Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
File:                     ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft (raw, json)
Hash identifier:          zjeMKN3mnbsLAE2cXoC0olbr+pzl0Yb+2x8z5qkU9dI=
Subject key identifier:   39:58:EB:40:D3:80:90:2B:20:B0:A8:B1:52:D0:3B:96:08:91:87:3F
Authority key identifier: 00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14
Certificate issuer:       /CN=0032534e8d560d73553c632bba10344a7c816614
Certificate serial:       0199FC582C0F158FD66A48CD9B63EBAC4A36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
Manifest number:          14D9
Signing time:             Sun 19 Oct 2025 12:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:00 +0000
Files and hashes:         1: ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl (hash: S4B7zW8ONcp2hRcPj/wzJoupp8cqSeaDb6aslvEcJCM=)
                          2: OnXC0EMmctW1l-eN0LPWNOjUqPw.roa (hash: k0QnDPc78XQxy2Jh6N0H9Na60K6yINLRvcu8aefMv80=)
                          3: SdvawK2l2QMTxWUsBzsvDK2l55Y.roa (hash: 0IwztZlDbvlCLqvgLhsygToSdfiJSQpbte+efGKPWYs=)
                          4: Yes96KlqbG0mr87JhVnZBvHYB_g.roa (hash: n9jcRd3MdFn9mVFhJ/Pv7xaxOHOW7HhKsR2CUBypqZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2c:0f:15:8f:d6:6a:48:cd:9b:63:eb:ac:4a:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0032534e8d560d73553c632bba10344a7c816614
        Validity
            Not Before: Oct 19 12:01:00 2025 GMT
            Not After : Oct 20 12:01:00 2025 GMT
        Subject: CN=3958eb40d380902b20b0a8b152d03b960891873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:a1:57:0e:7c:bb:0e:b9:b3:c3:3c:db:84:
                    fa:4d:6c:af:1f:5c:ef:9e:6b:b0:be:f3:75:2d:61:
                    72:ff:e0:d2:54:26:66:43:ae:de:52:24:cc:de:f0:
                    c5:ce:2d:6d:cb:85:03:95:61:44:d7:d6:13:7a:56:
                    77:35:36:ee:22:c1:07:99:81:41:04:ff:27:08:13:
                    84:18:bb:c5:5e:79:78:fd:e8:7d:69:75:92:1e:26:
                    fe:2c:44:cc:e5:ad:ed:62:58:d0:f6:80:2f:ff:41:
                    8c:b5:5f:c1:c0:a1:3b:0c:0c:fa:1e:17:8c:69:68:
                    c2:14:59:a3:95:48:4b:6a:65:d3:f9:00:76:17:c4:
                    87:ff:fa:86:1c:27:17:f6:e0:98:fa:23:35:da:df:
                    58:91:a4:43:82:d7:a9:60:e7:01:c8:74:25:94:22:
                    68:f4:38:4b:9a:51:20:f8:24:02:69:3a:1a:d3:d9:
                    75:f4:64:d7:13:89:f3:11:1f:2c:52:67:45:e8:d2:
                    57:0a:42:a2:55:3b:fb:69:a0:fa:b5:99:3c:77:92:
                    17:6f:49:6d:d9:c2:08:f6:28:63:39:e8:fa:5c:9c:
                    c3:e8:8e:8c:9f:66:ff:aa:65:41:86:8f:83:20:52:
                    0b:1d:f3:28:b8:ed:c8:a0:92:2c:db:f6:08:97:68:
                    22:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:58:EB:40:D3:80:90:2B:20:B0:A8:B1:52:D0:3B:96:08:91:87:3F
            X509v3 Authority Key Identifier:
                keyid:00:32:53:4E:8D:56:0D:73:55:3C:63:2B:BA:10:34:4A:7C:81:66:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADJTTo1WDXNVPGMruhA0SnyBZhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dee1ee-9384-45ab-a70a-5eae6ed58375/1/ADJTTo1WDXNVPGMruhA0SnyBZhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9d:9e:e1:4a:b7:5a:d1:a0:ef:ff:db:bb:3e:b4:b8:47:96:
         d3:f9:7d:46:95:75:bb:f9:56:3a:03:c3:0a:bc:21:3c:0d:77:
         03:92:b8:87:82:f0:ce:71:49:c3:97:0b:eb:9c:c4:e2:8d:0b:
         aa:33:8c:e8:df:8c:13:13:5e:19:1a:93:a8:84:52:99:d0:cb:
         12:0a:91:34:3d:79:a7:81:03:af:73:4a:35:fc:a0:5b:de:5e:
         62:1d:52:b8:10:61:d2:06:47:a3:df:28:4f:b9:19:b7:fc:fa:
         e9:ae:69:a3:f5:f8:c2:00:b5:8e:16:51:14:83:40:09:79:be:
         41:e2:7e:f5:ac:c9:cd:20:06:54:43:9d:7c:0d:f3:a7:fc:e5:
         e3:7c:a9:5f:70:ba:48:d5:73:04:5e:ad:84:68:35:3f:cd:c4:
         63:3c:04:68:6d:80:9c:75:75:b3:ee:b8:da:ac:9f:b0:1d:20:
         fe:72:c6:81:61:4f:9b:18:41:e0:0f:d0:53:f4:d8:59:99:c0:
         32:d1:a1:e2:9d:0f:71:81:39:c8:01:a4:fc:6c:f2:78:99:a4:
         b7:80:7e:07:2d:7d:ad:f5:54:78:7b:40:c1:89:14:38:ad:9e:
         c8:e1:b8:74:f4:74:69:b4:b4:3d:e8:84:21:5c:ef:5d:05:6d:
         8c:ab:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:24 2025 by rpki-client