Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
File:                     9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json)
Hash identifier:          SWKUk2UP72llse+9YRgMGRlyyuLhZ9tm8kjMdQROvks=
Subject key identifier:   6A:F2:17:E9:C0:6C:DD:A4:71:00:80:4C:91:54:F2:C1:9F:A4:0F:7B
Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C
Certificate issuer:       /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
Certificate serial:       0199FC8F89E97FB78AC36B51482D4E11E5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
Manifest number:          0BB3
Signing time:             Sun 19 Oct 2025 13:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:29 +0000
Files and hashes:         1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: /c61O5QXBQXQ+GK47YPlLARzQkTRz1v7wM1gkfTOxcY=)
                          2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:89:e9:7f:b7:8a:c3:6b:51:48:2d:4e:11:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c
        Validity
            Not Before: Oct 19 13:01:29 2025 GMT
            Not After : Oct 20 13:01:29 2025 GMT
        Subject: CN=6af217e9c06cdda47100804c9154f2c19fa40f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:ed:ce:75:7c:7e:ab:ed:af:df:b0:db:16:
                    27:1e:38:7b:da:2a:bf:21:7d:d7:7f:7f:f6:ea:76:
                    6c:12:1d:11:c2:5f:d5:0e:3a:38:65:b4:81:d2:ef:
                    1b:9a:03:d7:c4:ef:ad:9e:d1:52:7b:4f:a6:b5:f3:
                    61:1e:67:b0:3b:96:32:95:92:ec:9b:0d:e3:ad:1d:
                    5d:61:d8:18:bf:ac:cd:95:08:5c:7e:3d:6a:d3:ed:
                    b8:ab:d1:8d:fe:25:3f:b2:a0:77:91:dd:52:88:e0:
                    da:59:36:41:2b:dc:dd:77:7d:73:1d:31:d0:77:c6:
                    05:ba:96:7a:3e:99:78:a8:35:ed:f6:69:70:d6:fa:
                    34:c5:34:90:c5:f5:c7:49:50:fb:22:57:c8:e3:40:
                    93:92:23:cb:dd:82:1c:49:cf:86:23:9d:f3:ce:80:
                    40:86:07:07:75:f3:13:f2:a7:1a:c2:10:f8:a0:85:
                    e6:50:7b:ac:c3:5d:86:19:6a:22:5a:6c:e6:21:5a:
                    83:22:57:d1:5e:ab:71:89:d3:49:7c:a3:64:ef:f8:
                    07:16:08:eb:0e:df:26:0d:9d:41:5f:ae:d4:d2:e4:
                    85:a3:fb:73:7b:db:da:c9:67:20:db:4c:15:0f:a8:
                    b4:e2:2b:27:ea:10:e3:22:10:88:75:7c:15:cb:61:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F2:17:E9:C0:6C:DD:A4:71:00:80:4C:91:54:F2:C1:9F:A4:0F:7B
            X509v3 Authority Key Identifier:
                keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:76:70:1a:3b:91:79:a4:21:31:8a:8c:d7:5f:9e:22:91:02:
         10:2f:73:e7:0d:62:88:1e:77:b5:d3:d2:bc:e3:54:53:1b:2b:
         38:e7:d8:0f:b3:47:fa:ca:9f:7a:c5:e1:c0:53:71:c4:55:73:
         62:bc:b7:eb:b6:28:7a:03:e4:b6:4f:3c:fc:b9:e2:89:84:67:
         e3:fa:9e:28:e5:bb:2a:2b:57:f3:33:27:37:64:23:86:d6:62:
         3f:f0:5f:47:6c:98:31:5a:06:b4:39:82:ff:5f:aa:de:9e:93:
         c4:45:94:ff:5a:88:7e:57:16:c9:d4:92:c7:27:ec:e8:c4:88:
         d8:43:32:33:72:3e:54:94:b3:4e:4c:b7:d1:81:7e:dc:38:24:
         07:b7:77:dd:30:d9:91:12:17:1a:fb:f2:c2:22:e1:24:b6:e4:
         e8:0a:fb:b7:6b:e4:3c:45:7c:c6:ff:d0:50:22:a4:95:9c:1a:
         3b:04:c5:ef:a6:bc:c9:0c:b8:c3:a1:1c:0d:b0:6c:3f:07:dc:
         71:75:32:f7:b3:e6:6c:99:c4:4c:a9:de:b9:ba:9a:b3:52:1f:
         78:40:8a:a2:37:79:d2:49:80:92:f0:23:52:46:af:ed:48:b9:
         bc:7c:4d:a3:20:9b:70:92:19:d6:74:b1:62:8f:99:a6:5f:52:
         15:54:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:37 2025 by rpki-client