Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          r3GOqVLAqkivro0K5VDvswo0jF1mD+MxbWzsO1JC8tE=
Subject key identifier:   4B:EC:96:FB:40:0C:F8:81:61:31:D3:F9:07:E0:23:EA:9C:AF:A3:9D
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019A0035466CBF137BBF7F2740E9A7FFEC8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0C71
Signing time:             Mon 20 Oct 2025 06:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 06:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 06:01:22 +0000
Files and hashes:         1: 8bKL0IbQOSgAyNHMsOTwdqXxmBA.roa (hash: SiMZDaqzDjVBWVjWC+CfQKEVMp/aAzgNg3WOueNrYnY=)
                          2: TOZ32S2cTtEqOAugUTe4Diokmjc.roa (hash: ZfLvnSZb+3P/Lwkuj8mzNGrvWl0G71GHwv4eE3pKqaY=)
                          3: aWPrtGmH1Yyr9JygOmf8I8XXZSE.roa (hash: rxPNfyseh9mYpYa5sMESZMtb8GzaNyszUYWBRocITXE=)
                          4: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: q9PUFQgN/Lnr+VNPtypr92zTp3ICJ205a6qicjxHS9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:35:46:6c:bf:13:7b:bf:7f:27:40:e9:a7:ff:ec:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Oct 20 06:01:22 2025 GMT
            Not After : Oct 21 06:01:22 2025 GMT
        Subject: CN=4bec96fb400cf8816131d3f907e023ea9cafa39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:57:f4:c3:95:96:51:e2:a5:4e:ff:5f:26:7e:
                    3d:ed:60:57:00:ef:b8:e4:1a:14:78:57:26:ec:63:
                    d8:c9:ab:ad:b7:bf:00:e3:fa:88:58:92:69:75:84:
                    77:e7:67:76:07:9c:cb:7f:22:d8:c1:62:5d:90:5c:
                    1a:51:c9:6d:f3:b4:31:2e:21:84:e6:21:9b:f5:56:
                    b0:f8:c4:dd:a6:76:70:89:29:33:d2:df:2a:a4:f3:
                    65:41:6c:10:f2:07:c4:bb:9a:b3:b5:77:df:3f:33:
                    05:a8:3a:f2:07:e0:30:a7:fa:b2:1e:7d:4d:d4:96:
                    87:36:7f:c4:86:63:df:c6:a0:d8:8b:c4:00:26:8a:
                    12:c9:bb:41:33:3d:b0:f2:ec:3d:21:57:8f:77:96:
                    f7:9e:1f:53:25:32:3c:5e:c8:36:dc:90:8a:1e:54:
                    33:ed:02:7e:5f:bd:b7:54:6c:2a:75:0b:d2:84:10:
                    36:d4:7b:e4:f0:f1:9a:77:f5:54:ac:d9:16:7e:b3:
                    90:03:26:71:33:ec:56:5b:bf:9c:48:89:fd:3c:d5:
                    d9:f6:40:e7:87:d9:94:b4:19:63:34:2a:df:4c:0b:
                    94:4a:44:6b:58:97:1f:52:0c:95:1c:cd:1d:c4:a5:
                    b3:73:04:a4:42:54:65:ec:12:96:df:69:14:05:b0:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EC:96:FB:40:0C:F8:81:61:31:D3:F9:07:E0:23:EA:9C:AF:A3:9D
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:22:1b:fc:a1:3d:bd:09:92:1a:b1:d6:2a:22:22:91:18:8b:
         19:c2:8e:1f:5d:e0:99:97:50:f2:f0:74:81:b4:1f:c6:ef:c7:
         63:1f:2f:f6:90:ff:84:b5:cc:33:3e:d9:cc:56:cd:90:2d:83:
         9b:9e:da:15:52:1e:41:b7:c6:82:60:05:ca:ed:86:95:64:60:
         53:e6:aa:d3:27:05:73:31:2d:2d:bd:4b:0e:07:96:49:26:95:
         ac:07:83:ec:cf:2e:17:49:8b:ee:52:c2:71:12:03:ec:31:ff:
         dc:ed:60:6f:9a:14:d2:86:c1:89:26:25:4b:74:3a:d1:d2:e9:
         f4:01:d1:f0:da:39:7e:44:ee:4b:d9:8c:04:f2:e4:d4:21:88:
         bf:e3:08:ec:a7:01:5a:82:30:4a:f3:2c:86:29:3f:54:af:f2:
         af:9b:04:cf:93:a9:78:bb:3a:4a:28:d6:ad:db:e4:5f:fd:21:
         cf:93:93:05:de:01:df:a0:60:97:d5:b9:61:14:35:74:99:fc:
         de:73:e1:84:ab:d7:3d:db:de:8a:54:13:3f:90:18:2b:73:e9:
         07:0c:b6:b7:24:0d:b9:70:a9:2a:b4:d5:0d:77:34:8e:a1:ce:
         eb:2e:54:ba:6d:87:06:da:5e:96:a7:e3:14:c8:aa:8f:0a:43:
         43:7f:b8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:54:39 2025 by rpki-client