Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
File:                     m2t7PqYO-0pXmk9eI36nqI07wHg.mft (raw, json)
Hash identifier:          0BUtletDXk6nctO+iCHiwkov3DvQhHDnM0qFn3Kh8Ko=
Subject key identifier:   38:74:D7:EA:ED:BD:81:B6:3C:3A:51:35:5F:A7:FA:E5:59:27:C2:37
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Certificate issuer:       /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial:       0199FBEC4EFCFDB9922CC8B48CD5E2D8061F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
Manifest number:          0CC6
Signing time:             Sun 19 Oct 2025 10:03:11 +0000
Manifest this update:     Sun 19 Oct 2025 10:03:11 +0000
Manifest next update:     Mon 20 Oct 2025 10:03:11 +0000
Files and hashes:         1: 30JPkxPIzm_OMTaydoXnQRFB7vY.roa (hash: MkfEatzHR844BQfQyINSRWsoFxXrJhuYJmf8MK9pf6s=)
                          2: Hfh06Xr9-D1nr1aUUllDbp-6AjQ.roa (hash: s5lBULEnz8BTFCCjCQ99PzYCNeocxJW4u17NjMiMmrU=)
                          3: Iel88vR033hS2mHZK9DcUHuaXsA.roa (hash: W6ANO3kRstx5CNfcQT8BKzJd1YqOVSnKE4F5NSvP60M=)
                          4: m2t7PqYO-0pXmk9eI36nqI07wHg.crl (hash: d89odPuyURy47SFyWOJuzRfhqSTQAkW82xJaVlWF7So=)
                          5: nEfHwINwuBHiUKIJFEku-LNUnAs.roa (hash: tHlNnUEritD7iLdeWrXnI1WpdfyGyNkHldv1R/Pq+2U=)
                          6: wzja5RznMFQCsPrVLj5Ban3nUjY.roa (hash: QMoOb2Ipda2qbUFjg5rEKe4T1O8LiUemxIOKkYvCj0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:03:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ec:4e:fc:fd:b9:92:2c:c8:b4:8c:d5:e2:d8:06:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
        Validity
            Not Before: Oct 19 10:03:11 2025 GMT
            Not After : Oct 20 10:03:11 2025 GMT
        Subject: CN=3874d7eaedbd81b63c3a51355fa7fae55927c237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:b7:42:a6:08:82:0b:d1:b5:23:29:f1:56:
                    f8:96:71:58:12:91:44:11:1f:10:63:14:ff:d4:76:
                    ac:3d:c9:c5:99:56:7e:ab:41:6f:d6:33:cc:d8:f7:
                    86:73:64:ba:91:78:57:9e:5b:3e:37:2a:94:eb:f3:
                    4a:5f:66:83:16:23:78:d4:2e:97:e1:a0:bb:83:4c:
                    17:2c:d4:f4:b9:a8:1e:80:a6:65:bb:a6:db:8c:3e:
                    ab:4c:36:2d:62:d1:2b:7f:cc:ac:8e:4e:06:0d:bd:
                    97:4c:ae:22:91:bb:54:2d:f7:dc:24:49:39:1a:8a:
                    6b:49:e0:ee:42:73:e4:01:bf:8b:30:bb:4a:ea:06:
                    a5:d3:ae:98:41:0a:0c:e2:97:a7:2a:9b:5e:64:e1:
                    c6:79:61:bd:4e:43:61:9e:db:59:1d:10:1f:f0:6e:
                    47:66:97:99:95:5c:0e:87:e5:8b:3a:9f:ce:12:42:
                    d0:4a:4b:eb:77:39:dd:2a:74:7e:fe:48:6a:57:ab:
                    a4:39:3a:c7:b1:4e:f0:18:c6:53:e6:31:76:19:2d:
                    0d:50:c3:d3:05:f7:81:5e:2d:7b:cf:ef:5c:3a:ac:
                    14:4d:9c:c5:19:31:64:45:e8:49:17:4f:12:40:8a:
                    8e:20:ec:a6:a6:00:92:ec:c1:9a:07:24:03:d7:6a:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:74:D7:EA:ED:BD:81:B6:3C:3A:51:35:5F:A7:FA:E5:59:27:C2:37
            X509v3 Authority Key Identifier:
                keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:05:3b:3f:0f:c3:a8:b8:fa:03:b0:23:6b:33:eb:fd:0b:33:
         38:18:59:a3:ab:f7:2e:53:b0:2c:69:12:2e:a7:cf:68:c8:0e:
         0a:46:74:0f:cb:1e:c6:31:5f:b7:2d:94:57:62:bc:5d:5b:72:
         51:59:6e:77:d3:10:65:38:84:c8:94:ae:82:fe:bc:68:c4:f4:
         46:aa:d3:d9:93:ed:84:66:ab:06:28:0a:34:d5:0a:7b:4f:8e:
         b1:cb:46:ce:41:0d:c6:a3:c6:ef:c6:4d:5a:00:84:f4:cf:5c:
         7e:8d:38:3e:15:90:76:9a:76:ce:6b:90:73:a3:53:01:7b:fb:
         11:9e:e4:a3:7a:b0:d6:06:d7:7b:91:4c:53:fa:36:9f:f5:16:
         ca:17:a1:a6:01:64:64:4b:02:c0:a4:31:c6:88:0f:5f:71:23:
         fd:ec:06:6e:30:f2:03:a4:2d:03:6f:17:6e:7c:f5:a5:57:97:
         2d:06:87:fc:30:47:da:66:6b:72:04:f3:9e:89:34:87:7a:ec:
         f3:f8:ae:2f:90:9a:4f:1b:e0:c4:c0:d6:8b:bd:ad:e6:6c:e3:
         a6:8e:3b:97:bf:4b:5a:05:96:bb:a9:f2:8c:8a:5a:03:c8:4b:
         7c:48:ae:36:b8:37:57:33:0d:ee:24:90:93:dc:7f:50:f4:60:
         26:ec:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:06 2025 by rpki-client