Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          ty7WqsCfG/GvRuw1DMdeELXMxaEj6JSvAS3+B4XCYLE=
Subject key identifier:   A1:E7:14:38:0C:61:02:34:C6:98:2A:25:95:AD:FB:CB:60:C9:B7:08
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019A4F99646B12B004E7802E67220CB305D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          1156
Signing time:             Tue 04 Nov 2025 16:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:43 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: RRKU/nsnQANG4d/kE/yd5hUSubQ2nlPDY+gHvnBcAHw=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:64:6b:12:b0:04:e7:80:2e:67:22:0c:b3:05:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Nov  4 16:00:43 2025 GMT
            Not After : Nov  5 16:00:43 2025 GMT
        Subject: CN=a1e714380c610234c6982a2595adfbcb60c9b708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:b7:4c:00:15:ca:88:f1:11:ba:1c:89:8f:
                    de:d0:62:a0:2f:35:66:c3:5c:26:9b:0b:f0:34:8b:
                    18:d8:98:93:eb:65:ab:fe:81:cb:4c:71:e1:62:5f:
                    0a:29:70:59:bb:57:95:70:a4:c9:b9:5b:f3:c9:f8:
                    0a:8c:f3:69:5d:56:de:b1:b1:6d:99:b9:e4:57:7a:
                    d5:e8:d9:86:1c:c5:f5:4b:7b:d3:cf:52:d8:3f:f7:
                    e6:e4:db:aa:9d:36:ef:98:f0:af:50:05:1e:67:3c:
                    14:a1:48:60:b3:e5:c4:5e:08:65:37:9c:42:ba:06:
                    b9:05:a7:d5:8b:0e:d8:fc:e4:2a:fa:24:3d:4d:86:
                    77:e6:d2:2f:b9:5f:af:67:8c:ae:4d:af:dc:03:f6:
                    13:85:16:7b:50:95:9d:a5:54:9a:fc:d6:9e:77:0f:
                    6e:56:66:aa:7c:e1:d3:0b:8f:38:e5:ef:5b:41:c2:
                    7c:4d:03:59:75:a0:f7:5d:5c:ad:84:57:06:63:e3:
                    22:76:ca:8b:fc:f7:e1:70:7b:1c:0e:08:55:e6:cd:
                    93:14:19:32:44:9d:2e:cd:d5:66:26:0c:a2:68:ed:
                    77:d4:61:38:f5:44:0f:8e:51:ee:fa:8a:5e:67:cd:
                    9a:3d:e6:ca:5c:c7:17:f5:52:d1:e4:1a:d1:b9:67:
                    3d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E7:14:38:0C:61:02:34:C6:98:2A:25:95:AD:FB:CB:60:C9:B7:08
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:72:2e:07:61:44:c2:00:33:e0:23:b9:31:b6:7e:f4:da:70:
         db:78:6b:d0:fe:d4:3a:83:4f:43:6a:a7:72:8f:63:06:30:c1:
         88:42:77:dd:3d:78:f5:06:b3:03:41:91:1e:6a:d8:ce:14:2b:
         eb:6f:79:96:2e:a4:9f:8b:e4:cd:dc:90:03:b8:25:d8:41:ea:
         dc:57:7a:a3:c8:a2:0f:1e:22:5c:81:d2:e3:70:30:53:33:7a:
         10:f1:f3:89:6b:e5:86:f3:a6:df:87:81:8a:94:5b:08:52:b1:
         89:8b:c5:a3:89:37:da:1e:7b:3f:c7:24:4e:24:22:88:2d:bb:
         c6:a7:e4:df:ce:4a:d1:48:53:93:3a:27:43:50:96:d1:a9:e6:
         76:b1:64:cd:99:71:a0:58:b9:0c:69:48:26:6b:a2:5b:8f:68:
         90:73:60:ff:e2:c4:66:d2:19:54:b8:db:4e:c6:70:65:5c:ab:
         a3:2b:08:be:86:a8:b4:89:77:7a:c4:a5:c5:10:fa:16:58:50:
         cf:7d:57:65:ff:f1:b3:e8:62:45:3a:31:da:7c:c9:f3:74:14:
         b1:d5:6d:c6:6a:d1:53:eb:b8:60:4a:ae:78:52:b5:b6:bb:3e:
         28:cc:96:52:ca:0f:82:11:78:46:e1:f1:25:40:e5:fe:fe:9c:
         5a:b4:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:25 2025 by rpki-client