Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
File:                     CGQ46YiTiYKfpfUbaiEHMQgurCI.mft (raw, json)
Hash identifier:          R+gzk6tvF7CNCMpHVcfnIz5PiEKI3sRrZREyu95QQqM=
Subject key identifier:   68:DA:75:18:2B:7A:C6:7E:25:40:C0:3B:90:B8:74:89:38:8B:3A:62
Authority key identifier: 08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22
Certificate issuer:       /CN=086438e9889389829fa5f51b6a210731082eac22
Certificate serial:       0199FB0F38A527F8F834A5589860F8B820E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
Manifest number:          067C
Signing time:             Sun 19 Oct 2025 06:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:42 +0000
Files and hashes:         1: 1VjQoZc10lerLTuv0g4YHMLtXf4.roa (hash: IN8Xed87+TwZ0pVib4LiLY2cu5Cx22VcMoeEWlN76yU=)
                          2: 20RbcG86t8HtXkcLzrMiwyakZOs.roa (hash: B09OOZ6EDjWUZ2dxHE39ZhiZAqdtKGsJkWVnQD/N6aU=)
                          3: CGQ46YiTiYKfpfUbaiEHMQgurCI.crl (hash: DzxejZW09mb1oM6PkEFPln4bPJyY8aVHcoCUSj7QIQA=)
                          4: RqxbdMSh8w-5alXpfvlUin-3Y-A.roa (hash: K1mxLLRur8HwafCJYeka7QKzlM8enWjpiWi6lOKQXkI=)
                          5: txttKzsLJkY8gbNtZCV5qz-4CbU.roa (hash: 15a96b1Fi4+O1cBOo6+7ym2V5lOwNCIsUKyVOWkTdOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:38:a5:27:f8:f8:34:a5:58:98:60:f8:b8:20:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=086438e9889389829fa5f51b6a210731082eac22
        Validity
            Not Before: Oct 19 06:01:42 2025 GMT
            Not After : Oct 20 06:01:42 2025 GMT
        Subject: CN=68da75182b7ac67e2540c03b90b87489388b3a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:28:87:df:f1:70:2b:b4:5d:fc:a2:11:38:
                    ad:61:48:95:93:1b:34:f9:b6:73:eb:66:4b:4f:07:
                    ed:38:d2:a7:74:62:4c:ee:3c:ce:be:59:f6:5f:66:
                    73:99:2b:76:99:32:0c:b9:83:d4:1a:b0:0b:c5:2c:
                    0c:3d:a3:07:91:e6:f7:b1:fe:28:94:f8:89:01:04:
                    8a:0b:bd:f5:c1:10:01:07:c1:a8:2b:97:4c:8b:15:
                    fc:07:b0:ff:c0:41:8e:94:78:9d:a4:61:ae:77:6d:
                    68:e9:a8:2f:2a:b3:83:8f:40:90:e1:26:9f:c8:8e:
                    7e:8c:d8:82:cf:cc:10:37:2f:a9:0d:c7:a8:26:40:
                    a2:af:8c:02:de:06:36:0c:f3:2b:a9:9c:dc:37:0c:
                    88:d9:1f:99:09:59:6e:5d:5c:ea:60:dc:93:96:08:
                    b3:b6:8a:4c:61:c6:42:38:93:ea:ab:4b:a7:8a:a5:
                    44:5d:e8:61:1b:bf:26:8d:89:29:86:05:49:3a:09:
                    e1:5d:e8:37:27:4e:7b:ec:ef:93:e3:ec:bc:7e:b9:
                    f7:b1:a1:b2:59:71:04:0c:9b:3e:8f:90:6d:ca:01:
                    78:b4:49:aa:4c:93:93:30:28:bb:04:b0:05:ef:67:
                    ea:57:64:f7:b3:b3:3f:7b:96:be:2a:5e:66:83:9b:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DA:75:18:2B:7A:C6:7E:25:40:C0:3B:90:B8:74:89:38:8B:3A:62
            X509v3 Authority Key Identifier:
                keyid:08:64:38:E9:88:93:89:82:9F:A5:F5:1B:6A:21:07:31:08:2E:AC:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGQ46YiTiYKfpfUbaiEHMQgurCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e49ae7-a51a-4764-85c8-a7810e3a1beb/1/CGQ46YiTiYKfpfUbaiEHMQgurCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:22:78:d4:01:dc:e3:67:a6:93:34:e8:7d:65:c3:29:fa:a9:
         ee:36:d8:60:fc:dc:ee:81:25:3f:56:2f:81:6d:c3:90:9c:3c:
         cb:f4:8a:86:18:3f:51:b0:38:06:c0:00:bc:de:bb:4f:7e:dd:
         f9:f9:ef:29:41:a8:a7:66:2f:70:64:f4:d3:2e:8a:dc:9d:c4:
         33:16:4a:bd:38:c9:ac:e8:fa:20:f5:e2:1f:b7:b9:dc:d3:b5:
         0c:67:1b:9a:ef:da:bc:6b:5b:55:fe:d2:78:9a:1b:50:6c:16:
         0e:6f:62:fd:ab:2e:a4:b7:42:a6:66:a3:3d:c4:c0:77:dd:d5:
         47:2b:48:0e:a5:1d:5e:40:67:d9:df:37:6c:8d:e0:01:78:48:
         13:20:e6:72:5d:74:51:77:f5:cf:04:35:07:dc:60:16:7e:e9:
         6a:5b:e1:44:3e:a7:c7:ae:c7:30:e6:d2:82:c1:53:cf:cf:78:
         ca:b2:d8:ad:f9:30:ff:7d:a1:6d:00:86:88:0c:eb:9a:b0:18:
         41:ae:c3:3a:04:7d:55:17:00:9c:df:b2:0e:5e:4c:f5:b0:e5:
         10:9c:da:a3:8d:fb:2c:13:3b:6c:e2:75:41:92:e2:97:d3:11:
         e7:52:a7:12:e6:fc:a3:3b:f7:d2:df:ff:22:1c:93:61:57:20:
         a0:cc:b6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:07 2025 by rpki-client