Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
File:                     G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft (raw, json)
Hash identifier:          r5gImuPiVcXA9lUp67+lxKnMagMJVft+CfWUezxzYQM=
Subject key identifier:   82:94:63:B8:CE:7C:5E:2A:58:4A:BC:2D:DB:9C:20:3D:62:5E:BC:EE
Authority key identifier: 1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54
Certificate issuer:       /CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
Certificate serial:       0199FF5965BFD616A8504A4E943A558FA0B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
Manifest number:          15BD
Signing time:             Mon 20 Oct 2025 02:01:12 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:12 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:12 +0000
Files and hashes:         1: Crf41pfcZmNKuDt4hymlQTfYG2U.roa (hash: c4qxY3jolPv2UXEdOnJwnhLS1Znb3vlJyUzlD0LFsHY=)
                          2: G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl (hash: 97ZXkhP66+YGBhZ5ebMrJ1mD8A1+n4KDuZJGJDKKIMc=)
                          3: YCXRBD7Zei1Us8_1Zrh0WouSVoc.roa (hash: uf8QrvagAa32Z+Kqsvosmb8r/ocn/wRQquN7YdO8AOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:65:bf:d6:16:a8:50:4a:4e:94:3a:55:8f:a0:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdba013655b9bb0caa285d75c142c1ee30f8854
        Validity
            Not Before: Oct 20 02:01:12 2025 GMT
            Not After : Oct 21 02:01:12 2025 GMT
        Subject: CN=829463b8ce7c5e2a584abc2ddb9c203d625ebcee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:84:21:2f:26:ea:bc:b5:db:d7:fc:cc:a2:
                    33:9c:a6:1d:6f:a1:f0:3d:d6:c7:46:3a:bc:0b:e2:
                    dd:ca:3e:12:0b:67:7f:91:34:20:c0:66:6d:72:0a:
                    7f:c8:8b:a0:b3:35:41:62:ab:d5:80:bf:54:a7:9e:
                    68:65:40:3e:2a:b1:c5:e7:ba:28:27:8d:8b:a7:30:
                    98:6a:0f:02:58:26:5f:be:04:87:e5:9b:8e:24:47:
                    d0:87:77:1a:f5:7e:5c:a0:6c:d9:54:b3:1f:8c:5d:
                    fa:ba:10:d1:3e:9c:92:8f:ab:02:af:3b:55:67:e1:
                    59:cb:8c:37:41:dc:90:15:e0:26:72:f9:09:11:2c:
                    74:c9:ff:2a:ec:76:bf:c1:83:0a:2a:a1:eb:82:12:
                    29:57:be:b9:8c:01:6f:f5:b1:43:e9:b6:e4:0e:69:
                    ab:dc:42:a8:8d:31:cb:bf:f7:38:95:46:9f:92:bb:
                    e8:ea:3e:0b:66:a6:8a:fb:34:c5:a9:ac:e6:bd:6c:
                    1b:2e:12:fe:e2:a2:72:98:63:f8:24:6c:33:fd:1b:
                    ee:71:dd:46:f0:00:d2:d7:a7:00:67:8c:7c:1b:f3:
                    fa:e6:79:9f:e4:4b:ee:94:d7:20:d4:4e:6c:fb:97:
                    29:b3:83:2e:69:e8:b0:2a:37:18:21:96:23:4e:66:
                    d6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:94:63:B8:CE:7C:5E:2A:58:4A:BC:2D:DB:9C:20:3D:62:5E:BC:EE
            X509v3 Authority Key Identifier:
                keyid:1B:DB:A0:13:65:5B:9B:B0:CA:A2:85:D7:5C:14:2C:1E:E3:0F:88:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/6a2946-f0a4-4e85-930e-d4edf16e0978/1/G9ugE2Vbm7DKooXXXBQsHuMPiFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b0:34:be:a1:f4:fc:e8:c5:04:e5:ef:e4:a3:a6:06:76:a0:
         73:6b:e9:f1:92:df:2c:bf:af:32:74:d8:e8:c1:82:00:e8:97:
         3b:a9:6a:d2:e5:96:2d:87:52:b6:77:d4:e0:cc:31:b8:8d:43:
         1c:c1:76:2a:96:90:8b:61:07:0a:81:8e:8f:5d:57:a2:e4:8f:
         f5:49:e1:66:3c:72:dc:da:a9:a0:91:91:12:94:22:b4:4e:1b:
         70:e7:da:a9:04:d7:b7:1f:7e:92:98:c5:2b:22:0b:b8:62:ed:
         70:df:8b:3c:7d:e1:0c:d5:da:6e:5a:79:ba:46:7b:1c:52:ee:
         98:b6:b1:5d:0a:32:b5:1b:e3:18:2e:59:3d:a7:bf:11:40:d0:
         9c:77:48:1d:60:a5:e1:f6:47:36:f2:79:b3:51:46:5e:3a:28:
         06:8b:33:c1:cd:2a:22:6a:e8:02:4e:36:60:5e:8c:59:9a:63:
         38:f3:ba:31:ef:05:c2:dd:f1:98:f5:58:bc:af:ee:05:80:61:
         97:54:ea:70:d4:d8:42:30:31:df:3d:b9:21:6c:1e:23:6d:f2:
         f6:95:b9:10:7c:0f:8d:59:f5:f1:62:2b:5e:2b:98:ca:cd:3e:
         de:10:c9:30:9c:5a:02:60:f7:25:85:7f:7c:a5:0c:f3:28:a4:
         33:12:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:50 2025 by rpki-client