Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
File:                     lEethLhLrsR9ViHi91Yj8-rxOWA.mft (raw, json)
Hash identifier:          cfLrwLVz7giETeX3uNrSA836whOwy2hAZ5rsBPvOTNo=
Subject key identifier:   BA:8D:5D:9D:0F:3E:6D:2B:C8:10:6E:8F:30:3B:82:C2:89:F0:BB:06
Authority key identifier: 94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60
Certificate issuer:       /CN=9447ad84b84baec47d5621e2f75623f3eaf13960
Certificate serial:       0199FEEC1800C0E2F8F3BD022E4FCEC44699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
Manifest number:          02BC
Signing time:             Mon 20 Oct 2025 00:01:49 +0000
Manifest this update:     Mon 20 Oct 2025 00:01:49 +0000
Manifest next update:     Tue 21 Oct 2025 00:01:49 +0000
Files and hashes:         1: OvZQb1hcjOkIMnQrBwzGm-WLCpQ.roa (hash: AP7pBk7gh//un0koiUryrNu346ceJkk+whaQUXPWQDs=)
                          2: UWt_XRc9JV9FMCdsAcTPRdiOUNo.roa (hash: cl2cUuSvySYimCpyWJxO/6NE4GT3NHF6FS5npGysPcU=)
                          3: lEethLhLrsR9ViHi91Yj8-rxOWA.crl (hash: Wc3LhEpGnb7z+1hbUJHaVBTZ0U+6twiAnzhcFKntQeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:ec:18:00:c0:e2:f8:f3:bd:02:2e:4f:ce:c4:46:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9447ad84b84baec47d5621e2f75623f3eaf13960
        Validity
            Not Before: Oct 20 00:01:49 2025 GMT
            Not After : Oct 21 00:01:49 2025 GMT
        Subject: CN=ba8d5d9d0f3e6d2bc8106e8f303b82c289f0bb06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:98:45:70:bc:48:97:24:59:7d:f4:c5:82:
                    f5:1d:5f:57:e8:c8:35:94:d2:80:d0:02:6a:3e:6d:
                    41:d9:bd:f5:2d:f3:2c:07:ef:17:52:9f:95:62:7b:
                    c6:45:5d:d5:bf:46:44:b0:ba:cc:1e:4f:18:f3:b3:
                    83:f9:0c:04:f5:31:0b:70:f4:19:0a:e5:a1:a1:22:
                    7b:98:08:20:5e:5c:c8:04:dd:27:50:93:02:d3:da:
                    f3:ce:7a:be:7a:9e:b1:a3:56:ac:59:95:cd:5c:dc:
                    9b:19:09:3d:cc:cb:db:22:3e:17:c5:af:1a:91:77:
                    7f:73:e3:9a:0d:d4:54:46:de:af:95:4b:ba:6b:dd:
                    71:b0:4a:5f:a7:95:96:be:3e:8d:4e:fd:ec:98:c3:
                    88:26:de:e0:6d:9b:8c:68:cd:62:ec:c9:41:29:11:
                    97:c2:48:d0:43:a0:c8:c3:f1:3a:77:f6:e8:5b:93:
                    ba:6a:32:70:77:b7:8f:fe:a5:b9:4d:d6:d8:44:88:
                    11:6e:80:b7:88:c1:f5:63:90:0e:ec:d2:f8:06:e4:
                    62:06:99:16:91:74:1e:6f:0d:df:d8:f3:fd:76:bf:
                    e5:f3:5a:ed:95:a4:73:7f:33:b3:8d:d1:b9:39:17:
                    95:a2:f1:42:10:73:84:fa:37:66:18:6a:70:4b:b5:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:5D:9D:0F:3E:6D:2B:C8:10:6E:8F:30:3B:82:C2:89:F0:BB:06
            X509v3 Authority Key Identifier:
                keyid:94:47:AD:84:B8:4B:AE:C4:7D:56:21:E2:F7:56:23:F3:EA:F1:39:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lEethLhLrsR9ViHi91Yj8-rxOWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/238c56-c25e-4fd6-b916-5b318c3499fb/1/lEethLhLrsR9ViHi91Yj8-rxOWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:f1:0f:d3:ca:53:e0:31:95:3f:a7:9e:90:eb:80:45:46:e8:
         ae:5c:41:7d:f5:8e:d9:d2:5b:86:01:9a:5a:aa:0d:43:bd:84:
         e0:05:83:73:9b:09:20:75:81:0e:df:79:ed:ec:6b:21:b4:e7:
         d7:f2:17:bf:3b:7a:51:f0:d7:09:30:0f:2a:f7:53:ea:44:19:
         49:2e:dc:12:11:bd:91:e8:4f:5a:6f:e4:3c:d3:92:ce:e6:3e:
         0d:a0:65:40:8e:6d:53:32:17:2b:7f:8c:d7:cd:e6:96:3b:43:
         7e:ff:ed:a9:c8:96:77:5e:4c:13:76:a2:24:7e:e6:2d:93:7d:
         b9:99:37:bb:b0:05:e7:5c:4e:c5:4c:c5:e3:b4:00:98:47:e1:
         0b:c2:09:26:53:9b:d4:95:62:ab:54:34:41:62:a9:32:3e:5a:
         0d:1f:11:be:53:56:45:d3:cd:be:06:38:0a:9c:b4:4b:33:d7:
         83:f2:ea:de:5c:4d:c8:cc:60:7a:a8:26:0c:1c:7d:88:76:35:
         08:1b:8f:8c:1f:b4:10:f4:88:c1:27:f6:92:03:e5:5d:c2:d0:
         fc:33:84:c0:de:fb:37:81:6c:d6:6a:b7:81:4e:d5:b0:63:d8:
         ca:f2:22:91:53:37:b1:6b:dd:e7:26:12:8a:a5:61:f5:61:ca:
         67:49:52:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:14:55 2025 by rpki-client