Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
File:                     tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft (raw, json)
Hash identifier:          eZ9Wua8U4YoIsOt1XIqsrAhVd+sdohig7JRyHDvfcTI=
Subject key identifier:   B9:74:17:B1:97:97:7E:7A:08:A3:F5:52:DE:D9:2A:9F:61:7C:58:06
Authority key identifier: B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2
Certificate issuer:       /CN=b573d2dda93e420409163da59e7414ee91a2eef2
Certificate serial:       019A011100B9722EFF3C7A4FECC5B0ABEA02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
Manifest number:          0182
Signing time:             Mon 20 Oct 2025 10:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:22 +0000
Files and hashes:         1: r2p_nfti9wP7acQGEaKHM_xZ5Y4.roa (hash: 8x452bR9h9FZkxCtz0Hac6JBkLr+TCy/u9myFaRh5zg=)
                          2: tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl (hash: gMyis1yoGz2wqnPBGg1x89GdoVys3Bbt/T7h3LgxAcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:00:b9:72:2e:ff:3c:7a:4f:ec:c5:b0:ab:ea:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b573d2dda93e420409163da59e7414ee91a2eef2
        Validity
            Not Before: Oct 20 10:01:22 2025 GMT
            Not After : Oct 21 10:01:22 2025 GMT
        Subject: CN=b97417b197977e7a08a3f552ded92a9f617c5806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:5c:74:21:65:95:a0:24:2e:0b:48:75:c4:
                    0a:f2:38:5f:e6:f6:b5:f3:1a:ae:bc:2d:f6:f2:9f:
                    83:44:6d:c1:ff:50:85:86:e0:7d:67:01:66:ac:50:
                    db:77:77:39:c9:f7:91:99:ae:f0:05:3c:96:d3:cf:
                    42:44:1c:a5:a0:c4:80:1a:a5:6c:ef:97:12:3b:ee:
                    28:bb:b6:ff:bb:87:a5:c7:e7:aa:ee:22:b2:d0:b2:
                    91:0c:49:e2:39:fe:0d:df:07:3a:06:e1:03:ab:55:
                    cf:2f:90:37:fb:2c:c6:0f:0b:f3:cf:dc:d1:23:ed:
                    bd:73:22:62:dc:b0:5a:1c:f6:eb:2a:8a:fc:88:71:
                    3c:56:b6:6e:ba:d6:98:ce:6e:01:ef:30:d8:ab:40:
                    43:76:c8:58:60:06:94:04:99:ba:c1:ee:ef:ef:dc:
                    fb:25:73:84:4d:4a:c0:9c:e7:ec:6b:e1:b2:0a:3a:
                    58:f8:35:4e:4d:6e:44:07:99:79:85:16:97:97:b8:
                    27:e4:53:e3:2c:bd:6f:c1:f2:51:07:1d:74:b4:9b:
                    06:ac:5f:2b:fb:99:9e:a0:52:00:91:fd:79:ac:7d:
                    63:70:7e:41:21:12:59:32:97:f8:e6:49:99:f8:82:
                    58:6e:b6:46:9e:cd:e1:2d:2d:44:41:d6:ed:0a:67:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:74:17:B1:97:97:7E:7A:08:A3:F5:52:DE:D9:2A:9F:61:7C:58:06
            X509v3 Authority Key Identifier:
                keyid:B5:73:D2:DD:A9:3E:42:04:09:16:3D:A5:9E:74:14:EE:91:A2:EE:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXPS3ak-QgQJFj2lnnQU7pGi7vI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2f672b-236c-40fb-aaf6-08d0f4bd2c28/1/tXPS3ak-QgQJFj2lnnQU7pGi7vI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:9c:3d:a2:30:5a:50:71:13:dd:f2:ad:ec:4c:40:17:19:
         d7:ae:a6:d6:13:03:dd:11:11:b0:0e:bb:6f:79:b1:89:37:e3:
         e1:8b:15:56:2e:3f:19:a2:71:18:7c:28:eb:ee:39:42:e9:7f:
         75:7d:a9:54:f0:54:fa:4c:af:03:5b:ed:2d:0e:8b:7f:40:ff:
         f6:0c:92:45:57:8a:1a:96:5b:4c:7a:eb:e9:e8:26:e6:70:71:
         a6:d1:92:d6:f0:af:4f:d8:6c:13:47:5d:72:47:7f:9c:a3:90:
         45:78:bc:4f:a0:8d:eb:23:fb:05:74:39:b4:26:77:44:58:9a:
         8b:18:87:fa:ae:bb:30:4a:2c:6c:7f:3c:0e:ce:17:35:9c:65:
         32:5a:94:35:63:a8:17:b7:ed:5b:5e:78:39:74:dc:3b:e8:42:
         9a:a4:8e:10:e6:88:b4:b9:54:0d:90:73:b7:eb:96:9d:79:08:
         ab:17:52:a0:f9:a1:8d:59:3e:10:5d:8c:92:25:76:54:5c:b9:
         36:5c:e8:8b:02:13:7b:00:dc:6a:04:39:4f:7b:40:6b:3f:5b:
         fa:5a:3f:f3:d4:4a:b5:41:3f:99:dc:d3:88:fa:ab:46:34:64:
         db:b8:43:58:00:96:fb:fb:c7:50:22:ef:e1:6d:27:20:9d:74:
         89:5a:0f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:59 2025 by rpki-client