Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
File:                     AsSROCOjGf66InDhuiygnkNb1Vs.mft (raw, json)
Hash identifier:          kcGn9lNgkjBrrAjlfc+gqKJred3Fda2iO8gHgXEzeAc=
Subject key identifier:   9D:20:9F:84:C1:39:54:09:31:FB:D9:44:5B:33:FC:63:E8:76:62:0F
Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B
Certificate issuer:       /CN=02c4913823a319feba2270e1ba2ca09e435bd55b
Certificate serial:       0199FB0F0C8A2CF30752EDE898B99F6B4D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
Manifest number:          1398
Signing time:             Sun 19 Oct 2025 06:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:31 +0000
Files and hashes:         1: AsSROCOjGf66InDhuiygnkNb1Vs.crl (hash: kGEQA7mrti0QDn57476vz/17G1LzGO0+BjyiznpGsEw=)
                          2: zqiwP0xb8bytzAumv2YPA_fNwb4.roa (hash: zCaLlPBZ2WB2CsOiMiyWuvWQI6GwLJcAhYLvd/2+eA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:0c:8a:2c:f3:07:52:ed:e8:98:b9:9f:6b:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b
        Validity
            Not Before: Oct 19 06:01:31 2025 GMT
            Not After : Oct 20 06:01:31 2025 GMT
        Subject: CN=9d209f84c139540931fbd9445b33fc63e876620f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:77:80:f1:d2:97:56:84:38:1b:10:20:53:
                    93:20:4b:83:41:ba:db:d9:e5:f6:34:ac:a7:f8:f8:
                    b1:e2:96:2e:5c:15:51:f4:3c:03:97:3b:8e:fe:78:
                    5b:47:0b:da:b9:b7:26:36:05:5c:66:b2:d2:d0:85:
                    f0:dc:9f:11:cd:dc:ab:94:be:4d:f6:07:03:07:dc:
                    79:d6:8a:b9:4a:5b:7a:16:20:1e:6c:9a:ce:54:7b:
                    24:32:cf:b1:7c:e0:ce:87:0e:37:05:6a:ba:1c:43:
                    5a:8d:a9:f0:fe:33:fd:f0:6c:b6:79:5b:65:15:52:
                    f0:87:3d:67:eb:ea:ab:34:c1:cc:55:9f:0a:9f:f5:
                    2a:c7:40:7d:a8:2c:fd:0a:4a:75:a2:18:08:11:17:
                    93:a0:56:e0:f9:2b:ff:e9:02:a9:59:eb:ea:d8:5f:
                    57:11:67:1c:73:a0:fd:b6:39:d7:fc:be:cb:3e:6e:
                    b0:d1:d0:a8:76:4a:ff:a4:de:98:05:c4:4a:97:b7:
                    03:1f:5e:a3:32:aa:96:35:60:74:fd:a7:9c:bf:b2:
                    20:f7:d9:cb:46:25:0a:46:ca:f4:e2:4d:9f:87:2c:
                    6d:4f:54:ae:4c:c5:63:61:c1:02:73:3a:4a:9f:fa:
                    ee:20:3e:6b:72:bf:6b:8a:46:59:f5:b4:7d:52:16:
                    51:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:9F:84:C1:39:54:09:31:FB:D9:44:5B:33:FC:63:E8:76:62:0F
            X509v3 Authority Key Identifier:
                keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:3e:18:c1:f4:99:32:c1:03:75:86:a6:37:8e:52:4a:db:83:
         0a:d9:a7:62:66:8d:33:66:03:b7:8c:34:7c:84:65:00:68:5b:
         ef:78:f8:50:b1:f1:77:05:73:9d:22:50:76:33:ed:43:3b:6f:
         2f:5f:24:e8:b6:19:8c:05:1e:22:83:5f:a4:08:97:4a:77:9b:
         af:84:f0:65:70:66:09:7c:37:02:a5:a2:2f:32:09:eb:a4:6a:
         75:5f:4a:68:d9:fe:35:32:b3:79:5d:63:71:5f:03:4d:9b:e8:
         2b:9f:12:7a:f8:18:72:b4:f8:d9:04:5d:4e:00:2e:04:21:6d:
         5d:42:f9:90:ca:7d:12:30:a6:e5:d3:10:65:f8:cc:44:b6:03:
         e7:53:6b:b1:a1:1d:80:ec:da:cf:ac:75:22:81:52:33:c3:c6:
         e4:36:76:1a:4e:67:23:20:4d:b0:8a:8d:26:3d:d5:f6:fb:88:
         63:b6:c4:b2:0c:3c:a7:bd:9f:1d:6f:b2:31:07:37:44:3b:de:
         5f:00:d9:32:1b:f4:1f:56:a7:66:4e:24:2b:1b:d8:4a:87:4f:
         d4:58:a5:d8:4b:6d:42:ac:1f:41:fa:90:01:58:e4:08:5c:31:
         69:04:eb:be:64:05:c7:49:db:75:8a:9e:a2:1b:4f:82:cd:f9:
         cd:30:2b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:44 2025 by rpki-client