Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          b3AoSQev0SS95L34rAb1l06vzepzEAXjkjaIpYHMuv4=
Subject key identifier:   A8:C9:B2:BE:AF:B7:56:61:46:C6:56:0C:A0:C9:51:5F:52:A4:F4:5F
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       019A4E18A7E374637D05CC0541A48AB4AC23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1713
Signing time:             Tue 04 Nov 2025 09:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 09:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 09:00:29 +0000
Files and hashes:         1: 7SHUyFna48Gf23nUCUcnIJUN0XE.roa (hash: Ec+uLYhIFx++PbARlrI21OedFGiTD/IgiH7xQ2ltHrQ=)
                          2: kbF58umfOAdBtIYcGYzLP1M0THQ.roa (hash: yOTBG23MZMkfBQCZJEYn1qCc0xRSjBYNZHJvnVk7GVU=)
                          3: l-8L9wVjtXMNnDKiGH1zdKvOuYc.roa (hash: nBkBluTNUREBdIijySnHRU5IOfDXkAtF0rCyhddkb6A=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: oke/HdV9EwdBd7Azee+bA1nbBerVRvpFQPHK+s8GX0Y=)
                          5: vgIq0oA7dsz4YveZyNyrfiJkguc.roa (hash: Sy+M0tdHwOYb8xMH8vV2+d4iB36APQaABzmr+xlZblA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:18:a7:e3:74:63:7d:05:cc:05:41:a4:8a:b4:ac:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Nov  4 09:00:29 2025 GMT
            Not After : Nov  5 09:00:29 2025 GMT
        Subject: CN=a8c9b2beafb7566146c6560ca0c9515f52a4f45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:f4:ad:77:ae:15:75:80:0d:3c:4e:f1:8c:
                    10:1a:9a:7f:ce:40:92:02:d0:c7:bd:d0:79:52:22:
                    3b:c4:1f:6b:24:44:22:e2:ea:37:9f:62:d2:b5:18:
                    69:b7:b5:71:6e:ab:1e:9a:b2:be:1a:2b:3a:70:f1:
                    01:46:af:d8:f9:06:c3:f0:52:d0:e6:75:f3:7e:a2:
                    44:a2:b4:1a:6a:b2:06:e5:6a:90:48:fa:ab:c2:e9:
                    ef:89:1c:0c:05:34:d2:aa:cc:70:98:33:6b:dd:8c:
                    27:bc:d3:08:1b:cc:01:cc:af:69:6d:aa:08:d4:e2:
                    b4:19:d8:f6:f1:28:ec:85:cc:f2:26:f7:dd:cc:65:
                    5f:14:0c:78:07:16:12:70:70:eb:5e:e5:93:84:09:
                    44:92:8f:a4:3f:cd:d9:e5:b8:2f:71:e5:99:f2:19:
                    29:b2:70:a3:fd:71:6d:ac:a0:d2:91:86:6b:ad:83:
                    95:93:87:c5:ad:6e:7f:2f:f9:4e:64:11:74:13:9a:
                    4e:2b:12:e6:f8:3b:25:29:ee:c5:e2:33:a8:3a:05:
                    c2:00:49:17:15:15:3e:3c:3d:f6:30:92:86:5d:c3:
                    35:18:ee:bd:43:eb:93:ec:0e:0f:71:52:cc:d4:44:
                    f9:0e:4b:15:c3:1b:a6:79:9d:38:8b:38:53:d1:42:
                    fc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:C9:B2:BE:AF:B7:56:61:46:C6:56:0C:A0:C9:51:5F:52:A4:F4:5F
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:21:a4:38:65:1d:52:4c:1f:6c:b9:e5:51:2b:a9:69:8e:cd:
         ef:c7:07:9c:70:23:32:c8:23:6f:97:ef:f3:87:51:8a:e0:bd:
         76:e7:d5:ab:f1:62:88:15:be:07:94:09:dc:26:e1:8a:52:39:
         42:1d:3a:39:0d:96:ef:5e:9a:65:b4:50:09:9f:a0:ef:86:45:
         dd:35:41:b4:90:19:ea:5a:a5:84:32:c9:ae:bd:44:9e:2d:f9:
         4f:a5:8a:f1:96:75:2b:77:06:36:48:b2:f9:4c:ff:87:60:d2:
         b8:d6:2c:f3:eb:3e:b7:97:28:c0:76:94:48:53:49:37:43:0f:
         29:11:b9:53:30:ec:a4:f3:56:da:54:50:ba:4f:1c:b2:bf:4d:
         8b:e9:e9:cb:e2:6d:fb:36:af:76:01:fd:2f:5c:51:06:26:81:
         fa:af:e6:b6:33:a9:53:46:61:cf:fb:3a:3e:a6:b5:fc:93:3b:
         99:47:b2:01:84:ef:03:a3:d6:5c:f4:f9:e8:ea:24:2c:8d:79:
         21:88:ad:80:84:6e:bf:e6:06:ec:38:9d:b4:a5:d5:73:08:1e:
         85:31:85:06:45:e3:29:f0:3e:e6:d1:f6:f6:a7:ae:c5:f2:e7:
         ca:d7:4d:5f:5a:69:be:04:e5:5b:5d:24:ee:f8:fc:4c:df:c1:
         07:93:31:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:49:45 2025 by rpki-client