Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
File:                     C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json)
Hash identifier:          RKeIbFBcT184ykVySIJTDsLF8Mt+Flx4gN0w0wtc/NQ=
Subject key identifier:   34:7B:4E:08:A1:0E:E3:88:2F:6B:16:8A:00:77:23:19:E1:1F:51:7C
Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA
Certificate issuer:       /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
Certificate serial:       0199FB0F23D6D0E9DAF07C71781773C4AA70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
Manifest number:          0304
Signing time:             Sun 19 Oct 2025 06:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:37 +0000
Files and hashes:         1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: sPldhhyp3DeUyU2SubNNCZ0jBm5qmIkqisbR7dpJEM8=)
                          2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:23:d6:d0:e9:da:f0:7c:71:78:17:73:c4:aa:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea
        Validity
            Not Before: Oct 19 06:01:37 2025 GMT
            Not After : Oct 20 06:01:37 2025 GMT
        Subject: CN=347b4e08a10ee3882f6b168a00772319e11f517c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:34:93:68:15:d5:ce:9a:3b:e9:e9:90:a3:
                    f4:28:65:1e:fe:e8:6d:6e:f2:b6:79:af:7f:cc:53:
                    53:87:bd:43:0a:5c:2f:24:c2:ed:3f:f2:ad:8b:21:
                    d5:b1:11:82:d8:f9:4e:79:46:ca:34:22:49:11:6c:
                    f1:6d:30:2d:9b:10:b6:ba:d7:d9:74:37:b3:58:f9:
                    7f:22:7c:e8:60:34:76:bf:a7:e9:4d:4b:3e:e0:10:
                    33:b4:d5:a4:46:90:8a:0e:e4:46:8e:f5:77:84:e6:
                    35:4c:08:b6:c7:6f:2b:e7:57:b8:4a:52:32:2e:7f:
                    8d:82:73:70:32:24:61:84:43:db:43:4c:97:41:1e:
                    e7:17:94:d6:fd:15:86:60:1b:6c:bd:f6:33:30:77:
                    f8:fc:0a:05:05:b7:1f:bd:aa:14:b8:1d:f8:87:d3:
                    79:4d:1c:4c:e3:a8:dc:b5:9e:7e:2f:0c:ab:08:d2:
                    21:05:81:1d:5d:8d:4d:5b:39:75:0b:28:88:65:a6:
                    9f:e8:dc:d8:25:f8:6e:f0:03:0f:f2:a6:c8:e9:23:
                    6d:64:f4:20:6d:dc:35:02:ff:78:79:b0:65:a6:01:
                    19:19:ac:87:c8:16:66:25:e2:27:2f:71:54:15:e0:
                    7b:a6:a4:66:ce:fa:30:1d:d0:b0:3d:71:ce:d3:4b:
                    92:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:7B:4E:08:A1:0E:E3:88:2F:6B:16:8A:00:77:23:19:E1:1F:51:7C
            X509v3 Authority Key Identifier:
                keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:4d:12:12:ea:d4:22:0b:83:cf:c5:91:83:ad:47:9d:d3:ab:
         28:53:85:8d:ae:1e:44:76:53:69:68:d8:2d:54:59:eb:b9:bb:
         a6:bc:99:8b:f9:20:b2:43:60:30:c5:00:99:79:58:57:de:9c:
         45:26:73:4d:45:ed:c3:3b:e7:b1:28:aa:36:7c:15:c2:ca:25:
         2f:97:56:7c:5c:f0:be:5c:d1:aa:84:d9:e6:7e:aa:06:ef:97:
         5e:14:61:7a:f8:11:7e:f4:fc:f3:2c:9b:ca:c9:58:d0:d7:39:
         c3:52:f5:19:66:61:8d:7e:3a:c5:e8:36:91:79:9d:36:d2:5b:
         a4:20:5d:d2:f5:65:6a:fc:59:01:b1:ad:7f:60:8f:d9:62:9c:
         ed:46:eb:82:b3:19:d2:2b:c4:e3:6f:e0:d2:30:dd:6c:bf:88:
         8e:f1:51:1f:50:cb:0a:63:bf:46:74:11:ba:59:f4:16:7a:f8:
         7c:85:01:91:59:44:8c:85:30:68:08:34:18:e9:2d:75:f8:ad:
         e0:d6:f6:dd:7e:4f:be:e3:92:c6:f0:1b:10:ab:93:4f:df:c5:
         21:8c:ba:54:a5:9b:ae:9b:dc:be:55:05:0b:51:0a:0a:e9:3c:
         88:8a:3c:54:bb:a8:d6:49:0d:2d:bb:89:e6:69:88:ce:ac:f2:
         76:8f:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:23 2025 by rpki-client