Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
File:                     S21-pBAzg38IwoxHQphLgrj0Q98.mft (raw, json)
Hash identifier:          TLtPt03GEJYMreq0zZ/J8HwG8RtwpqhYph4/9EvxpzI=
Subject key identifier:   87:13:B7:43:8D:54:BA:03:FF:B3:15:66:80:94:2B:AE:2D:F7:2B:1E
Authority key identifier: 4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF
Certificate issuer:       /CN=4b6d7ea41033837f08c28c4742984b82b8f443df
Certificate serial:       0199FF22D890369310EFD307E9B232165CD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
Manifest number:          1314
Signing time:             Mon 20 Oct 2025 01:01:37 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:37 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:37 +0000
Files and hashes:         1: R0-_LF6KU0ufBdJHLr5D2OsCZsM.roa (hash: 9atL02W0zWCgguNUrFQhgbOUdRY0kP2jIZbv6fAlg2k=)
                          2: S21-pBAzg38IwoxHQphLgrj0Q98.crl (hash: 7Ur6DDhqvfPKVax6oKRbXV4ZVhedOhouuMPvwsv0d3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:d8:90:36:93:10:ef:d3:07:e9:b2:32:16:5c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b6d7ea41033837f08c28c4742984b82b8f443df
        Validity
            Not Before: Oct 20 01:01:37 2025 GMT
            Not After : Oct 21 01:01:37 2025 GMT
        Subject: CN=8713b7438d54ba03ffb3156680942bae2df72b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d6:f4:a0:0f:f5:1c:61:f5:64:cb:40:52:ae:
                    db:f2:92:e7:a8:74:31:6c:a4:50:05:65:98:1c:e9:
                    11:23:c1:82:8d:d1:fb:92:58:78:9c:49:b0:0c:a3:
                    f2:76:54:c8:cd:c1:0e:08:06:83:6b:53:ef:1f:bc:
                    d4:36:f1:19:38:fe:d2:31:cf:ec:68:94:13:43:9c:
                    ad:dd:c1:d6:f7:a9:90:f3:e5:5e:fe:72:90:24:61:
                    08:88:16:42:76:d2:77:a1:db:74:6f:20:01:c0:a9:
                    1a:86:c9:44:4c:8d:79:e0:88:bd:6e:bf:cf:d7:d3:
                    7b:ee:73:23:5d:4b:98:5e:42:e7:83:e4:27:45:66:
                    98:ae:28:e5:8b:30:2e:a6:be:2d:fa:64:81:94:e3:
                    b2:40:e9:e3:09:41:1e:11:07:c1:b3:ee:6b:0f:6d:
                    a5:cc:c9:52:33:67:2e:6e:84:8f:e5:b5:6a:bf:dc:
                    7c:b7:0e:4a:a9:29:74:a5:b1:d1:6c:95:1d:a0:3e:
                    78:cf:ab:ca:9d:d0:20:09:77:24:4c:e8:5f:06:f4:
                    fd:cc:eb:ca:e3:6e:29:7a:9c:eb:32:26:51:8a:2a:
                    da:2e:c4:65:84:4c:87:73:f0:2d:33:6e:1c:2e:8e:
                    81:b3:a6:aa:87:1c:da:41:cc:85:54:0a:d2:68:4f:
                    36:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:13:B7:43:8D:54:BA:03:FF:B3:15:66:80:94:2B:AE:2D:F7:2B:1E
            X509v3 Authority Key Identifier:
                keyid:4B:6D:7E:A4:10:33:83:7F:08:C2:8C:47:42:98:4B:82:B8:F4:43:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S21-pBAzg38IwoxHQphLgrj0Q98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1d0681-fe20-47a3-94df-5ee8721c1cfc/1/S21-pBAzg38IwoxHQphLgrj0Q98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d0:9c:a2:61:c3:72:bf:e0:82:85:9f:62:55:84:7e:93:55:
         30:e1:01:2d:87:ed:26:87:2f:bb:d1:1e:ff:fb:f7:f3:cc:1a:
         72:96:d8:cb:1c:79:1b:e9:be:9e:96:fa:96:a7:e9:a7:7b:55:
         9e:07:f9:7e:ed:01:9f:a9:2b:17:50:96:84:7c:ec:44:06:d5:
         70:4b:15:cb:44:47:a1:a5:ac:d8:78:be:fe:d8:04:ea:72:2c:
         ad:ab:d8:02:53:8a:f8:b9:1e:ac:c2:56:1f:6a:75:c4:2b:40:
         83:63:c3:37:b3:c7:47:23:8d:13:4b:02:d8:e7:14:1a:17:15:
         5a:0b:41:9c:e0:88:c0:e2:33:ad:c7:3b:cc:ad:90:d7:d9:8f:
         e1:8e:98:93:d4:bf:a4:5f:17:0a:90:d0:20:9d:19:28:c2:cb:
         3c:76:39:79:da:d0:6c:df:f4:9b:a0:f2:b7:aa:7d:c9:8f:cb:
         51:a5:67:8a:de:f5:83:aa:f8:54:3b:98:d0:b1:a6:f1:e1:d6:
         1b:e0:6a:db:7a:5d:fd:0d:45:44:8b:70:f0:95:0d:24:22:b6:
         eb:4d:2b:00:91:07:97:f2:65:17:8d:21:a8:47:c6:87:ed:7e:
         b3:71:e7:4e:c8:91:c5:ff:e6:24:b2:2f:20:5a:ab:83:21:a2:
         f7:12:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:21 2025 by rpki-client