Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
File:                     cAiszpDUdaD6oR0oVIakU1ILgfA.mft (raw, json)
Hash identifier:          xQu0+00QP8tEVFHsiA/uYotlRgxy2Pd5oM0Z/RBrC3Y=
Subject key identifier:   62:CB:B2:93:FA:11:93:79:E1:9E:72:91:F0:BE:AA:5E:4D:45:80:14
Authority key identifier: 70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0
Certificate issuer:       /CN=7008acce90d475a0faa11d285486a453520b81f0
Certificate serial:       0199FC5891827301ABAC1D580566EBD3E356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
Manifest number:          0120
Signing time:             Sun 19 Oct 2025 12:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:26 +0000
Files and hashes:         1: SGExsZYw7zZNQMmCejqPLZCEzR4.roa (hash: lywDbb/BT202qwVyQW4Rrl3AkbHkGjJUpz5yvpYCOaU=)
                          2: cAiszpDUdaD6oR0oVIakU1ILgfA.crl (hash: jeAeXv79qY9V1ignfBkc4B6czOpnx4zwhyFpvVPst6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:91:82:73:01:ab:ac:1d:58:05:66:eb:d3:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7008acce90d475a0faa11d285486a453520b81f0
        Validity
            Not Before: Oct 19 12:01:26 2025 GMT
            Not After : Oct 20 12:01:26 2025 GMT
        Subject: CN=62cbb293fa119379e19e7291f0beaa5e4d458014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ae:12:da:60:2f:ba:35:f8:f9:bc:2b:34:17:
                    c4:42:71:de:3d:5c:ad:81:b2:e9:12:bc:75:61:4d:
                    3f:d0:29:96:ff:2d:a9:06:dc:80:09:68:41:3d:b6:
                    fa:25:eb:e2:2d:90:ff:67:7e:0e:cd:5c:bc:86:34:
                    1e:65:96:7f:0d:6b:f2:87:51:56:4d:eb:ad:2f:e9:
                    d0:b0:11:bc:31:9d:f7:dd:b2:ca:ab:e7:fe:93:d3:
                    d6:fd:0d:a1:4e:c6:86:3e:04:bb:3e:7b:97:8a:d3:
                    2a:40:68:1f:73:3a:4e:d6:7d:8b:02:1e:a1:9f:51:
                    a4:0f:3f:a6:9f:61:28:34:1a:0d:9b:98:44:fc:18:
                    15:c0:2a:03:71:b5:de:ec:39:03:f4:c1:79:ae:bc:
                    6e:24:2f:a9:24:f2:15:01:d0:d9:9c:d9:a5:a9:11:
                    d4:99:d7:98:e4:9f:ef:06:2f:0f:16:20:c7:ba:e3:
                    0b:ad:99:b0:48:61:36:35:69:e3:ac:3a:3e:3b:23:
                    42:7c:4d:5a:6a:18:ea:6a:b0:75:c7:44:8b:70:a8:
                    9d:ea:97:a8:2d:f5:ef:10:5d:7d:4e:c6:3d:a9:a1:
                    5c:a2:db:41:ac:bc:e6:d9:1e:81:e1:50:e1:14:7a:
                    4b:d8:57:0f:39:c7:0e:d9:bf:3d:63:de:3a:31:45:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:B2:93:FA:11:93:79:E1:9E:72:91:F0:BE:AA:5E:4D:45:80:14
            X509v3 Authority Key Identifier:
                keyid:70:08:AC:CE:90:D4:75:A0:FA:A1:1D:28:54:86:A4:53:52:0B:81:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAiszpDUdaD6oR0oVIakU1ILgfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/917d50-fc64-4b3e-91e9-a31893b0eafc/1/cAiszpDUdaD6oR0oVIakU1ILgfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:e5:d6:63:c8:a0:22:7b:14:75:67:9d:57:16:97:97:19:25:
         3e:6d:f1:7d:c3:ad:cc:a7:9d:23:83:ed:ad:67:66:60:0c:85:
         d2:9f:17:5d:f7:9c:cb:8f:c3:a9:ea:bd:5d:08:1b:6c:78:88:
         fc:89:84:11:71:88:9c:62:54:83:94:57:89:d1:60:f8:83:52:
         d3:ad:9e:bd:79:cf:38:5e:0a:39:b0:b5:ce:1b:3e:a2:7a:b8:
         95:b6:a3:ae:7e:15:6d:ab:4c:2f:4d:e8:16:ad:6c:1e:e8:9a:
         26:77:fe:bb:09:10:68:11:2a:6a:d6:a1:2c:eb:50:e5:76:22:
         53:04:02:45:1d:2a:c0:0a:48:eb:5a:b4:59:90:ba:03:aa:b9:
         7e:a0:e0:3a:89:d2:7e:aa:cf:77:8c:18:12:d9:83:9c:56:06:
         d9:7d:80:3e:6e:f3:61:d8:ad:19:50:e4:bd:d1:80:e9:00:75:
         c0:74:35:b6:28:28:e6:59:74:78:1d:fd:82:91:91:62:05:1a:
         99:35:e1:9d:80:c2:a7:e8:5c:36:cd:77:cd:31:8b:63:d3:9c:
         7f:4b:8a:a4:72:40:98:1e:88:6d:19:a9:70:42:76:d9:5f:f0:
         2d:7c:16:61:3a:ea:e9:1b:c2:eb:f4:f8:fd:28:a2:26:a7:c9:
         36:6d:02:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:52 2025 by rpki-client