Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
File:                     cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft (raw, json)
Hash identifier:          yB2v/wiH+huSPNQVSX8rNOP7jvYWVirH9aaf+D9ReQc=
Subject key identifier:   2A:A1:2C:E7:BB:DD:6B:6C:C6:8B:DD:B2:9E:35:74:02:1B:CE:A4:FC
Authority key identifier: 71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B
Certificate issuer:       /CN=713af8b790ac0923b24307ee008f261d10d9560b
Certificate serial:       0199FC5914B6841F650D5A71CE7DFBA8B8F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
Manifest number:          0DDE
Signing time:             Sun 19 Oct 2025 12:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:02:00 +0000
Files and hashes:         1: _VNZcr3EYGlXqjzpoEk_KD5xeQo.roa (hash: q7OjuouQNM7VgrvgHXW4IBw772Y+anjbTLeMEEPFDVg=)
                          2: cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl (hash: rejIot2NfgESEYJbLV5GJrkkAEqALI7EgwRI97N0NFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:14:b6:84:1f:65:0d:5a:71:ce:7d:fb:a8:b8:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=713af8b790ac0923b24307ee008f261d10d9560b
        Validity
            Not Before: Oct 19 12:02:00 2025 GMT
            Not After : Oct 20 12:02:00 2025 GMT
        Subject: CN=2aa12ce7bbdd6b6cc68bddb29e3574021bcea4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e2:db:66:a9:60:5a:fb:d8:f9:80:aa:15:43:
                    ea:c1:14:bb:38:b5:fd:bc:c2:0d:7f:88:fe:26:ea:
                    30:8c:5b:05:70:ed:ec:76:b6:81:80:ff:4b:a0:2f:
                    c2:16:bd:59:a9:11:fa:48:e6:c3:c4:57:7b:f1:8d:
                    eb:b9:e2:fd:3d:fb:5e:78:e3:82:0e:0b:f7:76:ee:
                    98:38:d8:ea:e7:3c:ae:6b:3c:99:4a:81:6f:07:eb:
                    47:61:f5:1b:75:e0:da:e0:91:4d:0c:50:0a:21:0f:
                    9e:04:78:1b:5c:36:29:c0:5f:7e:55:2e:22:8c:29:
                    37:2c:e5:82:44:40:8b:6c:84:ab:99:33:74:24:71:
                    af:8e:d5:7a:b3:0d:ef:a5:31:c9:f7:02:c7:bd:d3:
                    5a:08:90:67:a4:8e:97:ef:2f:73:09:b1:ae:8b:a6:
                    57:26:59:02:58:94:3b:93:2a:65:ef:65:49:f9:7e:
                    b3:7c:91:6e:d2:3e:ae:a6:cf:6a:36:7b:59:45:1b:
                    09:42:90:00:52:b5:23:53:8a:e3:7c:8e:a8:4c:34:
                    7d:95:ff:a5:5f:47:4a:60:94:be:7c:5b:00:12:33:
                    46:1f:b7:c2:34:a8:e0:c1:b5:e1:9e:d1:99:a1:b1:
                    18:c1:9c:f9:2a:11:0e:98:ab:7a:e3:ea:dd:15:83:
                    dc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A1:2C:E7:BB:DD:6B:6C:C6:8B:DD:B2:9E:35:74:02:1B:CE:A4:FC
            X509v3 Authority Key Identifier:
                keyid:71:3A:F8:B7:90:AC:09:23:B2:43:07:EE:00:8F:26:1D:10:D9:56:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTr4t5CsCSOyQwfuAI8mHRDZVgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/6fd5e3-cb6a-4d65-957c-47414766b6ba/1/cTr4t5CsCSOyQwfuAI8mHRDZVgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ab:5f:7d:be:ec:16:ed:2d:7a:cd:b3:32:df:b4:4f:b0:3b:
         e0:a1:cd:7d:1f:34:23:af:1f:ee:0c:bb:7f:88:80:68:c0:41:
         07:38:1d:c6:02:8f:d3:86:8d:92:e0:5a:0b:c2:ad:f3:f7:6f:
         4a:e3:cd:97:c5:78:95:52:4c:1a:e7:d3:85:a8:bf:f2:ff:14:
         52:f0:5b:5a:0a:c7:eb:86:31:bf:2a:15:9b:c7:d4:15:2c:8e:
         07:a0:10:c3:72:de:29:ba:17:ba:5d:e8:c6:49:4f:18:04:b5:
         49:5c:0a:20:c8:a2:0a:d2:eb:73:f1:97:c6:6e:16:d8:02:0a:
         52:79:aa:aa:42:fc:81:ab:fb:29:c0:62:9c:6d:9d:89:7a:12:
         f6:ca:94:7b:42:65:d9:f3:7d:1b:f4:3d:2e:ca:07:73:60:24:
         fc:db:73:5d:76:2a:64:80:41:0f:cd:06:88:e9:f1:12:12:ea:
         fa:f8:c9:6a:e7:d6:3c:51:ae:17:7f:0d:14:4d:3a:1b:15:51:
         f7:34:be:6e:94:33:c3:5d:00:8e:b8:95:5b:63:19:aa:f6:80:
         a3:53:17:0d:81:ff:d2:0f:d7:d3:0b:43:ce:74:6f:95:61:cc:
         85:aa:60:ac:4d:7d:ef:22:d3:6c:da:f3:ff:a6:ee:15:bf:6b:
         1e:e3:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:36 2025 by rpki-client