Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          /YmXogkbRPpJytIG6IbHk3bYprp6AdMPCCJGGM6vBcI=
Subject key identifier:   13:7A:33:97:A2:07:30:3B:0B:43:45:C1:9A:FA:CB:AA:EB:E5:4F:C1
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       019A4F62C63CDD8B96687243585D974C9440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          059B
Signing time:             Tue 04 Nov 2025 15:01:04 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:04 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:04 +0000
Files and hashes:         1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: FH2EAPbPohzu1c6tHL/O+dIfg90sKoLbtUlSWj7UUpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 15:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:c6:3c:dd:8b:96:68:72:43:58:5d:97:4c:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Nov  4 15:01:04 2025 GMT
            Not After : Nov  5 15:01:04 2025 GMT
        Subject: CN=137a3397a207303b0b4345c19afacbaaebe54fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c0:d8:76:aa:bc:1a:c9:11:ff:e5:52:79:3a:
                    e1:a6:86:91:23:06:d8:9e:d5:b5:ff:66:fe:a4:14:
                    a0:2a:7d:de:6e:74:69:cb:84:c2:ee:97:07:ed:66:
                    16:24:0b:4a:5e:cb:7b:c1:55:62:d7:ba:9c:48:72:
                    b3:13:29:0c:fa:b3:81:23:08:b2:45:9c:b5:16:e2:
                    ae:de:96:38:f6:a9:e3:4c:ab:c3:22:c5:61:22:64:
                    6c:ce:17:f0:de:da:bb:f9:b7:1c:09:ce:62:3e:5c:
                    7f:df:88:18:6a:3c:9e:33:8a:93:0a:c5:e1:3c:ca:
                    84:ce:9c:af:6e:6c:fb:3e:a3:f8:0f:81:97:54:28:
                    8e:ae:f0:d4:48:92:74:f5:97:0d:a8:44:3d:fd:d2:
                    15:3d:c5:2c:2b:c4:51:f4:f1:11:52:2c:0d:c5:d3:
                    54:4c:60:f2:5a:71:49:76:97:86:51:07:97:e6:2d:
                    d2:50:a2:47:97:2a:a2:71:a3:9f:72:3a:94:dd:43:
                    b7:77:3c:4b:aa:61:aa:fa:12:56:97:0b:e9:50:70:
                    4d:95:05:ae:99:85:c9:26:b3:fc:4a:ad:d0:da:ad:
                    c1:87:6b:72:14:e6:f3:46:9c:b0:64:5d:be:18:0e:
                    d0:13:ba:7d:65:4f:91:68:c9:6f:e8:37:5d:9d:d9:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7A:33:97:A2:07:30:3B:0B:43:45:C1:9A:FA:CB:AA:EB:E5:4F:C1
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:8b:1c:f9:10:17:52:86:3f:fa:ce:54:91:25:cb:32:b7:12:
         39:34:89:da:6b:6b:44:54:88:db:cb:55:e8:32:07:bd:d5:ee:
         80:10:91:17:c8:ec:3a:e3:5b:83:74:76:ad:aa:dc:f6:d2:f1:
         6d:db:8c:48:a6:2b:94:ef:32:0b:60:b0:b5:1d:97:2c:e9:0c:
         62:d1:0c:b7:a1:6b:84:75:09:02:1a:6f:28:f8:57:16:9f:53:
         f3:73:df:fc:dc:d7:18:62:0f:48:ba:be:4c:3c:7e:90:b8:c1:
         76:e9:93:da:44:6a:4b:ec:3e:4d:d7:47:07:09:fa:87:b8:17:
         92:d3:eb:b4:b0:40:d5:24:30:e5:b2:60:b5:e3:40:63:0d:87:
         67:3e:e9:1a:82:33:70:2e:78:12:2b:c5:ad:8f:eb:62:60:be:
         0e:92:dd:77:6f:c8:12:72:63:0d:3e:92:1e:f4:f2:82:62:af:
         93:1a:0d:f4:8f:e4:8b:80:aa:68:6d:52:68:19:9f:c9:bf:d4:
         80:70:bc:b0:47:f2:79:1d:3a:07:cb:c9:9f:31:f0:d6:ac:18:
         07:31:fb:33:ed:24:b5:d4:0d:51:c1:e6:30:64:04:ef:c7:d7:
         b9:27:8f:a8:9c:52:3e:b8:1f:42:49:cf:b7:c5:04:58:15:98:
         4f:b7:e5:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:39 2025 by rpki-client