Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
File:                     aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft (raw, json)
Hash identifier:          quX1C8Y3zNHULXLhuzoBb4C+/IgG0grjeQAbkzf5X54=
Subject key identifier:   87:C6:2F:F7:CB:80:FF:9F:AC:9C:95:E6:D7:54:CD:B5:B8:A9:88:B0
Authority key identifier: 68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15
Certificate issuer:       /CN=68b22eea4a4a3b81654a227eda94e0e75937b015
Certificate serial:       0199FBEB84E4F8A75849FA5516E8D27B8385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
Manifest number:          12AB
Signing time:             Sun 19 Oct 2025 10:02:20 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:20 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:20 +0000
Files and hashes:         1: CGPoOJknrvd8SI5T8ORU1Iqt9Hc.roa (hash: hep1Wj/UUlgL43jUgR9ytYwV+6+e7lZrxraYcWtC/JE=)
                          2: aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl (hash: 609vqU6dxVXTKRQnsce2ravsRSJzPS3W0XLZUoDo+j4=)
                          3: pA69kigPY-rHAuVsRrW13R0aZeM.roa (hash: pYVfBq1JCxgc3lobgl41dLccuxJHZgCaSlieF8Jm/Tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:84:e4:f8:a7:58:49:fa:55:16:e8:d2:7b:83:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b22eea4a4a3b81654a227eda94e0e75937b015
        Validity
            Not Before: Oct 19 10:02:20 2025 GMT
            Not After : Oct 20 10:02:20 2025 GMT
        Subject: CN=87c62ff7cb80ff9fac9c95e6d754cdb5b8a988b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:44:ba:16:20:f7:b6:d3:18:8c:4e:7f:aa:
                    29:0c:57:0f:e6:5d:b2:a9:70:79:c8:cc:d6:2a:1d:
                    82:1c:ce:18:ae:1a:64:df:4d:17:28:e9:f5:42:94:
                    c9:2b:09:8a:c1:dc:0c:3f:ed:6b:1e:3e:f8:61:cb:
                    9c:43:68:d5:78:1d:d8:f7:f6:12:36:be:38:de:f4:
                    2f:a7:a7:00:5b:53:1c:c0:3d:31:76:d5:c9:14:f5:
                    3d:97:6a:18:85:cf:15:31:7c:52:3b:8f:ab:0f:c8:
                    16:57:f0:f1:a8:26:e8:60:ea:24:fc:cd:59:fe:11:
                    76:bd:6c:ca:c9:7a:1e:5a:55:7a:09:cd:07:2f:a3:
                    63:c4:1a:e8:fd:8d:7f:7c:8e:c8:98:9c:d0:12:7d:
                    3c:d1:58:4d:c6:5b:00:a8:c5:64:2a:80:5c:05:43:
                    e6:32:82:f2:37:d8:2b:b3:b8:69:88:17:1f:ae:96:
                    9b:33:6c:10:5b:77:cc:96:f6:0d:37:1a:7d:0d:2c:
                    cb:de:68:d2:cd:c1:85:23:52:be:a7:21:25:83:5d:
                    fd:37:1a:f7:7b:37:d4:63:81:7a:8c:f2:c0:9d:61:
                    a4:59:3e:82:5d:96:e9:cb:4f:d5:40:55:74:41:f1:
                    52:18:50:17:eb:2a:c6:e3:40:81:ca:00:d9:51:ec:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C6:2F:F7:CB:80:FF:9F:AC:9C:95:E6:D7:54:CD:B5:B8:A9:88:B0
            X509v3 Authority Key Identifier:
                keyid:68:B2:2E:EA:4A:4A:3B:81:65:4A:22:7E:DA:94:E0:E7:59:37:B0:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLIu6kpKO4FlSiJ-2pTg51k3sBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/69cbc0-b6c5-4e67-a73b-2b65a7a8be8c/1/aLIu6kpKO4FlSiJ-2pTg51k3sBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:b3:60:a9:1b:53:99:d5:c3:14:8e:3e:56:d5:59:9c:d0:
         da:41:bf:4e:f5:00:ca:03:88:32:00:5a:81:2d:64:8a:01:b6:
         57:1f:db:bd:b0:20:0d:ff:6a:e7:1a:68:35:97:7a:b3:a4:96:
         7f:b8:53:47:bc:56:83:d1:cc:5d:57:fe:26:45:17:44:e1:51:
         0b:d3:9a:ca:bb:3c:16:9a:51:93:b9:1d:a2:96:c3:21:c1:f9:
         86:a1:c3:ae:83:bc:7d:2d:c7:dd:7f:df:e6:ce:b6:00:35:ed:
         c3:58:09:95:1c:b3:6a:20:9d:58:33:80:9a:13:1e:03:1f:17:
         9c:7f:e4:40:3e:24:39:86:3d:c5:be:19:d2:e7:ad:aa:db:ec:
         fa:dc:82:fb:f6:6a:e6:b5:cc:92:37:eb:17:45:59:b2:87:32:
         7e:f5:a3:6e:11:08:5a:5c:db:fb:71:67:17:1e:d1:e2:e9:bf:
         40:3c:ce:2b:d4:10:38:dc:8d:94:c8:3c:39:9c:a2:c2:c8:a3:
         e3:32:fd:23:0e:c7:eb:c6:4e:d2:2d:dc:bb:a4:b4:47:ac:0a:
         47:00:c4:b8:78:81:fe:4c:7a:58:86:15:54:5c:cb:a6:10:4e:
         c1:06:0b:f3:e8:48:27:22:87:4d:68:92:24:06:fc:b3:37:98:
         d6:f4:ef:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:39 2025 by rpki-client