a4c1bbcb8c97/1/lS3cs1B4Jn9PN1LltMzGWmY6Y-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:ea:ae:43:ff:33:31:40:47:d9:65:9d:fd:1c:bf:05:03:1f:
         92:54:90:f5:28:32:38:03:dd:30:46:fc:17:ab:c0:be:40:c0:
         7b:de:5b:9c:ca:d6:6f:f4:29:7d:0b:40:94:13:dc:cc:f4:a2:
         9f:1c:4b:f4:f9:ee:e9:27:d0:fe:99:5a:f3:37:90:9b:19:e0:
         17:ee:6f:c7:6a:cc:58:8b:dd:21:2b:09:7f:47:5d:6e:c5:5c:
         13:7a:ea:e7:56:03:3b:c3:fa:92:5d:cc:f7:ee:bd:32:04:59:
         f9:47:28:68:2b:11:37:9c:07:1b:f4:f8:6d:9d:b2:b4:b3:58:
         e1:82:e2:54:61:7b:fa:cd:a4:40:32:ff:d0:ec:3e:ea:70:3b:
         02:60:9b:2f:87:60:54:7d:33:11:32:99:7e:b4:b0:05:ca:0a:
         40:06:45:d4:39:0f:d6:b1:fa:f8:56:91:d3:62:5f:72:d8:ad:
         37:6e:b0:5f:90:ed:1a:1e:0e:d9:5f:12:8b:95:a0:b9:1b:6c:
         c7:90:20:ae:09:99:d0:b2:37:b6:53:f5:7e:cb:fd:87:eb:2e:
         2e:1c:b6:b5:bf:ed:4a:4e:b0:1e:a4:1d:9c:ac:fc:67:c5:69:
         da:fd:6a:c5:e2:6e:32:b9:7c:c1:95:b0:ac:6f:65:80:2e:54:
         9b:0f:7a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:38 2025 by rpki-client