Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
File:                     t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft (raw, json)
Hash identifier:          U+NfOcvZdZ1uI1XwZRhmQPMXxNVhIi/WbOXE6+uUj2k=
Subject key identifier:   73:79:AF:06:4C:35:69:CE:A1:8B:E1:C9:B6:D4:62:E4:E1:07:3D:8C
Authority key identifier: B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5
Certificate issuer:       /CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
Certificate serial:       0199FF22915E3FBD8211CFF7AD73894A55EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
Manifest number:          0118
Signing time:             Mon 20 Oct 2025 01:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:19 +0000
Files and hashes:         1: t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl (hash: 4cMUhEHcbXMNuWu2QxUS/8dyTMH8MGx6GM8FZ1Q2AoY=)
                          2: vfts5VO11Lf49yWawFf1T10X7IA.roa (hash: o5JhQxo9WfUPfoKsbz0ZkfnOyZ6HVJldiK9KySDHufY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:91:5e:3f:bd:82:11:cf:f7:ad:73:89:4a:55:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b774c7b8baa1d9d47c3af55f3e97dd6e5d6e27d5
        Validity
            Not Before: Oct 20 01:01:19 2025 GMT
            Not After : Oct 21 01:01:19 2025 GMT
        Subject: CN=7379af064c3569cea18be1c9b6d462e4e1073d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:a1:5f:e5:da:0a:78:a4:b1:ce:58:fb:10:
                    fa:a7:92:4a:48:6c:33:c2:27:e2:75:29:eb:ff:64:
                    7c:7b:cf:fa:9d:69:ab:86:06:af:73:68:9d:66:af:
                    9c:97:82:5f:22:88:7b:31:4d:51:e5:a3:25:7c:1d:
                    33:e7:6d:b4:79:09:d0:75:3b:45:8f:78:02:0e:d3:
                    3d:82:58:61:c6:c0:13:19:ce:12:e9:73:6d:9f:94:
                    39:89:50:df:98:fc:25:07:a1:13:57:5a:30:33:51:
                    2b:ed:2a:34:5e:af:b5:63:c9:65:d6:cf:00:14:10:
                    b6:fd:39:d4:c6:4c:0e:0e:de:44:e3:5d:69:53:af:
                    6f:5c:d4:4c:7f:68:12:e0:74:04:99:4e:7b:0b:2c:
                    e6:f3:d1:fd:f3:89:71:73:da:06:5d:a3:10:01:f4:
                    e9:7b:25:87:9b:35:bf:41:e8:6c:b8:b6:ad:0c:67:
                    bf:b8:46:d7:37:24:54:a5:9a:ef:6a:54:08:6e:2a:
                    69:05:48:bf:06:c2:89:7a:47:af:13:3f:ce:64:53:
                    cc:1c:c1:e5:61:f6:0c:92:fb:f0:4d:20:32:e2:89:
                    e4:59:c0:55:96:fc:19:11:58:b2:a7:4e:78:00:77:
                    83:ac:b8:76:bb:78:79:8b:bb:8a:11:8b:59:f9:39:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:79:AF:06:4C:35:69:CE:A1:8B:E1:C9:B6:D4:62:E4:E1:07:3D:8C
            X509v3 Authority Key Identifier:
                keyid:B7:74:C7:B8:BA:A1:D9:D4:7C:3A:F5:5F:3E:97:DD:6E:5D:6E:27:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3THuLqh2dR8OvVfPpfdbl1uJ9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e08794-0095-471b-a301-f0387e0e621b/1/t3THuLqh2dR8OvVfPpfdbl1uJ9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:eb:14:08:c3:69:68:5e:89:cf:7c:b5:d4:96:a2:1f:58:e8:
         eb:b9:ae:22:64:71:ce:ea:a2:18:1e:41:96:40:8c:ab:46:91:
         61:84:08:b3:99:e5:11:ca:7e:46:74:27:41:ce:4c:56:97:af:
         14:e7:96:10:84:e1:5d:a0:7b:65:13:29:f3:44:11:d3:31:fd:
         07:2f:71:f3:cb:c4:af:ce:ef:83:92:9d:7c:0e:48:d3:e7:c6:
         3b:75:ce:1a:09:66:42:54:e5:98:5e:83:20:88:09:c3:34:59:
         1c:57:5b:87:84:2b:02:97:a3:ca:25:61:a1:1e:aa:72:34:d8:
         af:4a:24:40:40:d7:9f:a9:a0:21:a9:37:9a:95:72:af:70:5c:
         29:c4:ae:7b:c3:94:27:c3:0b:f0:3d:f6:13:bb:20:45:b4:f2:
         55:cd:53:9d:6e:c1:52:77:f6:e4:d9:91:bd:aa:e0:05:03:1e:
         a8:4a:47:87:4b:17:dc:c7:c2:e9:3f:69:3a:63:1d:66:66:2e:
         d2:b4:ca:bd:ad:96:57:48:c8:31:98:7a:b0:fd:af:27:ab:a3:
         10:6e:3c:1f:bc:c4:ba:f2:4e:ed:1a:5d:a6:3d:42:ea:1a:e2:
         88:ea:fc:9d:8c:66:b5:d0:68:29:2d:d9:a4:5b:44:51:85:d7:
         23:34:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:26:05 2025 by rpki-client