Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
File:                     S6P83Yf0VkMMzLLYY45hSM06Euw.mft (raw, json)
Hash identifier:          /KoxystcNdbGEKnQngYbV/2DJSKwv4hqlXXuFAb3lZo=
Subject key identifier:   D4:79:C4:8C:CB:58:42:39:CF:77:28:76:84:13:95:35:34:7F:42:D6
Authority key identifier: 4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC
Certificate issuer:       /CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
Certificate serial:       0199FBEB879AB0F4B866DDD9135718EF9DB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
Manifest number:          12C9
Signing time:             Sun 19 Oct 2025 10:02:20 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:20 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:20 +0000
Files and hashes:         1: Luq1AGm-0yiU8GrI6ZL8kYwyd3I.roa (hash: 35d7vaos91aXg7eDTyQtgIWe7y3Nm+JQYfuUr0WlJf4=)
                          2: S6P83Yf0VkMMzLLYY45hSM06Euw.crl (hash: Q//dFdmsLId7o+6VFnNPVjK5cQjLgmDuef1Y7IJlYzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:87:9a:b0:f4:b8:66:dd:d9:13:57:18:ef:9d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba3fcdd87f456430cccb2d8638e6148cd3a12ec
        Validity
            Not Before: Oct 19 10:02:20 2025 GMT
            Not After : Oct 20 10:02:20 2025 GMT
        Subject: CN=d479c48ccb584239cf77287684139535347f42d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:01:3d:06:01:ad:59:44:b2:64:f0:6e:38:
                    d9:95:81:55:ae:85:21:49:4d:2c:d7:00:aa:eb:87:
                    84:8d:b9:5a:29:59:17:0e:09:0f:27:51:8d:fd:c6:
                    ac:02:49:63:f6:6e:89:94:fb:d8:1d:09:38:69:54:
                    ad:5d:db:2c:17:80:0b:5b:a5:25:9c:cb:f4:3a:4b:
                    4f:12:9e:fa:9c:5f:9c:95:2f:07:28:12:a0:03:9b:
                    29:71:09:18:50:c7:e7:ed:3c:f4:3f:c6:ba:c3:ec:
                    60:c4:46:9d:53:34:a3:93:3b:8f:3c:c0:0d:4a:e9:
                    88:64:6a:14:d3:8e:d7:68:c4:4f:a5:54:b9:5f:85:
                    b3:07:c6:36:67:18:9f:d7:46:78:5a:a0:db:b0:cb:
                    81:83:55:7e:89:09:b4:1b:be:e2:42:b9:f0:95:5f:
                    e8:80:2f:4e:88:cd:de:38:2d:7b:6a:4f:b4:b4:4f:
                    56:d3:18:23:dd:f3:c2:e4:d1:f7:2e:7b:03:0c:e8:
                    4f:4a:46:c6:ba:c8:53:a2:d0:0a:20:b5:7b:68:32:
                    bd:17:b1:6f:99:e0:03:17:1c:f0:f4:d4:f8:b8:c7:
                    59:60:39:5b:0f:6e:2b:a6:42:e5:67:00:ea:34:03:
                    51:88:ab:30:db:41:eb:ea:98:e6:2a:cb:87:e8:34:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:C4:8C:CB:58:42:39:CF:77:28:76:84:13:95:35:34:7F:42:D6
            X509v3 Authority Key Identifier:
                keyid:4B:A3:FC:DD:87:F4:56:43:0C:CC:B2:D8:63:8E:61:48:CD:3A:12:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6P83Yf0VkMMzLLYY45hSM06Euw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f9ce9b-9059-49c5-a36d-a731ea51b20d/1/S6P83Yf0VkMMzLLYY45hSM06Euw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:8f:57:f7:af:e2:54:44:f0:5c:b7:1a:05:64:7d:7a:68:
         78:70:e4:5c:fc:c0:1c:5e:44:3b:dc:0b:e4:c5:51:9d:cc:72:
         de:4d:65:d8:05:ab:1c:51:5e:d0:50:a0:bb:4c:bc:6f:62:56:
         ad:65:41:13:7b:7d:17:11:94:9b:88:36:8d:a4:cf:41:19:1a:
         a7:d6:cf:2a:ff:c3:24:3a:ad:e8:ac:ca:75:85:f2:e8:ab:15:
         0d:8e:97:63:9b:4f:4e:e2:12:e1:c3:18:ef:b5:12:bc:03:7d:
         91:a1:7d:5b:6e:0f:0b:7f:a4:1d:d7:5d:5e:f4:b3:2d:66:00:
         bd:3e:25:65:b0:b0:6e:f6:a9:6c:0e:db:d2:f2:64:dd:a8:9a:
         e8:0c:67:61:8a:21:26:ee:2a:11:8d:23:d0:cf:04:4b:91:86:
         f4:48:d2:e2:ff:96:fc:d9:8d:5a:d7:68:4b:00:e5:56:fb:d1:
         16:31:20:c3:98:69:3e:c5:77:ab:22:ba:24:21:07:2e:45:b2:
         26:a0:76:71:b9:e0:79:18:78:5a:33:b9:a6:45:b6:b0:83:3b:
         e9:27:0e:26:28:6c:41:9b:8b:55:f9:92:80:cb:56:97:a0:c7:
         be:f2:8f:55:9d:82:56:dd:be:e2:de:60:0f:fa:fd:39:b0:c4:
         29:3c:69:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:50 2025 by rpki-client