Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
File:                     E7myHACB0jxKIfYKCEp1y1-VvqI.mft (raw, json)
Hash identifier:          CB/n6Z32eRUepmqtBF3q00njHSKGCMbwqsxKxsKrSSw=
Subject key identifier:   A2:99:8E:8B:D3:95:C2:53:D4:85:9E:2D:28:C9:67:C9:D5:0C:8B:1B
Authority key identifier: 13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2
Certificate issuer:       /CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
Certificate serial:       0199FBEAF5E52B25EF8B9B0C2B6AAF0108D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
Manifest number:          0815
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: 9Z1MbiRMYxp2gP8MxCFrNvXKHOQ.roa (hash: VEHI4wOUfy63wDjHbpWMSX4O+o3FhB3BTr504lTLiwE=)
                          2: E7myHACB0jxKIfYKCEp1y1-VvqI.crl (hash: WjukFt3WlB207BAwZxToL+6ttMnPfMtXSaahQ8bIlfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f5:e5:2b:25:ef:8b:9b:0c:2b:6a:af:01:08:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b9b21c0081d23c4a21f60a084a75cb5f95bea2
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=a2998e8bd395c253d4859e2d28c967c9d50c8b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:e7:e2:86:e6:d3:f7:16:9d:c6:d2:a0:2f:
                    4f:e9:96:4a:56:3d:b4:84:a2:9b:03:99:69:d8:ed:
                    fa:ad:70:03:7b:1e:57:9c:41:32:f6:7c:6f:05:ff:
                    a5:61:3e:38:d5:ba:8f:96:54:04:4e:32:4d:28:aa:
                    bb:14:33:8c:04:7e:f2:fd:78:00:1d:e4:bc:2a:8a:
                    9f:82:c5:28:6b:13:9b:c8:eb:8f:0a:43:1f:c5:88:
                    5e:0e:da:a9:29:47:ad:55:1b:83:84:bd:6c:e1:c2:
                    2e:13:7d:1a:e8:80:3d:0e:4c:2b:ff:5e:77:c7:a6:
                    19:c2:2b:b0:2d:3c:6c:bf:f8:20:f9:51:09:39:18:
                    1d:9a:0e:d5:ee:5f:55:b2:97:13:79:e7:50:41:38:
                    a2:53:9d:70:3d:69:56:71:10:36:e3:7e:26:ce:f4:
                    13:ef:75:d2:16:3c:97:14:e0:fd:d1:4f:8e:04:63:
                    7c:da:58:de:cf:dd:8a:3d:fc:b8:a1:b7:d2:12:d1:
                    87:53:18:a5:e7:1b:0d:44:95:ef:5a:95:e1:83:9e:
                    9d:f5:56:21:41:30:e9:36:36:db:e8:4d:41:fd:e1:
                    45:d6:86:d2:3c:36:dd:c9:05:1b:e6:e7:d0:e0:f4:
                    c6:93:f3:6e:d2:40:c2:99:61:e5:10:05:3e:e1:f9:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:8E:8B:D3:95:C2:53:D4:85:9E:2D:28:C9:67:C9:D5:0C:8B:1B
            X509v3 Authority Key Identifier:
                keyid:13:B9:B2:1C:00:81:D2:3C:4A:21:F6:0A:08:4A:75:CB:5F:95:BE:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7myHACB0jxKIfYKCEp1y1-VvqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/99a01f-bb52-4712-94d0-bf924a825f58/1/E7myHACB0jxKIfYKCEp1y1-VvqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8f:25:91:1c:2e:45:bc:5e:36:64:28:1a:08:ba:76:e9:1b:
         21:d4:0a:35:ee:88:e6:f9:46:2f:38:e6:2a:5f:1f:0b:33:98:
         66:f0:b7:32:7d:19:7f:45:eb:13:a4:69:a0:72:cf:a6:03:00:
         1b:12:ce:0b:b0:6f:3e:93:62:e0:9b:8d:fc:c7:cf:98:02:04:
         0c:03:2f:de:d4:5a:e7:7d:1f:48:3b:1a:7b:e4:e1:3d:f8:25:
         20:06:27:cf:33:df:4b:01:7b:f4:c1:71:9a:6e:10:6e:16:cc:
         fb:24:68:ef:82:a7:54:ca:26:60:f9:97:5a:bf:be:51:5f:d0:
         4f:40:8d:c0:e5:fc:84:53:9e:7b:ec:98:5e:ca:a0:ed:1f:52:
         65:f3:e6:a0:50:a5:30:dd:f2:35:fd:80:9c:65:23:db:f7:17:
         84:4c:88:a9:5d:d3:0e:0d:02:fc:97:da:44:b1:22:d7:bb:39:
         a7:8d:e3:30:02:d9:54:09:c6:c2:09:71:0b:ab:a8:99:cd:87:
         a8:65:55:1f:a4:2f:0f:71:37:a0:90:61:88:3c:eb:bf:04:10:
         cd:7e:be:35:16:9e:64:13:40:6a:e6:6c:ac:fd:29:4e:90:bc:
         20:3e:bd:19:55:4b:bf:ac:77:c0:66:85:fb:4e:0a:7a:03:33:
         8f:c7:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:08 2025 by rpki-client