Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
File:                     MIfS4cwIqVF0v3lOLy3m49A--Co.mft (raw, json)
Hash identifier:          sNoC2Ca9BcNaRU03B0gLV+U5uzGMjG/Ql36wzcJBmRo=
Subject key identifier:   CD:E5:CA:98:D9:23:18:3B:35:2B:C0:44:1B:61:65:89:40:CE:FB:A1
Authority key identifier: 30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A
Certificate issuer:       /CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
Certificate serial:       0199FF59C17E68E9989A51ACEC9CC681134A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
Manifest number:          124B
Signing time:             Mon 20 Oct 2025 02:01:36 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:36 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:36 +0000
Files and hashes:         1: MIfS4cwIqVF0v3lOLy3m49A--Co.crl (hash: /lir2BYtRecnWZx7JmpMqVs63q2t9Z7F8UTZ1PTlMzA=)
                          2: rER2RyM9WMWv62airMbML41Jj_A.roa (hash: Vq04pvE8uFONGjHiSeRfJcN2ONH656v/BmVYpoQ3tn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:c1:7e:68:e9:98:9a:51:ac:ec:9c:c6:81:13:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3087d2e1cc08a95174bf794e2f2de6e3d03ef82a
        Validity
            Not Before: Oct 20 02:01:36 2025 GMT
            Not After : Oct 21 02:01:36 2025 GMT
        Subject: CN=cde5ca98d923183b352bc0441b61658940cefba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:0c:b1:b6:88:8d:dd:ae:18:0a:83:d8:8d:
                    63:73:c8:cc:b8:c5:78:3f:12:9e:b7:d7:8d:0e:d6:
                    5d:4b:9c:af:6e:c1:b3:4a:36:41:f4:67:78:74:87:
                    5f:8c:e9:8e:83:ae:6c:0c:cb:6a:6c:8d:ec:26:e4:
                    51:f1:ff:98:ba:46:40:24:2c:74:27:9c:d2:6b:22:
                    a2:e9:12:f4:ca:0b:65:96:2f:50:d5:79:7f:c7:57:
                    fd:5f:90:44:5e:bb:26:c7:db:f9:bd:23:ea:f5:95:
                    a8:e9:ab:6f:3f:0b:9d:e2:d2:a0:91:b0:a0:0c:fa:
                    c8:e7:9d:ef:a3:4f:a3:48:f1:65:7a:55:80:af:3d:
                    1b:a6:31:a4:c0:26:a3:fe:e4:94:19:82:86:1a:1c:
                    eb:ac:47:ac:ad:8b:4c:7a:43:cd:cf:2c:59:cf:3e:
                    36:c0:94:53:17:87:b4:5e:b3:3d:2d:54:76:47:e3:
                    2e:a3:40:1d:1d:cf:4c:de:37:ff:c5:df:ef:23:b7:
                    bc:eb:04:91:4b:e6:3f:09:ba:1d:92:f0:06:c9:14:
                    ab:8d:33:78:17:41:cd:11:fa:a6:f1:ae:6c:c1:c2:
                    a7:b1:9a:aa:b5:7b:e8:98:fc:d2:c7:76:e0:8c:53:
                    33:7e:0c:2d:61:18:83:2c:98:81:93:81:9d:15:fe:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E5:CA:98:D9:23:18:3B:35:2B:C0:44:1B:61:65:89:40:CE:FB:A1
            X509v3 Authority Key Identifier:
                keyid:30:87:D2:E1:CC:08:A9:51:74:BF:79:4E:2F:2D:E6:E3:D0:3E:F8:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MIfS4cwIqVF0v3lOLy3m49A--Co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1ba9a6-f616-4e74-967d-7e7190ffc4c9/1/MIfS4cwIqVF0v3lOLy3m49A--Co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:41:79:5a:4f:bf:fe:1a:61:c3:42:62:70:29:2a:b7:98:a6:
         c1:23:ad:a7:9b:2c:fe:2e:12:b7:0e:4f:97:7d:68:d5:11:5e:
         72:ef:df:7a:0c:8a:cd:4f:a5:22:a8:cd:70:96:96:21:4e:81:
         c6:12:4d:9b:89:6c:a6:0f:16:bb:19:53:62:9c:4c:87:40:d5:
         e1:d5:4d:e9:44:90:3e:99:62:a6:0a:eb:c5:c5:0f:dc:49:bf:
         79:f4:13:9f:c1:b3:56:33:15:6c:7f:7d:a9:3f:b3:c5:6c:da:
         ab:c0:60:29:ad:94:40:bd:16:ba:2e:1f:8e:e6:6e:75:69:ab:
         95:e2:92:71:ac:42:85:30:2e:8a:c0:63:e7:6b:80:08:8e:6f:
         96:84:50:57:e6:e4:47:11:55:11:0d:c9:a2:52:e5:17:71:0f:
         ef:93:08:fc:ee:04:77:e8:0b:39:4a:c6:04:a8:8d:b7:87:7e:
         bb:47:64:1d:d7:27:20:40:f4:cc:95:5c:17:25:16:2b:df:da:
         7d:cb:6b:31:ac:f6:5a:63:16:94:e5:66:98:4a:f4:37:49:d1:
         ba:59:12:96:5e:e5:5f:3f:c6:2e:4b:16:ca:20:0d:ae:36:11:
         1d:ba:82:eb:38:10:f3:2f:f3:7c:fe:ce:a5:33:50:7d:80:0c:
         3b:fa:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:03 2025 by rpki-client