Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          KSJMojhYtS6cpxh5DI+uc3c+47rMCEcNqYb6TXBDD+8=
Subject key identifier:   C0:26:C6:6C:A5:F5:2B:C7:C4:29:3B:0E:48:77:31:B2:57:5C:BF:91
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       0199FA6A59B43A939E5A2DE2757BDF28A295
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          13B4
Signing time:             Sun 19 Oct 2025 03:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:37 +0000
Files and hashes:         1: BF1bDepTrbKLANgNAxAuU4DpJj8.roa (hash: NVRWLfzQET9uM2U7kiX4t5MiOcl02yBYC6pVmP2/SUk=)
                          2: apwK_C2jLXYtjM1_rywqkSP6SXM.roa (hash: Brus3GnJlwWOcIOQznlG1EIg3MnsNQ8Kg3KCHt4fQYM=)
                          3: mOMTOzklCOsSuB9v2boILVZdvLA.roa (hash: mXY/bu3Am1gTj9HpvpC3BeunwEWpovGrdKp10ZfyeDc=)
                          4: pLrG1Jk8y_PSHcBjqwFvnPBrCfk.roa (hash: L3xcP7+zXuAEnHkbFJ8G7AgoW2gbRSxFSqISwohVgeo=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: ayRVdobx+z2zAgPsPmg/xFlQZveX2xKvqXXu7HKgSyw=)
                          6: wserKdrEjvEaiB1L0as5xEScHOo.roa (hash: p6zeLIjpAjhjz53tHHHfbEf0nj4XjPM97zZUxXWhby4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:59:b4:3a:93:9e:5a:2d:e2:75:7b:df:28:a2:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Oct 19 03:01:37 2025 GMT
            Not After : Oct 20 03:01:37 2025 GMT
        Subject: CN=c026c66ca5f52bc7c4293b0e487731b2575cbf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a4:25:a3:24:54:9d:3c:5b:01:47:38:f8:e6:
                    55:7d:e0:27:13:c6:01:98:36:d0:bd:b8:34:78:5a:
                    f5:aa:a4:d3:dc:4d:4c:26:49:ec:35:14:51:0d:a3:
                    7c:95:ea:15:bc:ec:06:03:10:13:21:50:71:68:e5:
                    74:e4:7b:63:2e:37:39:2d:a3:73:8d:97:88:e0:d9:
                    6c:07:5a:33:1b:19:c8:ac:0c:ef:a8:a0:49:dc:a0:
                    fd:89:7d:99:c6:48:97:6b:69:4f:5d:a9:33:1e:77:
                    9c:55:55:06:ce:91:7d:36:fd:c2:de:a6:17:c2:21:
                    99:98:6a:fb:a0:6f:86:12:b3:7a:21:95:b3:a0:b8:
                    6c:6f:c8:0f:6b:b3:e9:8a:c7:84:e0:94:12:2d:23:
                    9d:17:8d:73:66:cb:f3:8f:1e:f0:fb:bd:36:18:7f:
                    be:c6:03:3d:9c:63:fc:a3:f5:9a:83:5d:71:38:8f:
                    5e:c2:96:d8:64:fa:d6:a1:89:b3:0f:25:63:09:a7:
                    c6:5d:b2:1d:48:36:f7:a7:90:d4:ba:be:95:18:43:
                    fe:4e:e8:9a:98:fe:c3:37:f3:e9:48:7c:91:6a:9d:
                    81:90:69:b9:1e:59:6a:4d:20:d4:b5:71:90:38:b1:
                    93:ec:f0:47:6b:de:e9:6a:51:52:3e:ab:31:da:43:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:26:C6:6C:A5:F5:2B:C7:C4:29:3B:0E:48:77:31:B2:57:5C:BF:91
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cc:b0:5b:1f:1f:7f:04:c0:10:3b:21:92:9d:5a:56:51:fe:
         cd:d9:80:3f:bd:62:db:1c:d0:7b:e8:8d:e7:9b:fc:01:1f:cb:
         5e:6e:4d:ec:42:83:ef:1c:4d:0c:bc:ea:0b:ce:2c:b4:c6:a9:
         8e:f7:94:14:03:49:ae:de:b1:20:eb:6f:4b:31:2f:94:ce:e3:
         a7:d4:4a:d3:84:fc:42:9c:47:69:38:dd:a2:f1:1f:b1:c3:49:
         31:f7:dc:0e:60:2f:22:14:21:90:dd:85:0a:c7:17:ef:44:61:
         fd:41:db:40:58:0b:38:e0:eb:2f:ca:89:0f:57:f8:c4:f1:91:
         a1:25:64:86:4a:77:cd:5f:00:8c:27:bb:d0:82:ad:b8:97:19:
         b8:41:da:a9:76:c9:71:aa:e4:90:c2:15:2d:d3:36:d3:eb:df:
         84:f1:6b:73:d4:2b:45:5b:a1:4a:b0:a9:9b:63:17:b4:21:c5:
         20:d9:9a:df:e4:b8:7e:6f:29:9c:aa:2d:07:ec:22:11:f0:39:
         5a:a6:ea:32:87:a4:6f:93:af:40:98:14:09:26:56:1a:07:32:
         bb:fc:73:dd:cf:f3:f9:fb:37:fe:1b:0a:09:d5:8b:71:6a:07:
         2b:98:60:29:2b:57:9f:11:c5:f8:41:7f:0c:2c:c6:03:db:52:
         57:fa:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:56 2025 by rpki-client