Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
File:                     cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft (raw, json)
Hash identifier:          At0QgnlqqQiBPSMuTRXrz/ZBInMCrYcQL3ec0htA4LA=
Subject key identifier:   5E:74:0B:9A:E8:4D:03:38:34:C9:3A:41:99:C2:33:E4:F2:CE:CE:42
Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F
Certificate issuer:       /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
Certificate serial:       0199FBEABE626D1A4A27A36D7ED7F7375628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
Manifest number:          1113
Signing time:             Sun 19 Oct 2025 10:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:29 +0000
Files and hashes:         1: 5kIp4bFmAr9lOCjBtU4-CSX7D0w.roa (hash: zS6XZLioq/dFM9rTCOe5dC9siPtnmQmcYc9glHbFesE=)
                          2: WZoVc8N-YD-8FMKAITneTMD8_4k.roa (hash: d546sm0t0rb46HppUnfY7MCyS/rnnp2kV23n3HY9/us=)
                          3: bZJxdCs0gWqYryxwQS8EGlLZ93c.roa (hash: ZMF+prTjcHa6DFcnagp286MUC0TlcS1uVKhgY1MMJNc=)
                          4: cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl (hash: XaJBsbotjDiuDjWLzfTbZytD0wNwQNSimj79f0VvVZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:be:62:6d:1a:4a:27:a3:6d:7e:d7:f7:37:56:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f
        Validity
            Not Before: Oct 19 10:01:29 2025 GMT
            Not After : Oct 20 10:01:29 2025 GMT
        Subject: CN=5e740b9ae84d033834c93a4199c233e4f2cece42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7d:30:26:11:27:bc:71:33:89:53:ff:fd:83:
                    83:73:6a:e5:eb:d4:ed:6d:52:9b:ed:8b:67:24:5a:
                    3e:15:f1:cf:1f:4e:d5:bb:b3:c9:cd:70:9d:1d:a5:
                    9b:41:bb:00:a5:41:aa:5f:c6:d7:25:94:c0:64:06:
                    65:8f:1e:85:66:dc:99:18:72:13:a9:3f:a0:9c:bc:
                    9a:39:4f:fc:c2:c2:dd:be:c2:57:c3:53:45:d1:4c:
                    61:1d:f5:1d:bb:cf:20:13:d6:bf:0f:a6:73:ea:89:
                    62:fb:00:fa:5f:ee:ff:17:10:3a:a1:e7:2f:8e:60:
                    1c:d2:87:82:89:87:26:4f:c7:26:f9:c9:97:72:a7:
                    eb:de:cf:65:48:30:73:da:46:b0:4f:09:03:f2:3d:
                    b1:69:e6:c1:27:a6:69:4e:4d:d5:eb:e3:1e:41:e3:
                    4e:ed:c8:43:cc:39:53:42:67:f4:ee:4f:b1:8c:13:
                    ae:8d:d5:c7:f4:ad:ff:4e:73:9e:ed:20:ce:d1:ca:
                    80:11:90:a9:9a:e1:6e:6d:01:97:af:5b:54:33:31:
                    5f:c9:cf:a0:dd:75:0e:e5:ef:b0:44:dc:33:e1:5b:
                    d3:e9:54:25:65:80:06:df:97:47:a3:a5:90:17:90:
                    7b:d6:94:4a:f0:12:b1:2f:7f:12:48:e2:56:0d:4f:
                    ef:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:74:0B:9A:E8:4D:03:38:34:C9:3A:41:99:C2:33:E4:F2:CE:CE:42
            X509v3 Authority Key Identifier:
                keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e1:1e:eb:e3:f0:55:3b:0a:09:4e:d9:dc:9b:d0:cf:0d:18:
         3d:2b:32:8b:bb:1d:6a:f1:cd:0f:8f:0c:29:ab:7b:bf:49:48:
         19:7d:7b:d2:d0:9d:c7:bf:2e:29:27:7f:b7:1b:ad:9a:fb:10:
         74:6c:03:e0:e4:b7:fd:44:41:57:38:d9:9b:9c:ce:18:d8:6b:
         3d:07:ee:09:d4:6e:d7:32:56:e8:7c:f5:d8:cd:87:17:62:6b:
         c5:1d:09:05:86:f7:f8:e3:bd:27:6f:c9:fe:e1:3e:8a:cc:7c:
         b2:72:d3:e3:61:63:80:a0:3c:20:a7:f1:fa:f8:de:72:9a:6c:
         11:f2:55:25:c7:a3:c3:62:90:d0:f2:39:18:e0:ab:17:bc:51:
         87:8f:1f:66:79:ea:ae:92:47:ce:d8:28:d5:c4:4a:de:fc:2f:
         23:a4:45:3f:d0:5b:b2:b9:48:a1:80:d4:32:43:1c:25:67:51:
         38:7a:71:f6:6e:54:56:9e:ba:50:8c:1d:87:12:71:29:47:bd:
         98:c5:3d:55:c8:e7:26:74:a6:f3:5a:2b:36:80:fe:ea:41:2f:
         43:3e:1a:2c:61:dd:b6:7f:a4:e1:91:b0:97:02:b4:21:83:b2:
         08:13:52:cc:70:d1:da:92:1b:2f:38:b9:64:ee:66:f8:9d:cc:
         18:65:66:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:54 2025 by rpki-client