Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
File:                     aXejEW7MnXpCnxNlFhPorRSf8yQ.mft (raw, json)
Hash identifier:          oIWyXYilLIZz7nfOWNhhBL10VuMDvJigpHycrHv2KX0=
Subject key identifier:   AD:F2:97:EA:3E:21:86:9C:13:8D:AF:AE:7C:75:4D:98:CE:EB:9A:56
Authority key identifier: 69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24
Certificate issuer:       /CN=6977a3116ecc9d7a429f13651613e8ad149ff324
Certificate serial:       019A4D3D1D21FB14C54C8BEB39F801C0DAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
Manifest number:          035D
Signing time:             Tue 04 Nov 2025 05:00:42 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:42 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:42 +0000
Files and hashes:         1: 29C_AMtyAdy5xz9nR5IWFhFiIiY.roa (hash: FBVen/Q/sLzdQJw+zYeV1QYNWCu1/gvix8MLvUf426M=)
                          2: SOOUfYeqqZHuoh2Gony2KLPyjUg.roa (hash: 3qFCFMkMfnTPWsf6Qhr45sO5P402Ny67zVPmMEC99q8=)
                          3: aXejEW7MnXpCnxNlFhPorRSf8yQ.crl (hash: KpGz6INcEXd6iLosXhig1rbNejXQo/tiJExqyGhqK7U=)
                          4: ub1kPDAxllR0WFP6iXd1W5UcG_k.roa (hash: 8WBQDzQQjZxzhaXE+nFlYVRYm6wxvzqPDNkDDz5P6H0=)
                          5: y6CjvWQerUp0Mv77KMhz5spMEWA.roa (hash: BRh0sxRN6LJqe+S+C32b8EMbRfEqAVHqJDsn1Jnu7HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:1d:21:fb:14:c5:4c:8b:eb:39:f8:01:c0:da:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6977a3116ecc9d7a429f13651613e8ad149ff324
        Validity
            Not Before: Nov  4 05:00:42 2025 GMT
            Not After : Nov  5 05:00:42 2025 GMT
        Subject: CN=adf297ea3e21869c138dafae7c754d98ceeb9a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:63:89:2a:10:17:ab:f9:74:63:2f:81:b0:70:
                    4f:78:4a:58:b4:f8:e5:3f:9f:36:cd:ca:9c:bd:83:
                    87:cd:c6:14:a1:80:20:d2:8f:95:9e:1b:80:9d:dd:
                    1f:3c:c1:85:a1:c8:06:1a:b3:fc:b7:36:a6:1a:73:
                    b1:f8:21:57:90:c4:1d:90:a4:8e:cb:52:b3:1b:bc:
                    01:fc:94:02:e3:3a:23:a8:5e:73:36:29:de:11:64:
                    89:f3:88:cf:d9:ee:74:6c:bb:67:93:a6:54:1f:9d:
                    61:55:90:9e:ec:ce:12:5f:86:63:87:01:c7:f9:b0:
                    30:fa:67:ee:fb:f4:00:ce:6c:34:be:b5:17:8d:8e:
                    81:8b:a4:a8:fe:4b:ea:cb:64:ea:b1:b8:dc:26:fa:
                    9d:aa:68:b3:97:0d:43:27:30:95:b2:cc:25:51:58:
                    9f:b2:d8:b4:ae:bf:ec:41:be:75:d3:97:cf:b0:2a:
                    cd:37:19:3c:6a:97:44:84:73:3b:7d:3c:34:d6:e6:
                    23:26:da:49:00:56:4f:02:dd:c3:b4:cd:7b:2d:22:
                    ae:49:bf:61:88:b3:61:d2:b9:30:ea:27:f7:04:99:
                    79:46:a4:4c:43:2c:0a:3c:3d:e2:a5:88:b7:dc:46:
                    8c:aa:c2:f5:ee:93:26:34:da:ee:05:f1:e2:99:09:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:97:EA:3E:21:86:9C:13:8D:AF:AE:7C:75:4D:98:CE:EB:9A:56
            X509v3 Authority Key Identifier:
                keyid:69:77:A3:11:6E:CC:9D:7A:42:9F:13:65:16:13:E8:AD:14:9F:F3:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXejEW7MnXpCnxNlFhPorRSf8yQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c6691-adac-41e5-8ce9-f4b7b398c634/1/aXejEW7MnXpCnxNlFhPorRSf8yQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:0d:56:a2:69:5c:47:ed:20:ec:30:c5:0a:90:78:02:40:
         33:33:56:b7:66:21:e4:5f:f8:ac:da:45:a8:e2:28:24:d2:0c:
         ce:56:a4:dd:a5:93:61:47:40:ef:e0:1c:05:eb:ea:e8:d9:74:
         dc:f3:72:c4:ed:44:24:2d:4b:17:57:ae:9e:3e:4a:b2:20:de:
         1e:cf:2c:de:1c:8c:08:2a:14:97:0e:4c:ec:d1:ea:52:3d:41:
         4d:74:5c:18:35:cd:23:11:3d:ac:94:d7:0a:9e:13:79:ff:4d:
         a8:59:6c:f6:09:b4:4e:ef:b8:8c:b1:5d:d0:93:03:9e:3e:5d:
         9c:4b:e5:dd:fb:b1:67:a2:80:8b:22:0a:f4:54:96:7b:fd:5a:
         b0:b1:27:82:82:9f:b8:55:7d:31:a6:e9:46:fa:5f:6e:98:a4:
         f7:80:d3:5f:eb:47:93:c3:ed:b1:bd:ef:a8:8c:f8:0e:99:05:
         08:bb:f2:98:68:61:15:56:14:d0:cc:2c:ac:00:44:d3:b8:26:
         b2:8c:a6:4b:21:b9:21:dd:97:c9:3e:31:b9:e1:0f:5a:a9:a9:
         c0:c2:50:73:e1:1d:92:fc:d1:aa:bf:ec:a0:65:5b:8e:f2:a4:
         da:a7:90:ec:9e:5b:d7:97:70:73:38:11:02:0e:14:d6:8d:a5:
         4f:93:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:47 2025 by rpki-client