Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
File:                     m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft (raw, json)
Hash identifier:          AhjXIACLzOH+4QKh2oG2RgnyqgVYNjPAW/ERp9lpeFg=
Subject key identifier:   0F:74:27:0D:25:03:73:28:E7:26:6F:7F:2E:68:94:DB:AD:4C:57:1E
Authority key identifier: 9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5
Certificate issuer:       /CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
Certificate serial:       0199FCFD875EB07A453BF6B2FD547C6F9CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
Manifest number:          1235
Signing time:             Sun 19 Oct 2025 15:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:37 +0000
Files and hashes:         1: QEBRn3jAI_lp2ryrgLPg_-qD0_w.roa (hash: 4DrVU+ddF+HESS/HTUefXV0kpzIAWWdGYlZL3aihd10=)
                          2: m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl (hash: tARVWBxt9lFGZLFNMghfCc+naaTA+4cY16pZkJRWZ9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:87:5e:b0:7a:45:3b:f6:b2:fd:54:7c:6f:9c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be4717112fec119f6cfcace7cc4434fb47df8f5
        Validity
            Not Before: Oct 19 15:01:37 2025 GMT
            Not After : Oct 20 15:01:37 2025 GMT
        Subject: CN=0f74270d25037328e7266f7f2e6894dbad4c571e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:20:83:59:ff:33:dc:f7:58:d0:07:b8:8c:
                    cc:f1:3c:36:01:3c:c2:f2:c6:52:c5:dd:08:03:57:
                    72:24:07:fb:9e:18:f7:de:3a:8f:9f:38:1d:83:72:
                    4f:e1:64:a9:16:7c:4d:d5:f1:01:24:13:4b:ca:11:
                    84:8f:26:86:79:9b:3f:3a:e3:f3:f9:37:da:d9:f1:
                    3b:5d:81:be:c1:54:fb:34:7e:68:53:7d:f4:ce:f4:
                    ff:10:09:7d:54:e2:52:ef:46:ab:87:13:9b:18:41:
                    30:65:3b:ee:b6:ff:7d:8f:58:6e:0e:fb:c1:c8:72:
                    e1:54:cd:81:ae:b7:57:25:59:1b:dc:33:02:6c:f7:
                    c3:da:3f:ec:be:3d:8d:66:43:6a:43:53:e6:b2:43:
                    d3:34:72:48:4b:65:23:7d:5a:6f:92:c3:0b:28:22:
                    90:9f:ce:e5:ed:ef:35:b8:0c:72:3a:88:f9:1b:43:
                    34:59:ea:52:df:8c:3f:77:fb:29:5c:ac:99:4b:09:
                    89:a6:b4:1d:7f:3a:57:f7:5d:a5:72:a7:1b:0f:a7:
                    f0:1a:23:b0:ff:4f:41:0a:0b:98:ab:19:83:65:ec:
                    5b:86:2a:c9:41:1d:72:95:ef:29:b7:dd:44:9b:9a:
                    eb:00:a4:03:0d:12:8c:8b:ff:58:6a:38:e1:0e:47:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:74:27:0D:25:03:73:28:E7:26:6F:7F:2E:68:94:DB:AD:4C:57:1E
            X509v3 Authority Key Identifier:
                keyid:9B:E4:71:71:12:FE:C1:19:F6:CF:CA:CE:7C:C4:43:4F:B4:7D:F8:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-RxcRL-wRn2z8rOfMRDT7R9-PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9606f6-da02-4bb8-b3e4-f03ac59b5a97/1/m-RxcRL-wRn2z8rOfMRDT7R9-PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a6:9b:23:8b:af:5b:19:92:04:73:20:79:20:48:e4:a4:34:
         c7:76:b4:7b:33:1b:b5:bb:5d:58:a3:d7:01:64:9a:a5:2f:68:
         c6:a0:ee:ff:c6:97:a4:5d:64:ee:da:f9:b7:05:91:e6:06:a1:
         c8:ef:07:5d:e1:8f:65:ed:8c:20:78:e8:94:68:44:a0:6d:6b:
         24:69:65:19:c0:4d:fa:e5:e1:59:7c:2f:84:eb:f2:77:34:77:
         ca:70:8b:01:a9:aa:aa:5f:3b:1f:fc:13:b7:41:a2:2d:f8:4e:
         73:d7:bf:7a:f7:5f:79:96:1b:1e:96:08:15:32:3f:1c:ec:b9:
         fa:5d:40:7c:6e:15:f0:01:61:03:77:2b:8d:73:cf:da:78:5a:
         22:2d:30:1f:75:bc:af:9f:45:47:cc:90:7b:13:0f:23:c9:44:
         30:5c:3b:5c:f7:5b:5b:a3:00:e6:de:21:26:59:78:f5:14:13:
         4a:87:21:31:61:9b:7f:34:5b:fe:6f:18:39:4f:38:2b:9c:e6:
         25:07:a0:1a:9e:d7:f4:e2:01:a6:bf:3e:be:77:b7:ca:f4:34:
         8e:22:40:3a:ad:22:9b:a6:87:07:96:f5:b7:a1:ed:73:37:32:
         16:9e:0b:3b:1a:98:53:bb:2b:92:47:db:0c:67:f1:6d:70:c2:
         a6:4b:68:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:53 2025 by rpki-client