Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
File:                     aMDy0Hdvfh00kHWIHDXp04dGNAU.mft (raw, json)
Hash identifier:          ynTI+Ju+QF37zWhH2rLXz1oPVLGTXRS2whlmDZwasuo=
Subject key identifier:   E4:51:E4:FB:B7:29:E0:A8:EA:24:DE:01:69:CB:F1:AA:48:20:1D:C8
Authority key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Certificate issuer:       /CN=68c0f2d0776f7e1d349075881c35e9d387463405
Certificate serial:       019A00DA11524AEBB7E3169993DF3EFADD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
Manifest number:          083B
Signing time:             Mon 20 Oct 2025 09:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 09:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 09:01:22 +0000
Files and hashes:         1: 9Cor9nA5STtdeNAPJ4EF2UhIUNY.roa (hash: 2Xypo5/I10KMSVc6sd5OAZl2260JQAWQGDIcFZqWthg=)
                          2: 9L1jJAO_HMQ73m0y2wPc0NTq508.roa (hash: dppWJh2OxH8+hUL7V9AV0LikKL7kW2xpJmDuGMTyRBM=)
                          3: BofSOCqR9lVaW3XPh8s-hTi0YA4.roa (hash: GjLb3/wGRJd3Eao5cHxTciBM+9F+oErcKi5PWIvkCug=)
                          4: aMDy0Hdvfh00kHWIHDXp04dGNAU.crl (hash: ig5CdGVcQXxy5AbBxAMlITiayrRGvFlv6sMfiC1XIYk=)
                          5: pGJ6hykI0SezIUBll3Bejkc4eK8.roa (hash: LOy2PAU5LyGNlvT8G9Ei0trOR6p2w0dY/EWeeNGTATo=)
                          6: sid7Fz4p9LsUb435z4rlURheO5M.roa (hash: tKFwC0bd+BEOCIW21NmrzUtEhbV3IutUiWL0BmRO0A8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:da:11:52:4a:eb:b7:e3:16:99:93:df:3e:fa:dd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68c0f2d0776f7e1d349075881c35e9d387463405
        Validity
            Not Before: Oct 20 09:01:22 2025 GMT
            Not After : Oct 21 09:01:22 2025 GMT
        Subject: CN=e451e4fbb729e0a8ea24de0169cbf1aa48201dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a5:6b:9d:6e:b4:e9:e8:ac:e2:1e:c3:72:2e:
                    b7:7e:6e:b1:d6:66:88:df:52:80:04:39:32:3c:17:
                    00:16:a3:a8:e6:9b:6a:de:40:2a:3e:88:13:42:93:
                    81:78:9c:44:53:28:58:d4:0f:78:c9:88:c8:6b:8d:
                    80:cf:ac:bc:81:a8:bf:0d:5c:e9:03:8d:98:d5:a3:
                    02:95:d9:b5:1e:23:21:30:1e:b0:b6:79:d5:4b:5c:
                    a0:0c:e6:55:b8:c7:18:65:2f:ea:a7:c5:5c:9e:e2:
                    15:27:94:e4:d9:a1:8e:68:93:1b:ae:74:da:c5:44:
                    6c:09:0e:44:d1:09:44:37:60:10:41:41:20:22:74:
                    a8:51:32:6a:86:46:06:40:0d:22:75:85:7c:6d:6e:
                    0f:ad:5b:46:33:07:90:6f:c6:c7:f3:d7:ff:c4:f6:
                    1d:0b:2f:5b:f1:fc:72:f5:43:cf:f1:eb:76:d2:3e:
                    3d:70:93:6b:c3:50:15:c9:a0:09:f4:a2:75:ac:59:
                    7b:f8:03:e0:11:53:1f:c0:87:96:f9:c9:f5:47:96:
                    ca:ee:90:4b:06:ed:95:1b:fe:84:a6:32:5e:05:46:
                    83:c0:57:16:6a:ca:25:d7:a1:5b:ad:52:e8:39:f7:
                    2c:d2:c2:79:00:f9:c5:2f:f7:b6:0d:7c:bb:a3:9d:
                    0b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:51:E4:FB:B7:29:E0:A8:EA:24:DE:01:69:CB:F1:AA:48:20:1D:C8
            X509v3 Authority Key Identifier:
                keyid:68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:37:29:9c:bf:a5:be:12:0a:d4:21:27:f6:17:22:25:a8:aa:
         e7:30:bf:a3:1c:16:12:24:0d:2a:5a:6c:94:5b:5b:b7:3e:44:
         a7:44:eb:6f:c5:c1:b7:99:d4:c6:aa:ff:7d:dd:97:b0:09:90:
         81:5c:0a:5c:13:f6:d7:51:e2:96:63:b9:94:d8:89:f2:1c:b2:
         5c:25:aa:78:01:d0:39:09:58:74:6d:92:bd:ff:6e:15:dc:42:
         42:6d:9b:16:fa:c4:c8:ae:e5:21:3b:2a:9e:6c:c2:9a:a9:e1:
         a6:d7:65:ac:30:c8:ef:30:1e:b6:4c:1a:9d:2f:ee:1f:f9:50:
         63:61:07:23:0d:56:0a:fc:a8:18:53:82:15:71:fe:6b:8b:a5:
         e3:e7:d2:0b:ae:26:13:82:63:fd:e2:bd:03:b4:5f:60:f8:c0:
         a4:28:f1:79:17:0f:f9:cc:e1:4e:e9:3c:1a:95:c9:fb:28:9a:
         f7:37:25:2c:41:d4:18:fa:a0:c1:7c:1f:38:b1:28:c4:43:f1:
         e1:90:58:36:60:87:77:e6:47:5f:88:33:99:64:8b:2e:f3:fa:
         fd:1a:74:cf:b5:db:f9:5f:a9:76:04:31:f9:77:a9:78:03:9b:
         32:2d:88:0d:64:66:ed:66:82:c7:56:f6:42:78:be:d3:d2:4e:
         88:61:72:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:49 2025 by rpki-client