Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
File:                     CBg0SlIKOZknm7gkfheeiEBuNXg.mft (raw, json)
Hash identifier:          1ls2KLS/U49unwo2U7ddzFHnn2501Mldi3smERmFlgA=
Subject key identifier:   A3:D3:CE:A2:2A:95:27:38:E3:89:30:46:EA:E3:95:63:BA:8D:BB:7B
Authority key identifier: 08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78
Certificate issuer:       /CN=0818344a520a3999279bb8247e179e88406e3578
Certificate serial:       0199FB7CEF6C7A78399B913ECC272BAF4764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
Manifest number:          09AF
Signing time:             Sun 19 Oct 2025 08:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:32 +0000
Files and hashes:         1: B-j6lkFyqvjbC_PQncwIGbX8TJo.roa (hash: UphQUvnVM6eEU6Z6D8ssHUSQvyAzogcc5pnYk33x3jA=)
                          2: CBg0SlIKOZknm7gkfheeiEBuNXg.crl (hash: PVISW4YzMqxYM7AJukIyTewU0nxLmyPbEPUyMIvbYS0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ef:6c:7a:78:39:9b:91:3e:cc:27:2b:af:47:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0818344a520a3999279bb8247e179e88406e3578
        Validity
            Not Before: Oct 19 08:01:32 2025 GMT
            Not After : Oct 20 08:01:32 2025 GMT
        Subject: CN=a3d3cea22a952738e3893046eae39563ba8dbb7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2e:c6:ca:a5:0b:a4:09:8a:18:75:8b:3b:4c:
                    71:6c:18:67:9f:4c:8d:bd:a6:bc:7a:6b:31:c4:7f:
                    c6:79:25:bf:a5:a1:80:be:98:8a:62:84:b7:76:e6:
                    ba:12:96:e5:02:56:d7:00:f0:27:54:52:45:9e:c4:
                    4c:74:82:31:ac:40:f2:e2:af:0e:53:89:6e:ea:bb:
                    8c:3a:67:b8:fc:68:b4:37:21:6d:38:f6:b7:91:a4:
                    e3:f1:b6:73:eb:bf:58:de:3a:c0:2f:6e:91:61:cd:
                    b8:2b:72:e2:f1:a9:7a:84:db:25:28:8f:1c:b2:57:
                    19:26:f5:76:73:73:de:4a:e3:aa:b1:b2:d5:f0:ce:
                    6b:c0:1e:10:20:c0:b1:9e:e5:0d:a5:de:66:0d:cf:
                    c8:d2:18:e9:ec:ab:7f:3f:7d:f7:1a:a1:7b:c6:86:
                    13:81:02:88:19:05:63:82:ff:38:ce:bd:2a:67:93:
                    06:8d:4c:64:72:bf:7c:3e:b9:d7:b6:80:1c:78:fe:
                    0a:2e:b6:a0:66:75:11:05:15:18:56:17:5e:d2:6f:
                    80:af:bb:2e:a7:de:aa:19:d0:93:92:da:7e:83:f2:
                    6b:a3:fc:f3:b5:9c:ba:01:47:93:d4:9d:66:5a:17:
                    ca:65:42:22:97:ac:52:95:47:41:88:b9:79:42:09:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:CE:A2:2A:95:27:38:E3:89:30:46:EA:E3:95:63:BA:8D:BB:7B
            X509v3 Authority Key Identifier:
                keyid:08:18:34:4A:52:0A:39:99:27:9B:B8:24:7E:17:9E:88:40:6E:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBg0SlIKOZknm7gkfheeiEBuNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56b818-9ee1-4a06-a8ec-851ea65cb98b/1/CBg0SlIKOZknm7gkfheeiEBuNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:3a:a5:f2:b5:20:d4:81:49:77:26:85:73:0a:af:09:aa:a6:
         19:a0:04:58:5e:95:e4:e3:41:a5:45:9c:38:c1:2f:a9:22:f8:
         57:df:f4:60:3d:2f:25:46:56:85:66:21:7f:f3:ff:06:4f:99:
         3e:18:e9:81:10:5f:33:0b:6a:72:10:3b:65:3e:c2:8f:52:4e:
         a2:d4:73:46:a9:80:bd:2a:cd:e0:8a:c1:f9:b5:ac:4c:f5:0d:
         97:b9:6f:db:9c:1b:e3:ee:4e:82:95:09:57:6b:93:25:23:55:
         36:a6:50:e6:1e:5d:1b:d8:87:fa:81:1c:67:74:26:b4:26:bb:
         9e:63:9e:1c:56:c2:c2:91:af:d0:49:81:f6:8b:4d:93:00:2b:
         c7:07:6a:34:c6:49:00:6e:da:de:ca:dd:fd:16:16:5f:37:1a:
         27:5c:82:dd:15:67:b3:e2:17:87:fa:29:13:95:1d:b0:80:74:
         82:98:42:d3:af:c7:e4:90:31:05:4e:5d:90:ee:83:a9:f9:18:
         4b:99:21:3b:65:17:e5:67:b7:96:4b:e8:34:5e:bd:f3:4f:2f:
         db:54:99:29:0f:c4:7f:80:dd:b9:a0:15:fb:c1:37:2b:e0:9a:
         98:f3:26:04:63:02:e9:5c:55:56:26:f1:20:7e:87:7a:7d:2d:
         8a:2e:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:19 2025 by rpki-client