Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          fi1P7ruWrkUI66XghaikWopLhOh94vWlq+f+nyH5G0g=
Subject key identifier:   19:55:66:AA:07:3E:61:3B:1C:38:BF:D1:36:58:1F:B3:17:19:2E:8C
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019A4DE221E222356D43B528C6C00498856A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          066C
Signing time:             Tue 04 Nov 2025 08:00:56 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:56 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:56 +0000
Files and hashes:         1: 32XJfOuajaXKWFXToBNlGxtkW6Q.roa (hash: dKLGEpCpRymK3fL0g+5BlFVGvIZeLfMhwXmSO0Ljm9k=)
                          2: JNkggvQx74p1btfiu-ncCk_cuvY.roa (hash: 3PlXzxEghXwRv2XVfxrZveNHTFUHK5O1XcLko9Bh3BM=)
                          3: o6055-b-qPzQTA0F_ST-9FEVVmE.roa (hash: g8Jxoy+mBwRsosu9yvKdAVg8QP3DZnBB7YPvuPjdGU4=)
                          4: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: nHV69yieNAP29qV/h8EOjg5J0dqo4lfcffrb9XAS0G4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:21:e2:22:35:6d:43:b5:28:c6:c0:04:98:85:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Nov  4 08:00:56 2025 GMT
            Not After : Nov  5 08:00:56 2025 GMT
        Subject: CN=195566aa073e613b1c38bfd136581fb317192e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8e:a2:70:0f:66:f5:aa:fb:d8:3b:13:49:52:
                    d9:f0:e4:bd:99:67:4b:93:33:54:50:db:18:12:3f:
                    04:0b:c9:4d:8d:36:02:a2:4d:c8:4e:fd:9e:49:05:
                    b1:63:06:7b:13:11:fe:8c:29:30:02:1a:3e:bc:00:
                    78:09:41:99:a8:5c:a1:23:d8:54:cd:ad:0d:7c:7b:
                    1b:75:e2:bd:c6:c4:93:e8:00:8f:ad:28:2d:09:5c:
                    c8:c2:ac:9a:57:41:e7:f6:73:06:96:1b:ac:3a:81:
                    2e:98:5f:38:6e:65:fb:31:94:e6:e1:1a:a6:6a:c3:
                    7d:a2:c2:15:60:be:62:f5:e6:d7:c8:e4:4f:aa:ed:
                    e1:5e:15:cd:eb:2c:8d:24:33:d5:19:a3:3f:bc:51:
                    96:86:fa:80:c1:09:2a:4b:83:e6:31:8a:26:ca:67:
                    ec:39:51:7a:b9:a3:ed:83:3f:8b:c4:41:d6:1c:4f:
                    85:14:b3:b1:04:1d:da:ff:c7:fd:29:57:16:cf:54:
                    8d:74:5f:01:68:27:17:f9:aa:38:2e:44:8b:de:a8:
                    e5:1e:0a:52:f5:43:0c:1f:2e:26:e2:2f:79:bf:68:
                    53:7f:81:ae:e8:ab:b0:2d:8e:53:32:15:96:f2:2e:
                    bc:50:bd:00:f0:3a:f9:5f:2d:90:4b:09:4c:ea:65:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:55:66:AA:07:3E:61:3B:1C:38:BF:D1:36:58:1F:B3:17:19:2E:8C
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:04:b2:93:2a:28:16:a4:9a:d8:e3:fd:15:ec:e0:3f:0e:43:
         55:6a:fb:9f:f8:86:38:da:d3:c1:75:a3:7b:7c:1a:ba:b8:57:
         96:05:65:fc:43:7d:88:95:34:1d:10:61:a6:6e:7b:7d:24:06:
         79:5f:6f:4f:f1:01:63:41:1d:c7:11:0c:da:c0:0f:81:44:fd:
         15:ce:c9:6b:68:c1:50:75:97:57:cf:aa:18:b3:b3:c0:53:16:
         a0:db:22:f5:cd:6c:d2:2f:e3:f5:c6:ca:29:d2:ad:cf:2f:58:
         fd:b7:0b:d3:5d:37:6f:ac:5d:05:a3:fa:ea:52:9e:38:00:02:
         26:4c:66:e3:3e:a7:42:df:9b:46:79:ee:fe:35:d3:71:e8:a7:
         05:be:18:78:96:0c:67:a3:fd:75:86:79:a5:ef:f0:c3:7b:89:
         a4:f5:00:5e:18:bd:c3:85:c2:4b:3f:ed:99:9e:de:b6:30:9f:
         df:58:f9:bb:ef:13:14:42:ec:eb:6f:f5:f3:31:7b:70:1d:de:
         21:83:17:40:5a:57:83:61:01:4d:f8:28:2c:5f:2c:61:96:0a:
         1a:24:3a:8c:de:01:39:96:61:b6:c5:3b:b2:36:11:07:1a:1b:
         b6:68:2c:fd:d5:c8:1d:a2:34:83:18:4e:0c:d3:f6:e7:10:32:
         0c:07:c3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:35 2025 by rpki-client