Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File:                     AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier:          atiFXSXY93+id0UGSjMKyMBig9VsW+zOnAjsl7ZziWg=
Subject key identifier:   1D:3A:44:9F:89:E9:8B:4F:C5:F6:0C:FA:70:0E:41:5D:CA:74:E5:9C
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       019A4F627C265F2F57B699BBE18B158991AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number:          0A71
Signing time:             Tue 04 Nov 2025 15:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:45 +0000
Files and hashes:         1: 3Ti0VRFQXYG5OETL6H3xqGURx7g.roa (hash: wOZdgFUImj0qeOyuyvxGEJ5Ru8WQDiyIL/ijF462qBo=)
                          2: 7XozsJg8cESPgPLOlnZdDHuIIkA.roa (hash: NkHcRJjWveOKr/3lsnLotWjQFQWLhxVwR81b0kSFErE=)
                          3: 9K541zTwKzkXQVxivY6RtgnMtfc.roa (hash: 2IzU5yJObIbCyE/+ehHr5lv63aMpYtOrcZkh+bZRUaU=)
                          4: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: Yc0WTGMMACeHqpf1dSkqd148XdGI+j9II25ZmS1WW6U=)
                          5: BMAXZlHZxI-uH9olLUnOb_RwOVw.roa (hash: bh3WIRfGGamusnp7dM5Kd33nh5F3n2SdBED6ZCn/+AE=)
                          6: GqF55OK8p88k_RA7XjSbJsgeScE.roa (hash: UqarmNk43/6OgpiiKkH7WYGaCUS8csQFBD1FbaFpkx8=)
                          7: K00tT5cZnNVXDF_Or6n_nc_0xRo.roa (hash: s/PaO+NasRBZLSycpt6mJjPENaMQFjfT/5hMIEO7t08=)
                          8: p0H-UvlbJAxkRpZM50LM0HMaTh4.roa (hash: eqbVXmLmRGS+69kMEz9SPkK3Rw5wmLRM/rZ2KSdZI3s=)
                          9: zOfa10bmz5mA01whN-vRAcpYyD0.roa (hash: ZjeDW/sMSDaC9yWADq68Sh8uF/rcU0PJexnNWW9mYAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:7c:26:5f:2f:57:b6:99:bb:e1:8b:15:89:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Nov  4 15:00:45 2025 GMT
            Not After : Nov  5 15:00:45 2025 GMT
        Subject: CN=1d3a449f89e98b4fc5f60cfa700e415dca74e59c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0c:f0:da:c5:0a:8a:ad:aa:53:0e:f3:2b:36:
                    36:28:4b:d7:01:9f:46:96:42:31:33:ac:40:a5:90:
                    37:6a:59:f0:9f:6f:46:ce:ce:8f:fb:90:10:6a:47:
                    04:fd:f8:72:38:1b:78:e3:f2:3b:46:da:84:f7:d8:
                    72:d1:81:1d:54:b1:4a:51:2f:7b:43:9f:35:c7:75:
                    ac:c1:31:f4:b9:fb:fb:ff:e0:17:29:67:27:e6:d4:
                    e2:5c:f3:2c:66:41:fa:e6:41:0a:ce:56:f0:01:3d:
                    d3:2e:79:5b:98:0b:6f:a3:92:e7:2a:4a:40:c4:1e:
                    bf:a4:2d:c1:cf:47:5c:2b:1a:ce:72:07:af:ad:ea:
                    77:b1:45:e2:a4:e1:c5:49:74:14:1f:2a:ab:01:48:
                    ad:47:42:e2:41:7d:f1:50:26:f8:40:70:bc:5f:47:
                    bc:a6:54:46:ed:a8:68:41:4a:86:c7:16:d8:2b:b6:
                    e2:d4:47:cc:8b:50:77:e8:ef:23:68:5a:bc:67:29:
                    fa:85:52:ff:c5:39:59:db:0e:b1:e9:14:f3:94:c2:
                    54:a1:33:9b:d3:c0:2f:9d:f7:6c:ca:1b:80:31:30:
                    53:96:b8:05:bb:dc:cc:f5:90:86:a6:13:df:b3:d6:
                    29:15:99:bf:d2:03:3b:be:db:16:4a:b3:72:79:6f:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:44:9F:89:E9:8B:4F:C5:F6:0C:FA:70:0E:41:5D:CA:74:E5:9C
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:ed:27:e4:e9:0b:54:1d:09:ea:cc:32:ef:19:19:31:b0:70:
         25:c8:76:62:2c:c1:32:25:f5:ca:4c:1a:05:9c:f1:ed:35:12:
         3c:52:16:ef:42:08:85:cf:bc:df:98:c7:d0:05:56:c2:db:f8:
         e9:07:7e:40:36:d7:32:3b:83:9e:26:a1:d8:ba:41:6f:47:d4:
         91:14:14:76:e7:b0:96:f5:27:65:54:7d:c8:ae:9d:ea:28:33:
         02:65:48:1c:2d:7f:77:2f:08:3e:d1:e5:be:db:dc:d6:dc:42:
         fb:d7:f7:ca:c6:aa:36:c8:d5:62:2b:89:fd:96:ee:3f:ef:cf:
         cb:5b:4a:a2:88:23:b4:ba:fa:01:14:11:12:c4:cd:f9:37:9e:
         a8:b2:b4:b6:f7:70:2e:81:4c:3d:17:f0:e2:33:f7:6f:26:ce:
         0f:1b:4d:87:d3:77:ff:a3:26:f0:ea:3e:32:3d:d0:32:23:2d:
         b9:ae:1b:98:b9:00:e3:b0:10:21:ad:23:db:13:18:d6:0b:62:
         e0:85:7f:7b:21:ca:e7:ce:ae:f7:ae:3a:2f:7a:54:06:5e:19:
         8b:25:eb:80:e8:00:ea:ec:e5:15:19:a6:d8:8a:8d:0e:ad:b3:
         c6:43:49:42:ca:28:1b:fe:b8:f0:cb:24:c7:0d:76:1d:e4:ac:
         97:81:c7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:34:24 2025 by rpki-client