Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
File:                     s1ACugiNW9CcFVPc7VsL85B_9zY.mft (raw, json)
Hash identifier:          dJ0QO8/UZASkdCeWy+XW17XoWk3MZFvmhBH5oqfzR5s=
Subject key identifier:   CB:1D:99:00:37:25:DC:3B:98:61:24:D2:14:B9:2D:A8:62:EC:13:89
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Certificate issuer:       /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial:       019A01EBEC3821CD13F4B47CFA876C746BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
Manifest number:          0A05
Signing time:             Mon 20 Oct 2025 14:00:29 +0000
Manifest this update:     Mon 20 Oct 2025 14:00:29 +0000
Manifest next update:     Tue 21 Oct 2025 14:00:29 +0000
Files and hashes:         1: 2qrxmxFhyT-yCENM1h6TmxhPB8o.roa (hash: 7dE75s8f6pPL61Y94sO2ElyJScDRYTLZvobRATQ5r8k=)
                          2: K7_w83CbqB50p5lcpbyDnATtK4Y.roa (hash: /8SCcb2O2tmxF/iex69u1hAPcq9K2D7sGmmIbln+NaE=)
                          3: RU33m0E_v4JtyZuDuLE7um4TGFs.roa (hash: rYLpalqoskbodL0bGl/nYGGqSHm/lj+AMxh3BExa9eA=)
                          4: lupOL9qqLysg0mnUx6C8i2JeLHI.roa (hash: EfyA+Sh8l0uPBdYnXAoYnr9+KW83Fnvqu/9CGcABYvo=)
                          5: s1ACugiNW9CcFVPc7VsL85B_9zY.crl (hash: U/PV0/XR6VCuqxDEci1bfgAYrRItHyjoWukrikjSLh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:eb:ec:38:21:cd:13:f4:b4:7c:fa:87:6c:74:6b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
        Validity
            Not Before: Oct 20 14:00:29 2025 GMT
            Not After : Oct 21 14:00:29 2025 GMT
        Subject: CN=cb1d99003725dc3b986124d214b92da862ec1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:a4:5a:1b:c1:aa:c9:a3:a6:f2:4d:a9:80:
                    7e:b5:22:9e:9c:34:51:78:00:d5:1d:8d:bf:3d:62:
                    94:b9:57:da:33:82:0e:93:5c:17:37:c2:44:91:98:
                    35:71:de:9c:b1:72:e9:12:4f:a3:94:7b:b9:c4:a5:
                    cd:67:5d:7b:1e:cd:08:9b:55:b9:5b:b6:c8:5d:33:
                    c2:ad:02:03:c6:be:3b:ed:2f:06:24:96:ad:32:06:
                    78:3a:33:71:d6:5f:49:b7:9b:e3:18:72:ac:70:43:
                    78:b0:c7:14:cc:35:5f:a0:2f:42:3e:ed:76:96:9e:
                    d7:d3:b5:e9:d9:4b:f8:b2:f0:c8:14:e7:2e:24:f0:
                    77:a6:8b:7b:fd:3a:a6:b3:fd:9c:e4:44:e9:4b:84:
                    47:e6:1e:d0:9b:3b:15:52:97:d0:c6:14:0b:ca:6d:
                    d3:ab:7b:20:08:98:ea:eb:86:f8:0d:2b:3e:3a:f1:
                    b4:89:4e:64:e9:c3:3e:03:d0:d8:db:c7:0c:13:b7:
                    59:4f:7a:a7:b8:0e:63:5c:eb:e5:b5:db:87:3b:1e:
                    7b:fc:d7:04:cc:89:c4:94:a8:ce:92:fb:83:95:c9:
                    4e:15:cb:34:64:e8:68:96:54:3a:a6:c0:d2:da:cb:
                    3f:cb:7b:6e:c7:23:a9:48:54:11:84:c1:9d:19:e1:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:99:00:37:25:DC:3B:98:61:24:D2:14:B9:2D:A8:62:EC:13:89
            X509v3 Authority Key Identifier:
                keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d3:2f:87:22:09:78:14:d1:1c:38:31:ae:c3:5c:a0:01:d8:
         dd:2e:b2:11:29:60:23:47:88:2c:6f:e9:2c:f1:53:84:fc:6d:
         b5:97:bf:d0:4a:19:95:7f:cf:4c:62:d2:e4:e5:d7:3b:16:19:
         08:14:cb:0d:d0:46:32:fa:c2:f6:1d:90:43:28:61:ad:c9:d0:
         b0:ba:00:64:48:66:45:4e:a9:31:ed:ab:5a:ce:ca:34:8c:91:
         5f:c3:fd:9c:a3:9a:5e:52:18:c2:c8:36:47:b8:7e:e1:53:64:
         56:97:e3:d2:bc:1c:9d:0d:42:7b:ce:b4:4f:47:a3:bf:de:79:
         c3:bc:ff:ee:10:0c:79:09:01:4f:fe:ed:b4:26:2d:e0:9a:73:
         22:48:f4:ad:5f:2b:b3:28:29:98:7b:09:e6:3a:8e:d6:65:8c:
         13:23:91:a7:d6:06:ea:a1:bd:79:5f:38:4e:95:f3:7a:e8:d8:
         fb:6b:9e:9c:52:1b:bb:07:2c:8a:c1:18:5d:45:b1:3f:f8:43:
         dd:0e:08:f8:0f:a5:8d:f4:b5:5f:36:1e:cf:db:99:97:7e:e0:
         09:59:79:fb:fa:45:af:cd:a3:b0:79:79:ae:d6:e9:dd:c8:0f:
         1b:b6:fc:99:f5:5a:10:4e:29:a7:bd:e4:54:22:5c:e0:2a:fd:
         86:89:bf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:53:45 2025 by rpki-client