Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
File:                     aRJCwzvC4unkWFCg_GSrLHUGpLg.mft (raw, json)
Hash identifier:          bMWNrzZr4ITN212j8Qq7cBpuYmR9SMo4BX7QivMId8A=
Subject key identifier:   69:B6:D0:94:44:BD:24:03:A8:31:96:BA:52:EC:1F:99:FB:64:D5:D4
Authority key identifier: 69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8
Certificate issuer:       /CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
Certificate serial:       0199FC21A014CD9C3ECE8E58B8984CFB7216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
Manifest number:          15CB
Signing time:             Sun 19 Oct 2025 11:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:26 +0000
Files and hashes:         1: AxMCzGQBfkdUPjF75_FQYgBKyKk.roa (hash: Q4uzKxO1D3wkqVE3S1h7jCMzrLyzlo8Fuw91HVMqqb4=)
                          2: GBH94I9dnJeJP-cDtrZrjQV60Xo.roa (hash: y6nZi/uewPtAISPvzpzs2QyOXFXhWR2PVFDixGJRcS4=)
                          3: H2VZSmbjuhR3ac6MIKzeglyIYks.roa (hash: UIjSJcyc/E8JLENuCv3vqPJa+7OOm7xS/YMDmRv22Kw=)
                          4: HF4WzxoDXgbg5yBxSS03tW9aru8.roa (hash: PWduzoTmZRp313sGCyiMmvYNM3baM7nUGFf5SyjiJn0=)
                          5: J77jo9bOLCQlRa9jZXP7dkS-vsc.roa (hash: BkSOP5B+rRmnn+pH6eFEIdlnuALStZNG5jHgh2jmArM=)
                          6: O8qEciVBjDooFokDnHqAMc9PpWM.roa (hash: RGa2nLDp0/bHbVbOkr73dwyquGWNJsV+DHv7xfkWAwg=)
                          7: aRJCwzvC4unkWFCg_GSrLHUGpLg.crl (hash: SpdeVWEakD31lBt3Q3hqWQEgeghiqsyCxvJYUg5k+CQ=)
                          8: dhCWHEfUE6vusnYr9Cpsw49GGBU.roa (hash: sfCfke9wYtz4NQ6ml95RZDRUqTquZcuUDHPHT8jSjBk=)
                          9: udc46mgp-szqkgSRcIGKFCbr4JI.roa (hash: JhRkQnx4Eha9Xs6OT104V9KWisTA96XNNv0iCMA2cQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a0:14:cd:9c:3e:ce:8e:58:b8:98:4c:fb:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=691242c33bc2e2e9e45850a0fc64ab2c7506a4b8
        Validity
            Not Before: Oct 19 11:01:26 2025 GMT
            Not After : Oct 20 11:01:26 2025 GMT
        Subject: CN=69b6d09444bd2403a83196ba52ec1f99fb64d5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:af:c4:e8:ad:30:b0:91:37:b7:80:06:0b:
                    ca:38:86:35:68:3a:33:a7:d4:4b:7d:7e:f3:b7:b3:
                    17:9b:ef:88:5b:81:64:90:22:cf:6c:82:7d:15:83:
                    dd:7a:5b:e8:a8:40:ff:9f:a5:7c:57:24:d4:3f:9d:
                    7f:42:6d:f5:39:60:06:aa:19:54:a8:c5:7b:5f:1d:
                    bf:d5:69:5f:18:be:38:07:e6:7a:bb:97:dc:ee:c1:
                    f5:25:0d:85:b1:5e:26:49:09:83:6c:1b:b9:9d:83:
                    a2:01:c1:27:b9:74:cc:35:28:ec:29:a0:5c:37:c8:
                    10:ec:2f:48:de:32:d8:e8:16:5d:56:83:3f:4c:a6:
                    7d:3b:04:c0:48:c9:f9:58:d0:55:2c:ec:32:79:dd:
                    e0:d0:36:f7:6f:78:8e:27:2f:4d:d3:c0:f1:4e:28:
                    11:75:13:18:c5:e4:79:43:24:9b:5e:31:c0:6f:ce:
                    18:ed:e0:01:da:e1:9a:e7:52:96:92:37:05:ed:41:
                    3c:22:3d:96:19:99:e8:86:23:ce:47:52:ce:e2:d2:
                    4a:3e:b1:b0:9c:b4:25:a9:b2:04:65:24:f5:5b:91:
                    84:0d:5b:5a:b6:3e:5f:11:d9:93:f2:8d:ac:2a:4f:
                    57:c0:ac:53:e2:36:b0:13:6e:cc:dc:3b:9d:f7:7f:
                    ef:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:D0:94:44:BD:24:03:A8:31:96:BA:52:EC:1F:99:FB:64:D5:D4
            X509v3 Authority Key Identifier:
                keyid:69:12:42:C3:3B:C2:E2:E9:E4:58:50:A0:FC:64:AB:2C:75:06:A4:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aRJCwzvC4unkWFCg_GSrLHUGpLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6356b9-c49f-4b4d-8e29-362ffe8ee270/1/aRJCwzvC4unkWFCg_GSrLHUGpLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4b:74:3e:68:26:a0:20:7f:c7:ba:8f:d3:1e:36:55:a2:93:
         69:1e:85:b8:90:ad:0b:81:df:2f:07:d9:f6:93:47:a1:71:fd:
         7c:16:bf:9b:e2:9d:fb:b0:50:c5:aa:3f:a6:3f:72:e8:e5:42:
         f7:a6:f1:9b:24:a9:3f:da:0d:23:5a:d4:41:d4:16:fb:1b:49:
         85:c2:bd:a3:05:0b:2f:8d:0b:87:76:c4:4b:bf:e2:af:6f:81:
         38:4f:6e:e1:06:37:45:1f:1d:25:6e:31:13:cf:8d:76:04:a7:
         bf:d6:31:9e:fe:cc:f6:2c:c2:ca:28:d2:5c:2e:1a:8c:57:18:
         a8:49:4c:d5:0a:09:2e:c1:c9:dc:6f:11:db:d6:0d:4d:97:31:
         d6:d6:e0:90:a1:18:d5:f4:6d:84:56:6c:a7:4a:2d:6b:1e:ed:
         08:9b:07:1f:6b:da:61:6a:21:5c:be:08:74:82:af:85:86:47:
         b0:f0:2c:4b:99:28:b6:d6:66:89:ee:2e:8c:4a:8d:f2:b3:ff:
         76:ca:a4:c4:c3:cf:46:31:39:28:90:72:29:11:4b:69:c3:b2:
         1e:19:0c:b8:39:ea:37:2b:e7:a6:87:06:9c:c9:de:f3:a2:6e:
         05:11:f4:cd:9f:1b:4d:2a:1a:13:7e:a0:90:c5:27:60:31:cd:
         9c:ff:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:25 2025 by rpki-client