Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
File:                     m-02rxPaSC_feftUA-UHSGDuzQ0.mft (raw, json)
Hash identifier:          69SbKuhtNbLHeQWvl9SQgHWRdFwhYsgikqnQ5DZ+fpo=
Subject key identifier:   55:7A:E0:A8:C8:91:15:C3:50:A6:58:04:59:81:52:3B:D3:6C:41:A7
Authority key identifier: 9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D
Certificate issuer:       /CN=9bed36af13da482fdf79fb5403e5074860eecd0d
Certificate serial:       019A025A023332A6A8FF25F0D92B57E50B3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
Manifest number:          11C9
Signing time:             Mon 20 Oct 2025 16:00:44 +0000
Manifest this update:     Mon 20 Oct 2025 16:00:44 +0000
Manifest next update:     Tue 21 Oct 2025 16:00:44 +0000
Files and hashes:         1: GCFxtCAUzvqYZpyUW8Mzrm4wxsc.roa (hash: IKXqgRLjEEuJWHSAJe6iyyi0FX1Oz2p26+VidSpPSQE=)
                          2: gME55grAdW0csfpDqI4X-z1lPB8.roa (hash: Yk24RuTuN+kQwIiTqSqW+TjwkayeuH80Y+g3ReFhIuE=)
                          3: m-02rxPaSC_feftUA-UHSGDuzQ0.crl (hash: LKaeh7gK6ijinSrs2u0fIS9fEoRX4FGTfW91iL0g1+s=)
                          4: oAMq7eOSrrg7QzHYvuiclu2pDcU.roa (hash: 0Dq9HT+D04Msgy5j4AI+QE/myTwZkQVZ5ZeJBagVuyM=)
                          5: rPUiYOwFFBXwEbG0rI7AP5flCD0.roa (hash: fpp2fjiduFcCROlP6+vFm2e63EILUjHK8HyGsStaukM=)
                          6: tsiU7azXEn11ZU6Xi_XUw-9XI8A.roa (hash: zObDmeFB3M8dfzRuyTAH/oAzX2g0/cCu39kU8lAYB64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:5a:02:33:32:a6:a8:ff:25:f0:d9:2b:57:e5:0b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bed36af13da482fdf79fb5403e5074860eecd0d
        Validity
            Not Before: Oct 20 16:00:44 2025 GMT
            Not After : Oct 21 16:00:44 2025 GMT
        Subject: CN=557ae0a8c89115c350a658045981523bd36c41a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ae:d7:a6:08:0f:72:4c:fb:b1:46:3e:4d:24:
                    03:fe:97:d2:b3:77:17:be:33:21:dd:a5:44:ec:ef:
                    63:c9:5d:5f:57:ef:fa:3a:3e:c4:7a:26:97:a7:3e:
                    6b:94:b9:3e:45:c1:21:13:cb:13:9d:b2:13:a0:ca:
                    b4:ff:12:59:d7:c0:25:8b:7b:6f:96:81:66:3b:05:
                    90:70:eb:2d:8c:62:93:a4:88:f7:a9:12:37:27:96:
                    51:ce:83:5c:53:6c:3e:6d:b2:b2:7c:72:68:4c:63:
                    ea:a6:cf:ff:61:f9:79:56:7b:6b:72:bd:d0:e4:8b:
                    50:9f:ac:94:8f:f6:7e:92:db:92:bf:dc:ac:b1:2a:
                    e2:34:05:45:27:c3:8d:1e:51:50:5c:c1:c9:09:35:
                    92:c3:d8:b1:46:b3:02:50:ae:e4:94:6f:ab:c2:6f:
                    ac:3a:e7:14:46:6f:42:f7:da:22:c9:26:93:03:fb:
                    94:31:b0:95:ff:90:73:7f:6a:f1:45:8f:e3:41:22:
                    3d:5b:08:4c:8f:5c:12:0f:89:c2:2b:c4:29:13:42:
                    aa:a2:21:6c:84:a2:a7:d1:94:01:f6:31:f7:08:42:
                    29:3d:cd:98:4d:2b:2c:49:a7:55:86:63:4c:03:79:
                    5b:cb:95:7c:98:6f:13:03:7f:2a:5d:72:84:b2:d9:
                    71:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:7A:E0:A8:C8:91:15:C3:50:A6:58:04:59:81:52:3B:D3:6C:41:A7
            X509v3 Authority Key Identifier:
                keyid:9B:ED:36:AF:13:DA:48:2F:DF:79:FB:54:03:E5:07:48:60:EE:CD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-02rxPaSC_feftUA-UHSGDuzQ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4b0283-a90c-4d64-8301-d221ebd0818d/1/m-02rxPaSC_feftUA-UHSGDuzQ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:52:4a:62:76:74:58:4b:28:b9:08:8b:66:b4:1b:c4:bb:fb:
         ad:2e:25:a9:9d:ed:64:52:8b:e6:92:0e:18:b2:a1:90:01:44:
         2b:69:5a:b2:1a:76:c0:b5:1f:7e:ae:60:13:09:62:2b:ef:10:
         08:06:5a:cc:8f:1a:cd:ce:c2:3d:2f:34:e4:09:77:ef:37:c9:
         4f:d4:8f:6a:ef:e3:7b:0a:a6:b4:69:b9:65:0a:ca:f4:e6:ef:
         6b:ba:aa:c3:6d:28:ec:ae:0f:89:53:9f:fc:bf:2a:cd:b4:c6:
         75:7c:fe:5a:c9:2f:c4:d7:5f:b5:3b:70:3b:79:7a:79:09:54:
         91:69:84:c8:c2:3b:6d:51:4c:e2:33:41:ef:81:8b:1f:5c:94:
         d0:dd:14:d6:fc:04:20:63:81:e2:06:56:eb:44:c5:5d:49:de:
         8b:c7:20:8d:45:0c:96:dc:9c:70:67:11:99:c9:bb:17:aa:e0:
         ae:72:e8:f5:a6:73:70:8a:aa:81:00:d9:37:5d:75:67:4b:46:
         cf:3c:9c:9b:f0:50:73:67:dc:3b:95:33:cb:db:0b:e1:1a:85:
         75:6d:8f:7c:48:5c:00:b3:df:34:41:c3:98:fb:83:34:cb:b9:
         97:b0:39:18:a1:1c:4c:c2:d7:87:5a:fd:50:58:89:ae:71:da:
         91:91:a2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:12 2025 by rpki-client