Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
File:                     mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft (raw, json)
Hash identifier:          gUIiaMaoonKgtECr0Fw79Yew/g9i1/xupZq784dTWF4=
Subject key identifier:   09:62:33:F5:7E:27:20:2C:3F:01:77:9D:8D:AA:3F:0E:C7:31:E1:6F
Authority key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Certificate issuer:       /CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Certificate serial:       019A4F2AEB6BD02E2EF649671B524FABF543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
Manifest number:          0370
Signing time:             Tue 04 Nov 2025 14:00:04 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:04 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:04 +0000
Files and hashes:         1: Z3bDGesWID5pZs4-6WcKVMsx_OY.roa (hash: 3SSpuO+HaOURPZjiBSW700LPUzxRvcEB66saiLR1wYQ=)
                          2: bJ_iwVujMcklNyoPPnV6NVD5zm0.roa (hash: 7Mm1XlFD1wQ7r5xMGnLxxurh8Au27N7TujgdM8NcOpg=)
                          3: jq_1ppFWb5g9HX-Mw-WYljosNes.roa (hash: lwyW5RQhcptTES0umbfYTj6Bk0XX6clHFX008ryFUIs=)
                          4: mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl (hash: Wbr/C15M6IUVbibpaatndrEmmyHoXCQYX+2BsU/eucA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2a:eb:6b:d0:2e:2e:f6:49:67:1b:52:4f:ab:f5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
        Validity
            Not Before: Nov  4 14:00:04 2025 GMT
            Not After : Nov  5 14:00:04 2025 GMT
        Subject: CN=096233f57e27202c3f01779d8daa3f0ec731e16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:76:66:57:fc:e8:e9:8e:d1:22:f2:ea:ca:
                    51:24:66:71:36:ea:bf:bb:a6:92:19:d0:b5:df:82:
                    dd:12:f2:77:ee:7b:db:b0:5d:90:5c:e3:1c:7e:96:
                    49:23:f1:8e:cd:f5:6f:77:c5:d0:78:73:a1:f5:ab:
                    de:98:ca:e7:d6:ae:d3:e5:3f:a6:b1:f2:90:36:b1:
                    2e:a6:41:7f:e5:c6:b4:63:f2:d6:a3:0b:d5:59:6a:
                    57:fa:5f:f2:cb:27:70:4b:48:07:a4:48:9f:12:6c:
                    a1:37:af:96:68:94:d9:f6:c5:57:a0:76:96:b6:a8:
                    d7:32:85:5d:9d:17:29:20:e6:e9:33:d6:07:c9:ea:
                    6f:f8:b3:0d:fd:6b:50:30:63:1a:a8:b9:e7:1f:d3:
                    e7:96:c6:99:ff:c8:3a:2a:c6:ee:ca:10:8b:f3:0e:
                    f5:b9:2a:2f:75:0c:78:b7:fd:73:1e:f1:bc:f2:78:
                    40:ee:21:32:d2:e7:c0:c9:5c:c5:d1:1a:c5:79:83:
                    ac:88:80:0c:27:1a:aa:a3:44:b5:a9:a1:eb:be:4a:
                    0e:12:77:1a:c3:0f:60:e2:15:1f:af:f7:13:72:3d:
                    19:53:2b:9c:f0:bd:ac:bb:b9:92:f8:7b:ea:8e:2c:
                    6d:16:33:d7:4b:3f:9b:7c:81:d4:23:65:13:09:7e:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:62:33:F5:7E:27:20:2C:3F:01:77:9D:8D:AA:3F:0E:C7:31:E1:6F
            X509v3 Authority Key Identifier:
                keyid:99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e5:48:51:8f:4a:e4:91:ec:6c:08:8f:9b:71:d9:11:f7:39:
         d8:29:7f:b4:4b:4f:3b:f1:a5:9e:c4:d0:98:af:de:91:de:12:
         9d:8f:80:cf:e2:1c:b2:8d:0f:b0:51:bd:ba:c5:cd:f4:5b:6b:
         6c:a1:aa:76:90:dc:ea:7c:92:b3:aa:b3:eb:da:26:fa:fc:0d:
         28:60:d2:14:fb:ce:5a:23:79:62:cd:32:ef:78:40:4e:cd:ca:
         39:13:7e:7f:a6:e0:61:35:c5:92:d0:b7:b5:41:da:70:ef:9e:
         f2:dc:0c:c8:cc:e8:ea:cc:d6:66:a6:7a:8e:76:cd:48:8a:40:
         e3:dd:93:e6:e9:60:a3:f3:70:b9:62:31:48:8e:fc:a8:7e:60:
         b9:94:09:01:b4:26:39:19:e2:92:43:3b:22:86:55:9f:73:33:
         7a:11:49:d1:73:e6:ec:88:63:c8:b1:3b:62:cf:b2:c1:9f:3c:
         96:62:ef:b0:28:9a:f3:50:1b:e2:b0:17:9d:dc:1e:3b:70:12:
         a3:a0:f0:38:de:5b:49:b5:dc:2e:f6:e5:00:5a:09:39:45:8b:
         63:e8:70:17:ca:2d:34:a0:98:e7:a1:1b:b9:4c:7a:12:1f:0f:
         75:d2:4c:78:ca:5a:76:f9:6e:f5:85:cf:98:bf:f9:8b:97:02:
         6c:00:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:31:38 2025 by rpki-client