Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File:                     kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier:          wpgL0CQB1c4ctyWy8PRzwAIqbxnOgs1DJF+oDYKUvh4=
Subject key identifier:   7F:30:DC:65:F8:77:91:4D:F4:21:21:4B:07:9D:06:0E:F8:F8:92:81
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer:       /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial:       019A52D14B51171DD9208A61351832E38405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number:          02EA
Signing time:             Wed 05 Nov 2025 07:00:39 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:39 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:39 +0000
Files and hashes:         1: 3e9xcybUyOgWOmdj2KT0VPc-IQ4.roa (hash: h6OpcAY2hGkLVmHjk3z97L6JK9iEJZ7vz8cORcaFzmM=)
                          2: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
                          3: EY-GYc_OgBsb1UIfjvb41Bwimi4.roa (hash: oR/jgqozL9leyl3DMc7LefEzsfH3jn7fBo/d5r37udY=)
                          4: WUcwdVxjGm9MT5dj0KuN5kY8fc0.roa (hash: Va0HPLXWY6KmecVQh7TSAW6BzjPwycNZWbVEYlVLjHk=)
                          5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: sx/bf2PVodu3CI3NhQ2I4npqhKxrvnLYtsK54wAPsZc=)
                          6: poqG69mPnb95YSUs8FdptFbAqUw.roa (hash: mqMSlTGBPTy+EqcBaFtlD8JVQdwDJPdpMrV37KzvxOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:4b:51:17:1d:d9:20:8a:61:35:18:32:e3:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
        Validity
            Not Before: Nov  5 07:00:39 2025 GMT
            Not After : Nov  6 07:00:39 2025 GMT
        Subject: CN=7f30dc65f877914df421214b079d060ef8f89281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:59:34:a6:50:7b:96:bf:10:a3:11:e7:72:f3:
                    4b:c1:48:aa:29:f4:a5:f6:67:d4:63:1c:c6:cb:fa:
                    aa:65:36:58:25:cd:22:57:35:be:7f:3a:39:2e:dc:
                    f9:18:8a:69:ed:b3:4f:2e:b0:24:a7:e0:8f:9c:dc:
                    14:e4:a7:88:bf:e6:71:90:c9:0a:46:28:e8:0c:32:
                    11:ab:62:b4:3f:ec:f2:6f:be:bd:1c:89:dd:27:f0:
                    5b:49:33:86:7c:a8:04:49:fe:d1:be:f6:37:40:9a:
                    47:87:69:56:b3:2b:98:20:6e:cf:a8:d9:63:74:6a:
                    64:55:08:6e:5b:aa:89:03:37:42:af:da:17:42:cb:
                    60:bb:d2:3c:38:0f:61:d3:35:3a:0b:fe:e8:c9:39:
                    aa:66:08:e0:91:91:84:8b:b8:71:47:a5:e3:a5:5d:
                    43:21:8e:75:19:55:37:70:53:68:5f:01:da:df:8c:
                    02:4f:ef:fb:81:4c:37:61:d5:0b:32:85:fd:d7:34:
                    d7:cb:fc:48:cb:14:b4:21:1a:d6:d6:f9:5f:22:ff:
                    a1:f1:cb:e4:28:71:4a:82:a9:89:5a:d3:c3:62:43:
                    ac:1c:a9:47:78:85:e9:4e:2c:16:eb:8b:5c:e6:b3:
                    0e:46:91:83:d7:fb:ab:c3:a6:03:fb:95:f9:29:27:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:30:DC:65:F8:77:91:4D:F4:21:21:4B:07:9D:06:0E:F8:F8:92:81
            X509v3 Authority Key Identifier:
                keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:09:af:04:38:2f:57:af:c4:b3:37:6f:8f:31:0c:5a:c7:63:
         f2:27:b3:94:20:a1:70:e5:e1:41:fd:2f:8f:ee:8e:bd:25:af:
         bf:0d:78:8a:fc:5e:63:aa:4c:9a:96:39:ff:2f:6f:59:c3:2b:
         8f:2f:13:ae:ff:f6:ee:e8:09:47:85:a8:62:70:c4:c6:0e:ff:
         bc:03:72:0f:ec:6c:ee:62:34:41:bf:05:a6:be:77:46:68:d5:
         6e:27:9c:a2:2a:ff:3d:67:63:83:e0:51:68:37:24:4a:7b:76:
         89:9a:d6:84:f3:fd:83:6c:2d:3a:41:8c:f0:d1:4d:f1:ce:a2:
         d9:42:23:96:dd:ce:ce:dc:84:32:ee:ba:cd:c3:80:49:85:66:
         d0:79:0f:d3:06:cd:fa:d2:85:d2:45:85:28:4a:ae:f3:6f:48:
         fd:db:c1:ea:10:b2:f6:32:55:92:71:aa:62:94:ba:a1:e4:48:
         f2:1c:ed:79:e7:98:71:92:e7:9d:f1:b8:45:9b:2d:37:19:c1:
         e7:31:d4:86:72:27:ef:74:1d:a9:96:17:14:86:7d:bd:4d:d5:
         89:18:e2:5b:52:91:30:6f:30:ca:4c:70:13:35:aa:48:b5:cd:
         1f:08:21:94:14:31:c9:45:01:e6:0d:2f:3a:f1:af:37:0b:76:
         0b:a5:36:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:56:01 2025 by rpki-client