Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
File:                     MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json)
Hash identifier:          gGrFkrCgdedg+A/cm71Mu+38+eU7x92o/PsDSN4BTtE=
Subject key identifier:   9A:8D:AE:5D:15:CD:DD:13:DB:FD:74:69:84:53:F6:E7:5A:17:65:BD
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Certificate issuer:       /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial:       0199FC583792D7C63A6B4F9F70024F8387A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
Manifest number:          0DB4
Signing time:             Sun 19 Oct 2025 12:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:03 +0000
Files and hashes:         1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=)
                          2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: nQZtzzTDFRaMS2rozwqL8TEywyRJ32oUbq8r4WKklGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:37:92:d7:c6:3a:6b:4f:9f:70:02:4f:83:87:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
        Validity
            Not Before: Oct 19 12:01:03 2025 GMT
            Not After : Oct 20 12:01:03 2025 GMT
        Subject: CN=9a8dae5d15cddd13dbfd74698453f6e75a1765bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:f6:e2:1a:85:06:a8:bd:f3:80:7c:50:7a:
                    aa:85:a3:42:b3:03:cd:53:f7:59:4f:53:87:0d:dc:
                    f7:8e:c3:d1:34:5b:88:af:f2:37:97:2c:e7:10:38:
                    02:f9:6c:17:e6:10:9f:a7:2d:e2:b2:f7:28:72:fc:
                    3d:90:af:7e:cc:bf:59:60:86:92:5a:78:19:da:38:
                    b4:a5:0f:43:b6:62:9b:97:cc:32:a9:f8:61:9e:b0:
                    4f:75:ee:2c:bd:21:4f:0f:8d:a7:af:b3:ca:3b:9e:
                    78:35:ba:64:30:b8:e1:b9:64:e4:68:4a:5b:64:74:
                    9a:61:72:f0:c3:38:70:f8:cc:55:39:ab:f1:92:5d:
                    ea:29:b1:3f:69:76:d4:25:56:93:e8:ba:d3:ab:d2:
                    72:73:57:f0:41:13:8b:9d:99:db:6a:d4:fd:c4:6d:
                    0f:38:e1:56:52:c2:3d:af:cd:cb:9c:9f:21:f8:2b:
                    2c:f7:17:5e:72:51:58:d6:02:43:a1:5e:53:25:87:
                    1e:19:d3:59:a0:1f:d9:3f:76:0b:76:f4:f9:7a:e4:
                    a6:f9:ee:c7:cf:1d:67:ed:ac:83:88:6d:62:71:40:
                    af:3c:93:64:c9:a5:08:d3:43:59:a2:f9:01:f6:42:
                    d0:fd:e6:94:65:18:d1:5d:63:b5:1c:24:5f:d5:83:
                    a2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:8D:AE:5D:15:CD:DD:13:DB:FD:74:69:84:53:F6:E7:5A:17:65:BD
            X509v3 Authority Key Identifier:
                keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ba:2a:ab:c7:50:0c:d7:b2:4c:60:a9:a2:59:e9:19:60:d6:
         e6:fc:18:96:7e:5d:b7:d6:e0:20:9c:4d:d6:4b:fe:1d:43:35:
         f1:56:60:0c:51:09:ee:1c:35:08:81:af:6d:5d:5e:84:11:d4:
         90:b2:38:a3:4e:78:bb:d1:04:a5:a4:6b:de:e1:80:50:f0:6b:
         d8:09:76:ab:62:d3:7c:f5:2f:c7:33:d0:ec:39:9c:92:c6:cf:
         5d:b3:02:08:53:ed:c1:b5:67:f3:95:e5:d8:0b:15:94:5b:1a:
         e8:9c:d5:19:aa:80:63:77:d6:c0:d9:f8:1f:32:79:f9:38:15:
         18:00:50:f5:cb:b3:f3:fd:cc:a6:0a:51:a5:90:28:bb:fd:cb:
         bd:a3:3e:6c:31:9f:32:c7:05:2c:02:5b:94:34:7c:38:b8:90:
         48:21:ec:e4:34:87:4a:a2:ab:1d:de:1e:48:47:11:8a:c0:6e:
         ac:29:d9:bd:7c:22:bc:bf:44:b7:6c:fd:e9:ce:22:ce:8f:30:
         a1:46:36:cf:5c:27:3f:f0:77:69:8b:d6:96:b1:9d:70:cc:8b:
         46:53:ca:fd:14:d0:3e:37:3f:9e:04:73:58:60:73:bc:7d:4d:
         9c:14:97:1c:ae:be:b7:d0:e0:0e:81:f7:1c:a4:60:be:ad:8b:
         22:7c:47:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:59 2025 by rpki-client