Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          ZRxFRRLV7a6svLQC5bl3EpghTGMW46HO7PvhMWG6V8s=
Subject key identifier:   73:52:EF:B0:06:5A:2B:F0:4A:0C:0A:82:EC:8E:8F:7E:E1:12:BD:68
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019A50E3394179111931C50DC66B995BD98D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          140D
Signing time:             Tue 04 Nov 2025 22:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 22:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 22:00:59 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: YmrXMx6iAlQwlGA0IRsJyfh3rM6qFwrNT4j6EahSHso=)
                          2: XPLXJ92Us5J-qBm5E6NHAQ2543s.roa (hash: kmqfE6MOxnhqMb5JKyuuIwjp6MzPudhOpk4vKGjjd3A=)
                          3: eDdWpFT8mYYDchLMDIlwWEtOor8.roa (hash: 9232400o2UHwz3/J/neEUWtVx/abMVxJjSjV/TU/3qg=)
                          4: jwmg81-ORqOZPp9Rh2D6s4HVTYQ.roa (hash: Uluu1ohil2uH9NagTZ/BKMHEBskA/iElgGUpNpib8O4=)
                          5: qDSvupNvi7XpnOr0ygHu8NcBhCQ.roa (hash: OxOTgS6oyFab2hs22rHLXwwiyKXLOcnTFclx4LxK7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:39:41:79:11:19:31:c5:0d:c6:6b:99:5b:d9:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Nov  4 22:00:59 2025 GMT
            Not After : Nov  5 22:00:59 2025 GMT
        Subject: CN=7352efb0065a2bf04a0c0a82ec8e8f7ee112bd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:28:97:e9:08:f9:1f:36:dc:c8:b3:93:73:
                    b4:3a:6d:df:20:de:e5:8f:88:cb:a2:c9:dd:aa:73:
                    cb:9e:39:96:f8:b0:b8:c3:12:d7:2c:4b:d2:b6:91:
                    fb:a6:e6:ee:ad:0f:e2:49:38:e5:cb:71:06:c0:0f:
                    b4:00:dd:40:98:06:19:26:d0:94:ef:e4:aa:a1:9b:
                    37:cb:82:cb:e3:1e:46:c4:48:44:ad:8b:cc:6b:6f:
                    0d:e0:d6:63:09:8b:5c:73:de:9c:00:a1:90:3d:98:
                    35:16:c0:82:0d:49:e0:a0:1f:0b:91:c9:2d:b0:7a:
                    47:1f:f3:f6:b6:31:10:5f:63:a7:ec:43:94:67:90:
                    c2:96:d7:3a:b7:fd:be:d9:2b:7b:16:13:f0:39:45:
                    a6:c6:b0:16:57:50:91:dd:a9:df:da:2f:34:a8:0e:
                    d8:51:af:ea:02:a9:b8:c4:48:2f:53:be:60:d0:ad:
                    ca:56:99:36:8f:ce:fb:63:87:2f:f1:2b:a7:b1:93:
                    49:47:b0:fb:23:a4:c9:f9:df:f9:66:cf:24:a2:ca:
                    9e:ed:fa:02:ad:ed:e0:9a:75:d5:ec:69:ae:6e:14:
                    65:0d:e3:c7:ad:9b:e2:91:75:1e:0c:79:8b:3e:91:
                    4b:21:60:fb:bb:15:1e:08:e2:af:71:d2:2c:a2:d8:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:EF:B0:06:5A:2B:F0:4A:0C:0A:82:EC:8E:8F:7E:E1:12:BD:68
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:26:b4:0a:4a:84:1f:10:c2:41:a7:b6:f5:d3:89:f4:bf:
         8c:d7:9b:20:6b:6a:ed:0d:a8:98:f2:da:94:4c:79:00:f8:c5:
         f4:c6:09:4e:df:45:4a:0d:a0:40:c9:33:37:3b:6f:c8:7a:b1:
         0a:3f:6d:62:ad:e6:86:26:ff:7d:ea:e2:35:5e:bb:f9:8d:39:
         4d:8c:a1:65:06:7c:2a:46:54:c9:09:1a:f4:c0:23:3b:a1:4e:
         72:d8:b7:64:07:56:98:1f:0b:65:69:11:ad:e0:07:84:d0:65:
         07:f1:c2:92:fb:e6:e1:7f:18:ea:66:a9:75:7d:a3:e4:ed:d2:
         47:59:88:7a:d6:a9:04:a1:a0:59:1a:64:aa:78:d7:bc:01:40:
         35:2a:91:68:e2:c9:04:3f:9f:a4:19:79:01:84:1d:b4:1e:60:
         c4:60:7b:bd:d6:6a:a4:5f:c3:3a:1c:26:ea:7f:c3:29:c0:d5:
         9a:01:a5:76:dd:96:e1:b3:d3:e1:34:1d:a2:b5:6b:76:f0:43:
         6d:82:81:27:28:01:ad:6f:32:99:72:72:55:f8:da:3a:7d:3a:
         8f:f6:96:32:4d:32:5f:16:b0:d3:22:49:ec:58:2a:64:fb:03:
         09:b3:ed:fe:67:ed:e4:ec:47:23:3a:ec:66:e8:98:77:1c:f0:
         43:3a:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:12:26 2025 by rpki-client