Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File:                     KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier:          pN42gs10KN7VzRuJd0koCC+3etJubsSP0EDjZNWZLGw=
Subject key identifier:   39:F5:51:26:EC:F1:37:F2:EB:69:DF:A5:26:9E:13:30:57:69:91:75
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer:       /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial:       019A00A3352DAD17E2BDA7B6276C83A20807
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number:          1469
Signing time:             Mon 20 Oct 2025 08:01:27 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:27 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:27 +0000
Files and hashes:         1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
                          2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: UVhz9RG2A/LA5y2BSkti0vUAP43eLVs3O3J7ZVCB5+4=)
                          3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:35:2d:ad:17:e2:bd:a7:b6:27:6c:83:a2:08:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
        Validity
            Not Before: Oct 20 08:01:27 2025 GMT
            Not After : Oct 21 08:01:27 2025 GMT
        Subject: CN=39f55126ecf137f2eb69dfa5269e133057699175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d7:03:37:2a:e5:27:c8:17:e1:be:b4:01:fb:
                    94:7a:be:3b:45:4a:05:7c:93:e8:99:38:0b:67:ac:
                    bd:fd:f1:4b:18:54:70:46:c9:47:af:81:b8:40:99:
                    40:46:7d:66:82:ce:7f:a1:d8:c4:18:ce:d7:b5:d0:
                    fe:c9:60:a9:53:b1:81:bd:bd:84:d3:ef:b5:c2:dc:
                    1d:d7:a7:fa:71:59:b8:09:d3:df:d4:e3:08:6a:4d:
                    79:90:04:6f:05:e4:b1:96:b4:b0:e1:fb:2b:94:92:
                    8e:9b:c1:d7:59:32:ad:fb:62:08:bd:ba:3e:21:e8:
                    79:5b:bc:bd:55:06:7c:a0:45:87:93:02:37:1f:d2:
                    4d:92:71:0c:c5:9b:22:2a:9a:87:aa:5d:d8:9a:56:
                    24:d4:cd:ea:ba:04:f6:5a:62:de:9e:14:b0:0e:60:
                    28:74:00:7f:7d:2d:cc:e9:40:95:a9:ff:0e:9e:ca:
                    44:15:21:5c:23:fb:20:d4:e1:d3:64:4a:5a:2b:2b:
                    af:5f:77:e8:80:03:49:02:72:2c:d9:a2:ef:a9:01:
                    b7:b0:e2:d1:46:65:0d:f5:44:35:dc:f0:69:c1:52:
                    a2:79:b8:c2:92:3a:00:8f:dc:f7:7e:23:0c:7c:32:
                    45:8e:ec:21:ec:82:87:d8:4d:48:84:ca:53:6e:14:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F5:51:26:EC:F1:37:F2:EB:69:DF:A5:26:9E:13:30:57:69:91:75
            X509v3 Authority Key Identifier:
                keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:0c:33:b4:23:48:9a:44:00:2b:43:75:22:46:2a:97:bf:
         21:48:08:4d:2c:80:d5:10:78:67:de:dc:db:e1:31:7f:1b:7a:
         c1:17:a5:1a:07:c2:8c:de:62:64:c8:b8:90:81:c3:28:10:c9:
         0b:b3:b6:6a:d7:06:de:47:be:f7:53:0e:14:c5:92:b5:65:eb:
         ff:6d:f6:16:2a:ca:ce:28:95:a6:a2:2a:dd:ae:23:1f:5a:81:
         29:e1:d5:86:f8:ee:2f:7a:e2:04:5c:91:96:0e:26:8c:02:02:
         2c:e9:62:ad:62:52:2b:76:56:25:de:10:f5:49:cf:82:e4:3f:
         3f:3a:3f:06:58:fc:66:ca:9e:c6:0a:56:7a:bc:62:44:7b:a3:
         5b:bb:b0:a9:20:81:f0:cf:d6:e2:9e:ae:f0:e0:4d:33:eb:05:
         0a:2b:76:5c:cc:ed:28:b7:b3:6c:76:07:9b:a7:2a:55:d9:1f:
         7e:93:a0:50:b6:80:1e:69:f7:03:5a:3d:ae:95:d1:5e:bf:ff:
         08:e8:90:f5:c9:45:c3:d4:8d:3b:0d:8c:e9:c7:08:7e:0b:a0:
         a6:fd:0a:79:54:53:32:d6:73:fa:d6:07:cd:93:71:3c:3e:06:
         ce:3f:62:fe:7d:66:1c:24:43:d6:c8:8f:52:f4:c8:db:8d:b6:
         90:18:10:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:56:19 2025 by rpki-client