Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
File:                     a30fHod8EnmCdOATNFVPiZ846sE.mft (raw, json)
Hash identifier:          0wS9Auhqt3LIi4RIypwZmWlsO6L88ziXdkTIbP5MHz4=
Subject key identifier:   C0:2A:A1:45:94:E4:F0:4F:1A:45:96:15:95:DD:92:1D:D7:D7:09:56
Authority key identifier: 6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1
Certificate issuer:       /CN=6b7d1f1e877c12798274e01334554f899f38eac1
Certificate serial:       019A5074E3CB6CD7971E59CC8549D234F2AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
Manifest number:          119C
Signing time:             Tue 04 Nov 2025 20:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 20:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 20:00:28 +0000
Files and hashes:         1: 1-47yB099htuBv2m-mnsxmo5hMaE.roa (hash: glbHBbOOXucvNPZBEZEZlyBvhlSEAVVGrvhxKUG4Uz4=)
                          2: 5Y2NPf-2wwHQNFwN222T-_ksWjs.roa (hash: 7vHIYZQTiGeFh0mU2zpcuuX7KVBld5DcIlwlMA6in8o=)
                          3: St4HRjoesIgHRfExOBffE_pcBIw.roa (hash: zj7JSUVTgp8pR7SRQVxha79Is1N6T3q+JK526mfdo5s=)
                          4: ZRn8_lnFsXvgqivcUn4eIrUv-Ic.roa (hash: ViUiWV5ebu4waGuKqQE1IWidKaFMMzGFtUARe3tVsh4=)
                          5: a30fHod8EnmCdOATNFVPiZ846sE.crl (hash: uYMaMSrIybBQnLhOEUINkw1tn7AN1cQ6gz3ez2/v/vM=)
                          6: lKdTsJ9TvIICTgPRcm3O1hlBWiM.roa (hash: py16JH9zUXcJT+HWUygN67vLSyq6kBTksveRhrIkt/k=)
                          7: pTwzFC29LPXNKIBj8fs94m0Kbbg.roa (hash: sPgk9WDd2v8KxrBOyyp78OiRQG9IETqQ+gnNWNn4qjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:74:e3:cb:6c:d7:97:1e:59:cc:85:49:d2:34:f2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b7d1f1e877c12798274e01334554f899f38eac1
        Validity
            Not Before: Nov  4 20:00:28 2025 GMT
            Not After : Nov  5 20:00:28 2025 GMT
        Subject: CN=c02aa14594e4f04f1a45961595dd921dd7d70956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f5:ef:60:bc:63:33:8d:15:fc:ef:7b:54:f6:
                    74:da:5a:88:01:a2:7d:36:27:58:fd:aa:51:bd:04:
                    05:de:24:2f:90:11:d5:18:12:69:ac:40:4e:3a:27:
                    6d:b3:3b:6c:b6:fb:fe:94:17:c8:53:b9:5b:5b:48:
                    d8:49:b2:d9:b9:79:6a:f8:24:21:16:e1:5b:5d:ce:
                    39:a5:70:e2:aa:13:25:36:ff:8d:b9:98:fa:17:6f:
                    39:cd:28:f1:6f:8b:90:2b:18:6e:8e:5c:ba:f8:22:
                    ea:c7:7c:57:ce:d4:35:2b:d4:57:07:b1:f1:5a:66:
                    1d:22:4a:4a:ea:e1:c8:d3:72:98:00:03:cb:cd:68:
                    41:6a:b9:74:79:31:e4:13:f2:c7:41:dc:98:1b:76:
                    d3:27:59:77:d7:cf:9d:a0:36:c8:db:4e:36:81:e3:
                    fc:d9:b4:b4:28:3c:29:6f:7c:98:d4:33:dc:6f:40:
                    12:21:60:b0:c8:d9:60:c1:46:4e:12:3d:52:db:ec:
                    64:5f:ca:07:e3:ed:a2:5e:c1:ff:48:e1:06:22:48:
                    4f:94:18:f3:e5:2f:57:e7:23:e7:7b:ed:ae:d6:5c:
                    59:9f:6d:8c:b5:73:91:c5:df:d3:54:b9:7e:7e:77:
                    97:96:25:e6:c8:8a:50:cd:eb:0a:63:5d:e2:69:f0:
                    25:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:A1:45:94:E4:F0:4F:1A:45:96:15:95:DD:92:1D:D7:D7:09:56
            X509v3 Authority Key Identifier:
                keyid:6B:7D:1F:1E:87:7C:12:79:82:74:E0:13:34:55:4F:89:9F:38:EA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a30fHod8EnmCdOATNFVPiZ846sE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a13c40-dc67-423c-979e-2fad9a2fc3ef/1/a30fHod8EnmCdOATNFVPiZ846sE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f1:17:84:93:be:be:35:d6:13:75:50:48:fd:41:a9:34:4c:
         6d:6c:b7:94:7d:93:75:f5:6e:12:6f:da:9d:b9:a1:9c:ac:be:
         00:70:e9:13:5a:a9:7d:06:b1:24:a5:50:9f:51:88:5c:7b:71:
         d8:97:a4:c2:e3:e2:eb:cd:a3:41:69:fa:fd:97:0d:45:fc:34:
         e7:c4:e5:5f:f6:37:a8:44:a9:13:52:ca:0f:b7:c8:a5:44:7b:
         67:5f:40:e9:89:aa:1a:76:fc:26:2e:98:31:f8:e6:bd:d0:10:
         aa:7b:c4:22:d0:20:a1:e4:1d:29:e0:92:da:85:01:4f:2a:fa:
         1a:41:41:c7:e6:84:86:c7:8f:62:30:fb:d3:30:01:a3:7f:01:
         1a:c3:9e:ca:66:1b:b3:1b:49:be:34:02:1e:c4:62:bd:b2:9e:
         3f:00:bb:b1:e0:63:76:c1:c7:81:24:b7:8e:0f:be:76:6c:43:
         7d:db:46:a1:cb:7a:e9:6f:4d:d0:b6:94:a1:6b:44:76:94:78:
         4c:f6:05:ce:cc:df:6f:36:72:cc:f7:fc:0e:4d:a6:a5:1c:01:
         6a:14:d2:e8:d0:b0:be:95:98:ff:e2:ff:0d:a3:3c:69:f4:e8:
         50:f7:32:a7:2a:f2:f5:cd:45:93:6d:d3:fc:8b:f4:33:8b:19:
         2e:6a:92:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:52 2025 by rpki-client