Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
File:                     3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft (raw, json)
Hash identifier:          IDqZ4ydhNryKty+v54GyDSUmOzwpDNFdn0hXhSaKG/I=
Subject key identifier:   13:BA:86:C8:66:6D:60:47:91:19:1A:5F:12:2D:1E:EC:ED:DC:C4:5B
Authority key identifier: DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0
Certificate issuer:       /CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
Certificate serial:       0199FBEAF5380DEB9FBF01B1B76C2CD0FD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
Manifest number:          14AD
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: 29TbMLufIPxRE020kIvBxrijcXE.roa (hash: yaWCKyUE+f0tiisSqvZhHpxJTfa3UwVcLIOHWKNCXpA=)
                          2: 3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl (hash: 1YuFa3rIWugUs/Y6aYCw3HBsA0rBFBR+PCuMn95Kfwo=)
                          3: EpG6DN4aBjhttZAw1Q1XQqE7-1s.roa (hash: l6KmPb3Emr7cpoLQVZzViHX9jNPkSHPfBrkC7M4zEOg=)
                          4: bCHjuq-GwNDHZjsTd3pAyP2Si4w.roa (hash: M+Njn6Jry+REmQlQYvUz0vQnUhP0EbBt8o0lYes6W+o=)
                          5: hn5_PzzfTec18eIUGShu0x__N3w.roa (hash: +8CUvj+aURe4BOcdllxHMI3BGLO88+PbI/02n/kq4Ik=)
                          6: pYZCrMGmxkKgeeR3OB7Sabq_PhY.roa (hash: xXgcQpyaaoiy7n7zCgLujfBrckf/0cL3u4clvozeQMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f5:38:0d:eb:9f:bf:01:b1:b7:6c:2c:d0:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc86e3e928c7f0c9db69515ff3aa1f678cee43c0
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=13ba86c8666d604791191a5f122d1eeceddcc45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:08:4b:fc:78:49:eb:e0:65:86:96:3b:e6:ec:
                    9c:6a:bc:09:68:a6:d9:d6:ad:6c:85:ed:af:76:97:
                    bd:97:a3:a4:19:ac:ea:9f:43:a1:ce:58:d0:52:95:
                    cb:99:8a:36:bb:2b:80:ca:6a:a6:b8:c2:7d:2c:e8:
                    6c:ee:58:48:82:9b:fa:24:d1:49:32:f5:6e:c9:01:
                    fe:cd:f2:48:f1:75:41:94:ac:ed:1f:67:d1:82:42:
                    a1:2b:81:27:0e:04:77:b1:19:ae:89:a5:70:48:c1:
                    23:58:11:fb:7b:2b:95:e0:84:1a:d6:13:01:2f:49:
                    c5:e1:1e:c1:59:dc:08:06:fc:40:5d:da:d3:b2:40:
                    07:6c:4d:7b:f1:52:de:2a:09:88:f2:63:8e:d3:92:
                    56:ba:77:1d:9b:79:b5:1b:7e:f1:2c:12:88:9f:c0:
                    eb:0e:1e:95:32:d3:8d:55:4c:8d:ca:e6:38:22:83:
                    08:ae:23:9c:16:e4:85:57:e4:3f:6a:e5:05:09:31:
                    5c:bd:ed:26:fe:7a:53:df:0f:3e:31:18:e0:6c:08:
                    d7:33:85:97:72:18:f2:b8:0f:71:ba:8a:6f:b1:ea:
                    de:f8:bb:3d:23:a3:5a:95:7c:4a:28:96:81:a3:fb:
                    be:51:17:6b:84:e0:2b:da:b0:b5:2a:b2:95:dd:5f:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BA:86:C8:66:6D:60:47:91:19:1A:5F:12:2D:1E:EC:ED:DC:C4:5B
            X509v3 Authority Key Identifier:
                keyid:DC:86:E3:E9:28:C7:F0:C9:DB:69:51:5F:F3:AA:1F:67:8C:EE:43:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/471aa5-c3f7-4afd-b122-9c8e59c2771c/1/3Ibj6SjH8MnbaVFf86ofZ4zuQ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:73:12:42:33:d1:a9:d0:27:97:b7:50:e0:69:94:71:e0:e5:
         89:46:59:ca:a4:37:4b:be:be:56:bc:f4:c4:6a:14:bd:4f:c9:
         1a:bf:9b:ce:4e:d2:d4:1f:7b:c0:09:99:5f:0e:53:90:1f:d6:
         f6:94:9d:61:11:47:88:a5:a6:81:f2:68:ab:f0:fa:dd:38:33:
         fa:2c:2d:fa:21:d2:c7:7b:4c:4d:87:07:f4:22:10:a5:1a:9e:
         a1:c0:2d:b5:83:88:45:cd:1a:ed:cf:47:28:11:72:39:b2:67:
         2c:20:1f:24:c7:9e:37:01:9d:bc:85:04:09:d9:12:1f:88:ec:
         09:f0:93:c7:b4:af:f5:19:ed:bc:5b:e6:84:2f:4c:11:f5:af:
         9f:c9:2c:a5:d0:92:b1:47:dd:63:59:a8:00:2f:1d:cc:cb:c6:
         74:38:09:67:8e:19:c7:22:99:50:06:3a:70:73:c8:7a:40:a5:
         5a:67:5b:ff:b7:c5:b8:f3:f2:5c:ec:a0:b7:cb:1c:67:2b:a0:
         65:26:00:6f:df:c6:f3:c9:55:85:3b:4c:40:55:b8:70:93:cd:
         2f:19:90:4a:23:f3:bb:1a:ad:ff:17:cf:58:a5:0f:cf:a2:2c:
         74:76:09:be:2e:30:85:38:ca:47:a2:84:aa:7e:a5:d3:66:9b:
         7a:ac:e0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:38 2025 by rpki-client