
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          TqP8CQNxfqvxI3oZtZhFuQ1FFzDJkptv8sSAJR9DE2Q=
Subject key identifier:   A8:F1:21:EC:40:FE:44:DF:DE:AD:AB:73:82:90:78:48:C3:BF:37:C8
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       019A4EF5960039AB39BCA2B085102B813B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          09DD
Signing time:             Tue 04 Nov 2025 13:01:48 +0000
Manifest this update:     Tue 04 Nov 2025 13:01:48 +0000
Manifest next update:     Wed 05 Nov 2025 13:01:48 +0000
Files and hashes:         1: J51Teqgyy09b34rJcbgHerVOFGM.roa (hash: 19Bs3eSbGuxEB+iBQ+LwKa7Q22A3bTnu5AsBWmIZSJI=)
                          2: KztidovtFambRhPB8SLIQ-owEj0.roa (hash: ZiHrVtnB/KsSPCOwGxJB+E/s7C1HhkISdfaXBN1P1j0=)
                          3: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: 79SnqHHusZDsFAv1ZIxIdMW0xU1hT1KDcektJJbfevc=)
                          4: ujwp3pPR2D4C4IO8ortot5AhJsc.roa (hash: R/fpdE4SxTbnBF5zzZcf50YDXjlGaepj3n25cTayKNw=)
                          5: xygFAL-STuAoqvE59YVLwhBYgo0.roa (hash: KtX/KGqrHBsCj3UpDiERhcoHHsNFXropXHkJycWU6YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f5:96:00:39:ab:39:bc:a2:b0:85:10:2b:81:3b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Nov  4 13:01:48 2025 GMT
            Not After : Nov  5 13:01:48 2025 GMT
        Subject: CN=a8f121ec40fe44dfdeadab7382907848c3bf37c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:cb:fc:fc:7c:c5:d3:ab:29:6a:17:e7:a0:
                    0f:2b:33:36:83:08:87:82:52:d6:78:23:fe:31:87:
                    87:d1:af:17:9d:69:cc:31:c7:bc:a1:19:1e:81:8d:
                    2a:96:81:31:72:d5:80:99:4d:ca:ac:30:ba:cf:9e:
                    bb:38:65:09:a8:19:b6:6c:2e:f3:46:9f:ba:da:be:
                    ee:c0:53:2b:8c:51:8d:db:2a:72:2a:b2:34:cc:fb:
                    4d:09:fd:56:a7:b9:1a:51:39:7f:45:94:ab:58:38:
                    0e:40:dd:6d:24:35:02:b8:db:9e:06:93:b7:64:0a:
                    d8:2f:e4:52:d2:72:d9:02:08:ae:36:7e:e0:54:a8:
                    25:4c:f1:68:f8:33:d1:3d:52:24:d1:44:da:68:f1:
                    61:cf:6a:d6:00:8b:ce:91:41:a5:db:e2:f7:03:62:
                    c4:e1:fb:11:a3:5b:82:82:a8:60:73:93:e2:b3:38:
                    fc:a5:fb:2a:42:40:6e:3c:93:17:0b:03:ec:af:41:
                    e0:6c:d8:e0:02:4b:56:e6:67:3d:93:9c:47:e6:8e:
                    2e:d3:5e:cf:c6:dc:a1:dd:9a:83:ac:49:00:a2:35:
                    50:7c:8b:a0:3c:30:41:4a:7c:8f:a4:7e:a4:ed:94:
                    65:fa:cc:d0:1a:cf:4b:a7:c9:5f:61:2b:68:f1:78:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:F1:21:EC:40:FE:44:DF:DE:AD:AB:73:82:90:78:48:C3:BF:37:C8
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         c0:2a:be:8c:75:76:0b:11:5f:8a:c6:80:dc:25:29:27:3d:b2:
         9f:57:d9:c9:aa:37:41:18:42:03:09:f4:3c:7a:0a:3e:cb:40:
         fc:01:04:4c:7b:8a:43:c0:e8:a2:75:86:97:52:60:5e:35:d3:
         1f:f1:41:ab:a3:3e:d6:cf:3d:4a:94:b0:4f:0b:28:99:5f:48:
         bc:83:9d:61:14:a3:5c:a0:ef:f6:65:00:46:f2:c7:cd:b5:97:
         4d:2d:f5:22:b3:bb:24:6c:42:4b:42:03:09:37:0d:00:b4:91:
         98:70:6b:c2:c7:db:73:22:92:69:a3:ea:2a:85:05:e8:8c:ef:
         1f:de:59:ba:ac:bb:cc:b9:4b:38:29:bd:12:20:5b:42:e4:ee:
         a9:f7:a8:e4:95:64:58:04:5d:79:41:fa:a6:53:35:4b:e0:e1:
         48:7f:ed:46:23:e8:c1:5c:7c:bd:53:0b:df:d1:86:72:3d:4a:
         e6:54:24:35:bb:ff:72:1f:5e:2b:79:9d:54:4d:10:49:96:d2:
         88:b1:ea:e4:b9:44:0a:36:d5:04:78:bf:40:fc:c4:14:e7:66:
         19:1d:63:c6:08:22:69:d7:90:2d:8d:6b:c7:21:6f:6c:41:cf:
         40:8a:80:3c:cd:da:22:b9:cb:83:af:5d:7b:fe:c5:d5:be:af:
         18:dc:39:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:36:17 2025 by rpki-client