Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File:                     1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier:          +th3PYBfROKt7Krmlrv6m3yOb+0y0AVxbz929mW1KXE=
Subject key identifier:   62:88:82:17:9A:93:45:6C:F9:15:6E:75:F4:40:3F:E3:E0:57:80:B7
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer:       /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial:       0199D05AF0CBF02E68D5A13FBB3B5FA436D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number:          1376
Signing time:             Fri 10 Oct 2025 23:00:44 +0000
Manifest this update:     Fri 10 Oct 2025 23:00:44 +0000
Manifest next update:     Sat 11 Oct 2025 23:00:44 +0000
Files and hashes:         1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: SFF4DGHE637+54xYHBk+uiZQhD10pZT9U74c0N0cRSc=)
                          2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Oct 2025 17:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:d0:5a:f0:cb:f0:2e:68:d5:a1:3f:bb:3b:5f:a4:36:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
        Validity
            Not Before: Oct 10 23:00:44 2025 GMT
            Not After : Oct 11 23:00:44 2025 GMT
        Subject: CN=628882179a93456cf9156e75f4403fe3e05780b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:20:db:fc:e0:ee:f6:1a:b8:11:43:81:2e:
                    bd:77:f7:73:07:26:7f:f4:c0:82:87:20:73:9a:c1:
                    ed:1e:12:1b:15:62:94:73:16:14:bc:43:b4:1f:81:
                    3f:f3:f5:8d:0b:e6:85:04:dd:54:39:32:fe:06:d5:
                    d6:5f:83:12:d9:17:f2:c5:62:7e:be:24:50:de:74:
                    8c:e4:56:a3:7e:10:d8:ca:45:fd:27:5f:03:9f:d9:
                    39:06:90:73:6b:6d:9a:48:20:a0:a6:25:2c:0e:2b:
                    da:a9:1f:68:e4:05:e7:82:b9:1e:22:64:30:9e:c5:
                    b7:14:b7:e5:82:9b:84:68:df:45:cc:f3:fb:87:4a:
                    be:f7:40:1a:88:63:bd:54:b5:28:fb:2b:de:f2:52:
                    d5:4f:c5:58:9c:c6:8e:67:79:d4:d7:f5:2c:c3:00:
                    8f:5e:c6:41:14:36:f0:a1:cd:be:9d:c4:a5:21:4e:
                    9d:10:71:13:1d:98:33:a8:3d:c7:b3:f2:bb:c9:90:
                    5e:3c:bf:77:7e:71:1f:53:1a:ce:b7:2d:4d:9b:8c:
                    2d:d0:ce:9e:6d:db:3e:50:d1:cb:39:74:d1:24:af:
                    df:a4:4d:74:e9:10:8f:38:2d:88:f0:62:13:3c:2c:
                    69:c0:24:97:80:28:00:fc:b4:45:3d:9f:b8:dc:ff:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:88:82:17:9A:93:45:6C:F9:15:6E:75:F4:40:3F:E3:E0:57:80:B7
            X509v3 Authority Key Identifier:
                keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6b:17:26:9b:5d:ae:3b:c2:5c:87:da:7c:b5:2b:79:3b:0f:
         3c:8a:0b:89:39:d7:a7:32:c2:6a:2f:8e:ea:cb:82:9d:60:1b:
         ab:a3:6f:2d:4a:3c:ee:1a:19:10:aa:81:5c:80:8b:54:4b:e5:
         53:18:bd:7b:ff:a2:28:e1:02:6a:5c:da:99:c4:87:88:f5:20:
         2f:08:dc:67:eb:74:56:8e:5a:95:a0:e2:de:f7:e5:a5:d5:bf:
         1c:8c:aa:d8:ba:40:73:d3:6f:1c:85:5a:f8:2a:2a:a1:88:11:
         c3:c9:eb:f1:a9:48:c5:db:23:c2:4b:ac:da:eb:63:80:66:a8:
         f6:7e:84:06:9f:d7:7f:ac:24:4c:27:29:e2:73:8a:f9:56:58:
         62:e9:41:b7:56:bc:83:b1:df:d2:ae:6c:8f:24:fd:90:d7:4c:
         cb:55:5c:18:47:b7:ec:ad:ec:7f:ad:d5:a0:c5:56:d2:15:09:
         89:71:8b:8f:c1:3a:20:9e:d0:df:04:9d:fa:34:46:07:06:60:
         d1:cb:15:b2:03:d1:0d:41:13:e5:38:64:15:fa:b3:f6:60:57:
         3d:00:14:5f:96:6b:56:cf:2a:b5:05:90:51:63:60:21:6f:98:
         c5:99:8a:8d:3e:12:4c:90:e6:34:0b:1f:a3:0d:bf:d7:76:5f:
         f3:3d:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:38:40 2025 by rpki-client