Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
File:                     X4rRNUEr-QQb5f0I50okEg2z7sc.mft (raw, json)
Hash identifier:          r/gDnH+iw1I8YRcukbe9GaHxgtt/o8LJ1si7+LIS/5k=
Subject key identifier:   AD:4E:B1:32:4C:AD:2C:FD:3E:25:10:8E:EC:4B:AA:93:CC:2A:AD:EF
Authority key identifier: 5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7
Certificate issuer:       /CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
Certificate serial:       0199FD3494C587DCBB99D31323986607F542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
Manifest number:          0B35
Signing time:             Sun 19 Oct 2025 16:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:45 +0000
Files and hashes:         1: OaP0ViKbeY2ivI-4rv6OeNEGIqA.roa (hash: e7Vy7pCIoWDvqhKmOHXfSd0NE1hCUf1lKUMb+Ggiqf0=)
                          2: X4rRNUEr-QQb5f0I50okEg2z7sc.crl (hash: xCuP6DftiWVvjLVomIVHtpyRZckG9maFQX9fIaYevxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:94:c5:87:dc:bb:99:d3:13:23:98:66:07:f5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f8ad135412bf9041be5fd08e74a24120db3eec7
        Validity
            Not Before: Oct 19 16:01:45 2025 GMT
            Not After : Oct 20 16:01:45 2025 GMT
        Subject: CN=ad4eb1324cad2cfd3e25108eec4baa93cc2aadef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:0f:f8:7c:22:f0:ee:a7:80:18:36:6a:66:
                    a3:d8:fc:31:3a:34:6e:2a:6f:7a:d4:8f:d9:3a:94:
                    19:90:77:85:c6:6e:c6:ed:d6:fa:6a:f5:e3:62:da:
                    22:4b:4e:c8:2c:b9:ca:81:f1:45:2c:94:a6:92:e4:
                    ad:2f:d1:42:36:45:ec:a4:3a:50:74:84:5d:fb:4b:
                    ff:ab:51:70:d0:b0:c0:93:f0:f5:1c:e9:24:73:0a:
                    01:16:5b:b9:2b:35:88:2b:78:70:0a:f8:9f:cf:b2:
                    1e:fb:d8:73:b9:96:42:dc:86:99:a2:9a:1a:9c:bb:
                    2a:90:59:02:26:a2:10:9d:40:bf:52:56:65:bf:16:
                    f6:17:6f:19:cc:ea:dd:56:c2:24:08:c3:bb:cd:98:
                    0e:2c:d6:8a:55:7d:d8:a1:dd:8c:27:97:6b:7e:2e:
                    2e:6e:66:10:62:85:94:54:31:b5:11:2d:98:65:b8:
                    aa:fd:29:b3:10:52:f2:ef:c2:6f:ba:7d:0d:03:f0:
                    b9:9e:3a:a9:41:bc:b6:4c:f4:bb:6c:b3:8a:8b:06:
                    51:b8:28:49:6b:3b:21:57:69:12:9b:d7:d0:8e:14:
                    30:72:ae:72:90:aa:d4:d8:33:fb:80:56:2b:1d:ea:
                    f0:9b:fc:5e:02:8c:9b:46:3f:eb:0a:37:86:7d:bd:
                    6f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4E:B1:32:4C:AD:2C:FD:3E:25:10:8E:EC:4B:AA:93:CC:2A:AD:EF
            X509v3 Authority Key Identifier:
                keyid:5F:8A:D1:35:41:2B:F9:04:1B:E5:FD:08:E7:4A:24:12:0D:B3:EE:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4rRNUEr-QQb5f0I50okEg2z7sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e3efc8-5f1d-4eb8-9720-379733ab38cd/1/X4rRNUEr-QQb5f0I50okEg2z7sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:f9:ef:7d:c9:03:a0:31:f5:19:f4:ed:32:4d:55:88:89:
         cd:13:45:4b:d5:d5:fe:6b:54:ac:80:ad:92:c0:83:6d:7c:d8:
         e1:36:ba:e1:0d:07:fd:9a:b2:66:1a:b5:85:fb:54:09:af:89:
         7c:f1:ce:d6:d7:65:55:b7:b8:4a:6b:80:c6:54:91:48:2d:14:
         a0:58:fb:6f:41:a2:4b:cd:9c:b6:68:4f:f1:1a:3c:81:8f:64:
         b6:52:04:23:82:8f:7d:84:78:3b:5f:59:8a:92:30:cc:bc:b6:
         15:76:13:5b:82:2c:59:17:be:ea:36:fd:97:7a:cc:f8:db:8e:
         f4:ab:bb:62:74:60:13:cc:51:10:d7:8d:7f:61:f0:06:d3:16:
         4a:64:df:43:4b:bc:27:59:0b:f7:72:4e:d1:e8:51:53:23:f0:
         1f:01:91:f5:73:e9:2f:ed:2f:4a:45:99:82:6b:92:c8:c7:8b:
         66:c5:23:44:20:73:ad:1a:f5:87:7e:88:3b:8b:1c:22:f8:3e:
         6a:7d:08:61:e3:e4:39:ab:d2:87:80:99:fa:0c:a2:0c:08:b5:
         be:96:26:6a:47:6c:93:e1:df:51:d6:af:3f:ca:8c:b4:22:39:
         b6:0a:c0:c8:4a:75:fd:30:f3:4c:78:f7:6a:e9:60:68:fb:bb:
         ca:8a:26:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:39 2025 by rpki-client