Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          huCh5pvfPio2MmF33tpwcd7SOf9ddK1BVNEMEGYgG/E=
Subject key identifier:   B4:93:DD:92:D1:0A:26:4F:CC:7B:A4:82:96:4D:7D:05:57:D6:E7:1B
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       0199FE0FCDACA2CBEEA20F3F82BE3B96E8E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          1442
Signing time:             Sun 19 Oct 2025 20:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:12 +0000
Files and hashes:         1: H3YMBp1HWn_yJUmsVDSZTkgIRZk.roa (hash: dsjF1p38BaFKD263jEWfJjaYNNkjDPWbd8s7iYfLKf0=)
                          2: JcHfeJjlV--266gVunBono2FBL8.roa (hash: 2aTzeGR10hHIdC8F6ToLHNpA36FVSTfHDmf74LWIj/E=)
                          3: cDHrUcS9iBRAhgzIa-0oojwM6x8.roa (hash: a6MRkFy47YCdZj55gPSM8dAPHE9bL49pr9pcP+5WZCo=)
                          4: gQFR0ws8EpADtXwJYL1_rKqtUCU.roa (hash: O/ujjDYhXza5+3b/lt0kt/wL12KlNYtlZgn4DDp272Q=)
                          5: ipnQ83UpKa8sWrTXie04nVeOWrE.roa (hash: LCyjANuJcWqupF1L+w0MaO/qngWjk1y0gHyBxfWyWgs=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: /SrJ88i1wNtflZGW0zjlTgCP98spbkiubxNcMvk8fsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:0f:cd:ac:a2:cb:ee:a2:0f:3f:82:be:3b:96:e8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Oct 19 20:01:12 2025 GMT
            Not After : Oct 20 20:01:12 2025 GMT
        Subject: CN=b493dd92d10a264fcc7ba482964d7d0557d6e71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:ea:6b:73:95:f5:c2:37:e4:7b:ad:4f:d9:
                    4f:13:39:be:41:8e:51:52:a8:e0:f6:f7:dd:aa:08:
                    a9:c3:fb:bc:19:c6:3f:70:db:92:6d:ed:bb:79:12:
                    40:11:cc:7b:7e:6a:ad:ae:ab:2a:f8:35:61:04:bc:
                    68:f6:00:3e:79:e0:d6:f7:1a:37:cc:78:b7:7d:8f:
                    11:2e:de:75:c4:51:3a:7b:13:97:5a:a3:db:5c:0f:
                    d5:11:55:6e:1f:f7:b5:03:91:9a:37:4b:38:08:56:
                    5f:26:a7:62:ac:3d:7d:f5:7c:22:95:9f:6b:42:88:
                    8a:e4:5a:bf:a9:78:cf:91:04:8d:4b:43:12:3c:a8:
                    43:63:8b:a6:be:6e:02:9a:44:c0:bc:89:e5:da:8c:
                    5a:b9:64:3d:54:31:bf:43:14:46:59:39:ea:53:d7:
                    7b:1e:9d:c3:f4:a1:ad:9d:79:9b:bf:ca:f1:f0:35:
                    96:8d:2c:5f:b0:d9:62:e3:a9:3d:72:28:c3:9a:79:
                    79:1a:fa:a0:3a:da:cb:4c:bc:1b:a3:e7:26:cb:7e:
                    64:cc:e8:de:cc:11:bb:87:f1:10:0d:a1:92:1e:62:
                    4b:bb:f0:10:59:39:59:6a:23:b8:05:e4:8e:d4:90:
                    6d:15:a8:6f:9b:73:bc:5e:87:a9:bb:4b:b8:9e:bf:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:93:DD:92:D1:0A:26:4F:CC:7B:A4:82:96:4D:7D:05:57:D6:E7:1B
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:e9:d5:6f:d7:a0:11:c8:79:e8:6b:bf:c0:91:29:04:08:
         8e:3a:ce:52:ab:36:24:49:60:6f:28:15:30:39:8a:69:ef:20:
         a9:2d:90:1f:4c:48:f9:77:8d:69:1d:0d:c3:b9:49:50:dd:f7:
         7d:d3:48:96:fb:a7:ba:0f:ba:8e:bf:7e:d5:f7:8e:69:97:dc:
         bd:cb:25:db:0e:be:1b:b0:d3:ee:03:2b:7a:01:17:db:23:ff:
         12:c6:47:06:45:9b:5e:6c:c7:87:1a:a8:25:21:0a:f4:ab:db:
         ec:54:7e:0d:67:2e:e9:1b:82:3e:8c:50:c9:be:1e:17:b5:b8:
         6d:f3:3d:95:50:55:42:5d:74:5c:7f:ea:4a:97:24:86:ac:bc:
         1c:82:58:f3:f1:59:85:42:ae:33:77:cc:40:ef:92:a4:e1:1b:
         9d:91:b3:2a:eb:fa:ff:94:df:25:55:ac:aa:81:e5:f3:53:dc:
         eb:3d:8a:21:9e:b9:b7:66:0a:48:c9:72:b0:85:4c:d3:40:37:
         c3:e5:a5:f5:4e:3a:84:6e:b5:28:43:72:1a:3c:81:70:87:e6:
         51:00:09:42:a8:55:5b:ac:0a:63:f0:99:77:ed:ae:9a:a0:fe:
         85:24:aa:b5:a4:0b:74:ac:64:83:9a:c4:97:c6:aa:c7:2e:90:
         20:14:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:05 2025 by rpki-client