Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
File:                     c_9LHL6vndddO17z7pp11XmfcoA.mft (raw, json)
Hash identifier:          hw5oclEsNLdNrNpaLaEiHuUQGXWT2OBzfBo+jt0bp2o=
Subject key identifier:   CA:5F:AD:30:64:64:71:12:F1:3E:BE:CA:8E:C6:26:42:8B:9A:36:17
Authority key identifier: 73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80
Certificate issuer:       /CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
Certificate serial:       019A01B57103294AC63014A1637577C9D720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
Manifest number:          0B27
Signing time:             Mon 20 Oct 2025 13:00:59 +0000
Manifest this update:     Mon 20 Oct 2025 13:00:59 +0000
Manifest next update:     Tue 21 Oct 2025 13:00:59 +0000
Files and hashes:         1: ag-XVm500Ink_y9Z543W0cYT2e4.roa (hash: LTklb1ptuKPn0530SuHC20oeHYTlb0YVhREmYDi0qn8=)
                          2: c_9LHL6vndddO17z7pp11XmfcoA.crl (hash: UjFTriJ3O/SBcOWT1hSCmmxskILnrl00G2qLXIDq8eE=)
                          3: xqtuxbgfgKOQAXDLHhW5kYSASLM.roa (hash: Akx0xbIbgUFrWIKc+N3GbCju1aCG4ckavEzXznoEvO4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:b5:71:03:29:4a:c6:30:14:a1:63:75:77:c9:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73ff4b1cbeaf9dd75d3b5ef3ee9a75d5799f7280
        Validity
            Not Before: Oct 20 13:00:59 2025 GMT
            Not After : Oct 21 13:00:59 2025 GMT
        Subject: CN=ca5fad3064647112f13ebeca8ec626428b9a3617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:36:14:d0:63:82:73:3a:47:29:27:85:e1:
                    58:77:0d:16:80:fc:ae:ea:86:2e:8a:68:a3:74:7a:
                    39:27:e9:f2:55:de:33:62:85:a3:6b:47:d9:ee:bc:
                    67:83:c7:c1:42:ea:d7:e0:ba:46:00:19:cc:76:cd:
                    60:08:2e:48:99:d9:a4:2c:96:b9:3d:b9:8a:14:ea:
                    89:e5:a3:c6:21:69:0b:3a:cc:7f:33:6c:00:98:6f:
                    a0:36:11:8c:3c:86:13:97:8e:06:21:01:53:f8:eb:
                    d8:08:8a:0c:cc:52:bc:70:b1:ce:e8:0a:ac:ba:19:
                    67:4c:1f:43:35:9e:c4:c3:6d:05:04:8a:c7:71:cd:
                    9f:9c:90:40:67:3f:f0:0a:c3:9e:e1:ba:36:cd:a1:
                    0b:ba:dc:a0:96:3c:2a:b2:60:c1:17:b5:58:59:91:
                    27:cd:7c:ca:e7:ba:7d:d5:40:6d:4a:75:c3:27:11:
                    8f:57:81:25:3e:47:81:25:1b:0b:67:76:3e:7b:ba:
                    c4:70:3a:de:73:b7:5f:2a:f4:41:70:7d:4a:01:85:
                    6e:a3:31:70:63:88:25:c9:f9:ff:ce:12:b8:ef:0a:
                    46:8c:45:d4:6b:e5:d9:72:3d:8e:a5:e5:03:e0:ff:
                    6d:c5:f3:bf:9d:0f:c0:c5:7b:29:f7:4d:d1:13:70:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5F:AD:30:64:64:71:12:F1:3E:BE:CA:8E:C6:26:42:8B:9A:36:17
            X509v3 Authority Key Identifier:
                keyid:73:FF:4B:1C:BE:AF:9D:D7:5D:3B:5E:F3:EE:9A:75:D5:79:9F:72:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_9LHL6vndddO17z7pp11XmfcoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/26f44a-ae53-4727-9075-437a346b22f7/1/c_9LHL6vndddO17z7pp11XmfcoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0e:87:94:be:c7:1d:56:7d:2e:ad:94:45:d5:22:ad:d0:f1:
         8d:b2:d3:aa:69:aa:42:ce:c3:b1:9e:91:fd:ed:2c:58:0a:d8:
         bc:14:28:4e:d2:68:ef:98:8f:f1:ee:d8:fa:6e:a8:36:07:c9:
         09:84:22:ee:73:47:71:1b:ec:46:2b:d3:e1:fa:0d:b8:5e:24:
         53:53:bc:71:21:30:a4:18:30:9f:78:60:78:07:38:23:cb:0e:
         2a:44:f6:d7:a7:1d:59:0d:9e:fd:3b:71:35:9f:4a:33:3f:38:
         92:fe:04:d9:64:76:e9:ff:75:59:94:ec:21:9a:78:18:4d:a9:
         cb:21:df:66:2a:c7:64:ca:bb:a1:4b:62:40:49:bf:f8:1f:ea:
         8e:1a:d4:a5:4d:98:7d:02:55:62:d0:51:3a:a6:89:1a:a9:e6:
         0f:3f:c5:9c:b6:cc:49:84:1b:61:4d:d5:5a:27:27:ae:bb:3c:
         77:f4:02:3a:0c:b1:18:a6:df:8c:0f:1c:b5:ec:a2:e5:0d:a8:
         9a:f0:cf:fd:2c:77:5a:93:16:35:ed:0e:c5:6b:8a:8a:fe:69:
         6f:d8:5b:0f:a3:e2:dd:dc:76:46:8e:0d:64:28:6e:59:83:b9:
         a4:31:14:5c:ad:41:4b:61:9d:8c:b8:18:3b:80:d4:2a:00:89:
         bc:f9:ca:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:11 2025 by rpki-client