Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File:                     cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier:          /DjEYKTiy8JCZVdeQnqdQxcmxBQlL3xfbgAVdfkEYlA=
Subject key identifier:   03:A8:82:70:83:C5:1E:C2:8C:85:5A:3C:4B:EB:4A:9F:2E:FA:D1:52
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer:       /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial:       0199FBEB15542E5945C6DF234AFA00F6D8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number:          12E9
Signing time:             Sun 19 Oct 2025 10:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:51 +0000
Files and hashes:         1: PNXE3f7nm-ojlPdvV_1yYpzHd1o.roa (hash: TFO2XkeOQG2ZuVhhUVPTDBMBQ7rIutsnw7Dyad/B8zE=)
                          2: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: yWsI8EriPZKz8g9pe3FGa4XSeldsxSZj8lX3jOg7wJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:15:54:2e:59:45:c6:df:23:4a:fa:00:f6:d8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716752b91747957dccff0e71da674f329d832de3
        Validity
            Not Before: Oct 19 10:01:51 2025 GMT
            Not After : Oct 20 10:01:51 2025 GMT
        Subject: CN=03a8827083c51ec28c855a3c4beb4a9f2efad152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:bb:60:82:5d:14:cd:fd:5a:5a:c4:21:6c:
                    77:0f:f4:97:82:d3:fb:0b:1d:46:4c:ae:02:1f:96:
                    73:5e:cd:a8:ef:ad:65:48:6a:8f:a1:66:60:d8:75:
                    c7:87:e8:7d:de:2c:b5:86:dc:b8:05:f5:1d:be:2b:
                    d6:f4:63:c4:6a:f1:96:ee:bb:fb:fd:c8:34:6b:45:
                    33:77:dc:30:5f:34:13:5e:3e:e8:29:bf:6f:cf:16:
                    59:d2:a7:7c:5e:66:f9:34:6a:14:d4:67:0b:d2:79:
                    55:73:f5:d7:6e:23:34:cd:79:6b:43:8c:a7:f7:61:
                    c6:aa:82:16:a9:56:11:4b:ed:35:9c:05:d2:fe:9b:
                    81:3f:ea:40:dd:fa:b7:bb:78:59:df:1f:2e:3a:5c:
                    b8:a4:03:8e:42:32:46:13:0c:74:ae:c9:02:00:dd:
                    36:8a:65:8f:95:9d:0f:23:13:b2:fd:ba:fc:53:03:
                    69:ba:67:28:fd:98:a3:c6:da:b1:32:a7:f5:0b:29:
                    56:bb:36:f7:9c:b5:95:07:39:d1:5d:2a:94:64:42:
                    30:c3:a5:6b:4b:70:cc:0e:b9:bf:3a:85:99:41:f9:
                    c1:4a:d6:1f:37:67:d5:4a:9b:ae:eb:ce:e7:fa:1e:
                    cd:7c:6e:32:ed:45:d1:4f:01:f8:ff:74:d1:ee:be:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A8:82:70:83:C5:1E:C2:8C:85:5A:3C:4B:EB:4A:9F:2E:FA:D1:52
            X509v3 Authority Key Identifier:
                keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:2c:02:ff:9a:f9:ee:2d:8f:e3:80:b5:9a:50:6c:17:e4:27:
         52:7d:2b:6c:b3:8b:25:a5:6d:e8:53:63:d8:16:7e:be:23:f1:
         16:68:d6:bd:a3:ae:2c:33:49:42:54:75:57:ab:ac:0a:42:ac:
         de:5b:a8:64:98:60:75:6f:d6:0b:d6:3b:f1:da:87:a0:ac:7f:
         56:0a:6d:c1:0d:dd:30:ea:74:f4:95:2d:3d:57:08:69:3f:67:
         dc:f2:86:52:e1:2e:32:0a:12:af:80:aa:ea:43:34:96:96:e1:
         76:f8:2d:39:33:fa:29:16:05:fa:06:a6:09:23:1c:49:0e:8b:
         f3:15:7f:ba:51:be:8a:a6:b0:7c:e0:70:3b:0c:81:64:8e:79:
         1d:8b:3a:b0:2f:68:1a:c8:c5:78:0e:c4:02:42:7c:ea:6e:ff:
         ed:21:8c:d0:ec:d2:43:55:93:30:28:86:2a:37:c5:ca:8b:3e:
         50:f7:aa:7d:b4:72:31:c1:66:b9:ea:1a:72:cd:40:8a:b9:7d:
         b2:bc:ff:25:6b:57:65:99:d1:a4:d1:0d:3f:96:ef:1e:ad:4b:
         5d:ce:ec:53:19:4d:59:b5:8a:36:2e:14:15:5c:04:d9:ba:18:
         67:84:02:f7:c4:86:75:ea:d8:01:85:65:d4:31:9c:20:c1:f2:
         f2:87:ba:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:19 2025 by rpki-client