Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          UZPFA1xv5GX/e0i5PuPy4HoVewITSjmUE0llH5WDOyE=
Subject key identifier:   AC:D6:91:B2:2D:1A:3B:A1:4C:4D:0F:23:69:7A:90:57:1F:C2:43:33
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       0199FBEBAC198E2E458B3010FCCB8EE2A324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          09B2
Signing time:             Sun 19 Oct 2025 10:02:30 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:30 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:30 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: ZOmued21kxNegFKUv1+daZ4LHf39ip6zcG9TmLIdJyA=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:ac:19:8e:2e:45:8b:30:10:fc:cb:8e:e2:a3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Oct 19 10:02:30 2025 GMT
            Not After : Oct 20 10:02:30 2025 GMT
        Subject: CN=acd691b22d1a3ba14c4d0f23697a90571fc24333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:1c:5a:75:f0:c7:8d:cc:42:45:d0:2b:70:
                    1b:9e:4e:f2:aa:df:fd:3d:41:fc:a1:20:28:56:52:
                    50:46:48:f3:cf:51:61:d9:70:c2:18:f4:79:ae:90:
                    56:72:97:41:cf:da:7d:b9:12:b3:84:f2:7d:35:47:
                    6f:c9:57:fc:fe:16:8b:40:65:6b:1c:ef:ed:ac:bd:
                    80:59:32:8b:82:07:b4:59:cc:aa:88:92:8a:b8:c6:
                    cf:e3:dc:9e:e7:02:13:ba:37:8f:5e:c7:18:9c:67:
                    23:9d:9c:18:f6:98:1e:63:74:c0:0b:f1:ee:2b:8b:
                    7c:a3:9d:70:ca:a4:af:43:43:e7:e3:bf:52:aa:8f:
                    dc:75:11:bc:ae:7f:23:30:34:b5:72:35:46:b7:33:
                    3e:d1:ed:f0:1b:e3:9c:e5:d8:c7:92:eb:5a:1a:b9:
                    0b:1e:5d:ea:d5:08:a3:9a:2a:8c:ea:f7:ec:31:e0:
                    e3:df:eb:50:8d:39:d3:5f:e3:c0:97:32:2e:fc:3f:
                    53:09:88:a0:d2:d3:b3:97:12:be:70:8c:31:0c:0c:
                    23:da:d3:f3:52:ca:f0:c0:bf:19:e4:6f:5f:2a:58:
                    2f:70:05:f6:e5:9b:1a:f1:84:b3:dc:d6:9d:9b:97:
                    3f:07:3a:7c:5a:8f:52:5b:ef:50:55:27:d2:84:12:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D6:91:B2:2D:1A:3B:A1:4C:4D:0F:23:69:7A:90:57:1F:C2:43:33
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:29:a1:e6:0d:e4:92:d2:57:e7:7f:32:76:23:85:5b:49:
         66:f6:7e:93:ae:5e:b2:75:7b:79:52:fe:12:c9:53:60:4b:56:
         72:1f:4d:8a:ed:4d:fb:07:91:19:b6:43:22:91:4f:b1:62:75:
         34:3e:5d:74:e5:02:e4:43:b2:89:f5:fc:a9:77:62:e3:36:20:
         05:5b:84:c9:34:56:85:45:e1:35:5e:24:65:41:1a:c3:35:00:
         86:0b:41:bb:b1:0d:be:e2:ec:d0:49:95:c7:df:c9:5f:62:13:
         8c:2f:2e:72:b8:90:da:6f:55:b2:37:f3:cf:2d:6f:20:f9:a8:
         78:86:ed:13:6b:4f:37:f1:f9:00:af:34:a2:1b:bd:e3:b0:3e:
         ae:51:a0:c9:21:23:20:8b:5d:7c:fb:07:1e:31:cc:86:91:9b:
         f9:3d:b1:29:ab:78:78:6e:1f:d0:a2:b6:ab:25:57:80:ab:09:
         18:14:08:ca:08:94:76:3d:35:fa:b8:46:fd:6d:e0:30:5a:a5:
         b1:a5:1f:31:f4:9d:33:77:74:9e:12:a9:4a:70:47:c1:f9:76:
         08:3c:ae:c7:62:7a:f4:6f:2f:22:d0:3d:07:4e:83:3b:93:d8:
         73:7b:32:7c:cf:5f:a9:10:4f:b9:e5:dc:4d:33:fb:32:70:03:
         e2:45:b7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:18 2025 by rpki-client