Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
File:                     8cSYM_Q5ueBnfY078fUt-_ssYk8.mft (raw, json)
Hash identifier:          PJv/DN/NtBJUff7VNNCYCptV8IriHfLHf/FgLzvPA2Q=
Subject key identifier:   B7:94:05:BB:5F:33:89:6D:72:2D:D7:74:AE:DA:19:CC:72:20:8F:FD
Authority key identifier: F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F
Certificate issuer:       /CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
Certificate serial:       019A044879E07EC3BF84BE2849CE18A03D06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
Manifest number:          0AD1
Signing time:             Tue 21 Oct 2025 01:00:49 +0000
Manifest this update:     Tue 21 Oct 2025 01:00:49 +0000
Manifest next update:     Wed 22 Oct 2025 01:00:49 +0000
Files and hashes:         1: 3ZpH3IW99tcCAzGjbjQTTiu70Eg.roa (hash: DLWTw4UKdSLOETh6kocBhjPqoC9NP+EApW6Oj+8OWfw=)
                          2: 8cSYM_Q5ueBnfY078fUt-_ssYk8.crl (hash: xRJNJudnEyImkMju/uzsCElstIc1GfMB/kub5UCzDbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:48:79:e0:7e:c3:bf:84:be:28:49:ce:18:a0:3d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1c49833f439b9e0677d8d3bf1f52dfbfb2c624f
        Validity
            Not Before: Oct 21 01:00:49 2025 GMT
            Not After : Oct 22 01:00:49 2025 GMT
        Subject: CN=b79405bb5f33896d722dd774aeda19cc72208ffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:97:4d:14:bb:dc:57:42:e6:89:fc:51:41:43:
                    2f:fb:6d:49:44:70:69:7e:36:aa:c3:4f:c9:96:a9:
                    02:8e:b0:73:1c:69:9d:01:5a:64:bd:95:3c:fa:89:
                    db:10:71:8c:4f:15:a4:3d:5d:e9:05:08:9a:20:50:
                    18:84:69:5f:54:eb:ce:79:a8:38:5f:46:00:ad:c8:
                    7f:a1:3b:5a:9c:ba:7a:cc:fe:f4:55:44:c5:89:ff:
                    88:55:0d:71:1f:0a:44:fd:76:69:58:25:6b:70:2b:
                    31:2b:8b:d6:88:04:d4:94:77:91:57:b1:85:01:47:
                    be:56:20:fa:75:eb:bf:e3:33:64:8f:eb:de:13:b1:
                    33:de:3a:45:b0:7a:a4:59:c7:26:9f:a8:ba:7b:7f:
                    4e:5b:80:02:37:a4:17:54:86:be:37:8d:28:51:f1:
                    41:0e:ce:18:b9:dc:a0:15:be:21:0d:12:eb:35:e2:
                    16:3e:4e:0d:31:02:f5:20:96:33:79:d1:0e:37:26:
                    4e:00:4e:1f:cb:c9:e9:5a:a6:ff:2d:56:c7:d4:4f:
                    82:4a:8c:b3:86:17:41:e4:18:13:10:0e:31:e6:ea:
                    a9:95:70:85:54:1e:0c:19:35:6a:fd:f8:82:b9:0f:
                    d8:10:e5:e2:77:83:9c:ae:00:85:46:b2:61:e8:c6:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:94:05:BB:5F:33:89:6D:72:2D:D7:74:AE:DA:19:CC:72:20:8F:FD
            X509v3 Authority Key Identifier:
                keyid:F1:C4:98:33:F4:39:B9:E0:67:7D:8D:3B:F1:F5:2D:FB:FB:2C:62:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cSYM_Q5ueBnfY078fUt-_ssYk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3ae379-79e1-46ab-b04d-0f0fa6b6e4bd/1/8cSYM_Q5ueBnfY078fUt-_ssYk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:21:7a:57:a2:de:55:a9:6b:a2:24:6a:fd:c7:6a:4c:57:67:
         c3:74:dd:7d:22:58:aa:08:05:04:9c:4b:03:4a:2a:fd:5f:8f:
         b4:8c:05:83:d1:5f:fe:be:9d:b4:94:e3:68:c4:21:e4:73:31:
         bc:12:2b:49:94:e1:6b:09:55:76:cc:cc:9f:c7:fb:f8:67:81:
         14:14:81:57:8a:f1:d8:78:ee:53:78:d0:44:7d:11:e9:f8:ae:
         ed:63:2a:b4:0e:e1:8f:cb:ab:60:c7:9e:ba:55:65:ec:23:bf:
         71:b5:8a:70:ab:b9:5b:cd:12:d8:c2:a8:05:c1:76:62:35:02:
         9c:27:e9:bd:a6:9a:97:66:ca:b1:6f:ae:07:52:fa:37:2d:52:
         bc:81:dc:4d:3d:dc:6d:0a:1a:1c:b3:93:10:55:7b:13:75:5f:
         59:0f:79:99:a3:54:f1:2e:5c:73:9a:70:75:8a:e5:69:10:49:
         d5:22:ae:61:e0:97:de:08:13:77:89:b8:f7:68:e1:86:47:d3:
         68:1b:5d:f1:e0:65:5b:03:85:b4:ff:36:0c:79:44:fd:70:27:
         a1:1a:14:2a:3e:44:7a:34:67:64:00:d5:d5:c4:a5:7f:5e:b2:
         76:e7:de:88:02:c8:c2:d1:ae:1e:6f:50:fe:9b:5c:b8:83:60:
         b8:13:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:40:10 2025 by rpki-client