Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File:                     k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier:          mV9b/VYbZRLLNAJiRKcOlFyRhA3ckOgDLWHLhzah/Dc=
Subject key identifier:   89:7F:C4:01:9E:85:58:FB:EE:6B:82:9C:C4:6B:5A:BE:4A:48:B7:B5
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer:       /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial:       0199FC583BBB51F6BCEEF2722A448857E101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number:          14A8
Signing time:             Sun 19 Oct 2025 12:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:04 +0000
Files and hashes:         1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
                          2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: ont1DqpqHNPphefo9SFs6E8dn8UFVzVW3FpPsX/mHW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:3b:bb:51:f6:bc:ee:f2:72:2a:44:88:57:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
        Validity
            Not Before: Oct 19 12:01:04 2025 GMT
            Not After : Oct 20 12:01:04 2025 GMT
        Subject: CN=897fc4019e8558fbee6b829cc46b5abe4a48b7b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:03:f9:e0:8f:98:ed:ce:67:3a:80:c3:46:
                    a2:ed:fd:6f:69:9d:16:3a:88:9e:16:86:a0:4d:5e:
                    bf:23:f3:83:8e:36:da:28:90:65:1e:48:4a:96:ba:
                    b6:e7:13:5d:0f:f3:fd:10:de:09:c5:e2:34:dd:7f:
                    ff:e0:20:75:a4:d4:5d:93:f8:b5:70:c2:ed:c0:2b:
                    2c:1a:8c:f1:54:35:af:33:bc:4a:43:dc:11:8f:1e:
                    7b:6d:70:18:c2:ca:b6:5f:74:66:40:80:c7:0f:f5:
                    10:43:fc:7f:78:64:dd:8b:4b:c3:c9:d5:cb:d5:a6:
                    b4:b5:8a:01:6b:17:8d:6a:96:15:fc:e9:2a:f2:9c:
                    86:03:cb:08:2d:ae:df:59:4a:e3:b9:57:39:71:ee:
                    a7:ec:c7:f0:a0:9e:6a:34:a2:65:f7:5a:91:a0:d7:
                    64:1c:54:ae:00:b3:4e:39:12:f4:f5:bd:f9:80:48:
                    fd:9e:19:16:c6:a7:4a:42:8e:0b:0d:44:18:ab:5f:
                    0b:b7:16:ad:e8:47:9f:f3:b3:f0:fa:73:5f:2b:b5:
                    db:47:17:53:d8:53:a8:51:2a:7b:49:16:f1:b9:d9:
                    eb:af:12:53:95:66:d5:0a:2e:65:e0:ac:d9:f1:74:
                    3d:c6:81:e2:2f:8d:1a:3f:58:24:2b:34:83:49:c7:
                    ae:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7F:C4:01:9E:85:58:FB:EE:6B:82:9C:C4:6B:5A:BE:4A:48:B7:B5
            X509v3 Authority Key Identifier:
                keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f2:7a:55:1a:bd:23:ab:f3:04:4b:26:3d:0a:74:ec:52:a0:
         54:1d:1b:60:84:b0:d4:f6:32:f2:2e:59:a4:25:37:00:d3:4c:
         10:f5:ed:5b:17:67:83:69:e3:6a:06:3d:46:ff:b9:95:0f:e6:
         eb:e3:3c:33:0c:c7:d5:ae:1a:7a:c9:5a:c6:66:44:1c:af:7d:
         b4:48:3f:8b:c4:5e:58:07:4c:10:52:7a:f7:18:f7:58:61:22:
         2f:03:5e:a2:ba:dc:ad:51:82:cc:1e:0f:45:09:22:3e:38:e4:
         d4:4b:9d:0e:9b:48:5b:ec:bb:00:8f:f4:0c:c5:ca:22:3d:30:
         0c:d5:3e:8e:91:bf:e7:f4:2d:af:b5:75:fe:5d:ed:8d:24:84:
         ff:13:a5:7b:85:cd:9c:96:8a:06:b1:b5:ca:73:c3:2b:37:2f:
         2e:2d:52:c6:6f:47:51:f7:ec:c5:5a:16:98:f1:ba:cb:61:61:
         14:7b:06:b1:e0:f4:48:48:19:15:ea:48:b0:1e:5e:ef:e1:6f:
         60:6a:df:a2:83:6e:f3:c1:17:66:6e:1f:16:ed:77:4f:01:4c:
         04:2c:39:74:db:8b:84:76:ad:25:97:98:0b:76:1a:dd:43:75:
         7b:e6:29:ac:6b:7f:0d:d5:70:30:74:50:96:96:e4:a3:a6:27:
         b0:24:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:56 2025 by rpki-client