Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
File:                     CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft (raw, json)
Hash identifier:          uC9e43AzcPyjopcTmkDw/+so9MaBDjc7CygdZ3Dp9VM=
Subject key identifier:   4C:E7:1F:5D:A8:3C:74:7C:00:31:A3:65:CD:E1:28:0C:3C:F6:45:9E
Authority key identifier: 09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6
Certificate issuer:       /CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
Certificate serial:       0199FE477A74F9E33B34D458619F954A0A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
Manifest number:          137E
Signing time:             Sun 19 Oct 2025 21:02:01 +0000
Manifest this update:     Sun 19 Oct 2025 21:02:01 +0000
Manifest next update:     Mon 20 Oct 2025 21:02:01 +0000
Files and hashes:         1: 5gxr50rRC6q1xmQ2obCCI3UU8XE.roa (hash: 788tIYHaxcKJti3OU2hmplvQGAFcsSM5lvHfjYsQU8M=)
                          2: CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl (hash: ANh8aSk1gMa+fUlcLQ5bTRiK4KeY7RyHSHUGdQvflDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:7a:74:f9:e3:3b:34:d4:58:61:9f:95:4a:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=092cc4e3f11a0f5ee7c56f67ce099601a4cfbbb6
        Validity
            Not Before: Oct 19 21:02:01 2025 GMT
            Not After : Oct 20 21:02:01 2025 GMT
        Subject: CN=4ce71f5da83c747c0031a365cde1280c3cf6459e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:e3:9c:7b:8f:12:71:0c:fd:c5:9c:77:09:
                    69:d5:08:26:40:e7:75:51:58:7a:5a:cb:4b:d0:bc:
                    a7:1f:a8:7d:71:ea:25:4e:40:19:bd:07:00:43:c8:
                    fd:0e:9c:1e:39:2c:7f:bc:10:04:27:72:29:16:02:
                    6f:6b:5f:a2:d5:e8:c5:64:c5:d1:09:41:ff:62:2f:
                    ff:80:04:71:8a:3f:a1:f0:df:ca:8b:13:3e:37:7f:
                    10:5f:a8:f2:37:a9:d0:bc:81:c9:ff:af:33:4e:57:
                    bf:67:98:e5:6b:4a:b5:c2:8c:d1:5d:9e:47:65:c0:
                    5b:08:88:f4:72:a0:2f:30:8c:91:b4:ee:bf:6b:07:
                    3c:fa:1f:81:62:a3:0e:ac:7b:c4:3e:ea:86:6f:fd:
                    2a:f3:c1:5c:73:d1:68:dc:eb:0d:9e:f1:03:a4:04:
                    af:94:d0:95:43:5d:8f:f7:fd:10:9b:66:9e:59:a0:
                    a1:94:75:4f:c3:21:2c:67:81:37:54:ac:ae:90:9a:
                    39:b9:19:60:7a:e5:b0:a5:3e:f1:aa:dc:25:7b:1f:
                    a5:21:34:57:29:e3:13:17:06:5b:e2:36:ec:10:53:
                    0b:2b:12:59:c1:09:72:79:ab:ab:3d:8d:93:a4:6f:
                    c4:a2:9f:03:46:d8:5f:56:f3:84:ad:c9:42:10:4a:
                    a9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E7:1F:5D:A8:3C:74:7C:00:31:A3:65:CD:E1:28:0C:3C:F6:45:9E
            X509v3 Authority Key Identifier:
                keyid:09:2C:C4:E3:F1:1A:0F:5E:E7:C5:6F:67:CE:09:96:01:A4:CF:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CSzE4_EaD17nxW9nzgmWAaTPu7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/ac7fa3-dbe8-493b-b8a7-3be0313ec590/1/CSzE4_EaD17nxW9nzgmWAaTPu7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:20:bd:04:cd:ad:97:cd:da:87:34:7d:a2:b1:4a:11:7c:eb:
         d0:34:23:0a:65:6a:49:27:75:38:ec:2f:5c:10:53:6d:c6:6f:
         37:f0:5f:7e:26:78:08:ee:8b:a9:a6:a0:08:ac:d6:9e:45:40:
         13:e6:90:4d:76:f5:c3:e5:fa:8a:7a:c6:a5:a4:fe:02:d7:31:
         18:18:2f:e3:2b:14:a6:ff:e7:bf:c2:73:8f:ea:31:7f:42:e3:
         3e:fa:8e:d6:9e:c6:63:25:af:f8:a8:e8:5b:f3:24:ba:72:53:
         e2:d8:8b:d0:cf:7c:44:ed:78:79:f4:9d:07:16:8f:a1:22:85:
         4e:8b:ac:c2:b9:99:65:bb:d0:4a:21:d4:11:04:a9:3b:9d:13:
         ea:60:87:b4:53:53:1b:78:32:ea:08:6e:27:dc:ee:f0:68:60:
         88:54:9b:e0:44:85:b6:74:98:43:9c:5b:4e:8f:e6:48:c6:65:
         18:a0:95:c9:0f:5e:a1:ba:fc:70:d0:c0:af:95:b1:7b:67:32:
         7a:3a:28:06:de:9a:fa:9f:3a:d6:37:f4:db:e8:1f:f8:db:d9:
         d7:64:41:5f:36:ab:36:cd:bc:7f:fe:e4:8c:f6:a4:6e:ab:93:
         48:4b:74:7d:00:98:62:bf:68:85:3d:2d:90:0f:73:f2:76:84:
         f6:f8:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:33 2025 by rpki-client