Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          kEoNjab19NZ4Xs1F80ieVAbnkC10TzYZF2JR+Z5973Y=
Subject key identifier:   71:90:47:FD:62:26:7C:CC:32:73:58:AE:AD:7D:E9:0B:D5:9A:69:19
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       019A232E3320673A3A1DE163266E828A0106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          163C
Signing time:             Mon 27 Oct 2025 01:00:21 +0000
Manifest this update:     Mon 27 Oct 2025 01:00:21 +0000
Manifest next update:     Tue 28 Oct 2025 01:00:21 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: 1jpiagh70w2fTNR8gtLc06JhxPhQgh2FLew8Rq//9qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:2e:33:20:67:3a:3a:1d:e1:63:26:6e:82:8a:01:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Oct 27 01:00:21 2025 GMT
            Not After : Oct 28 01:00:21 2025 GMT
        Subject: CN=719047fd62267ccc327358aead7de90bd59a6919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:d3:bd:30:2f:fc:11:43:1b:00:dd:24:10:
                    80:b6:97:9c:e8:16:78:8a:a7:75:fd:8c:8e:52:87:
                    c3:3a:66:c9:94:52:52:30:3a:25:29:9f:c7:d6:2a:
                    9a:13:79:49:a6:1b:ad:0a:a5:3b:b9:f4:d5:88:79:
                    1b:11:a9:f6:c3:46:d2:44:63:ac:f6:10:ae:aa:ef:
                    aa:17:d9:67:60:f7:49:32:5c:44:07:d0:ff:38:85:
                    a4:ee:0d:12:c7:fe:c2:0d:f8:d9:6e:05:4c:2c:b1:
                    d2:41:46:03:24:4b:21:04:2c:7c:f4:71:41:01:d3:
                    ca:30:f6:f2:0e:7e:24:03:c9:d9:10:1a:01:b1:3b:
                    a9:6d:50:bf:d9:05:d1:38:c6:2e:18:8f:59:62:5a:
                    20:bd:e1:0a:6f:97:3e:cf:18:cb:91:d9:3f:1f:a7:
                    50:92:85:dc:22:2a:57:71:be:66:d7:2f:ff:f1:56:
                    74:1b:f1:1a:19:ed:62:49:50:0f:f9:d8:19:c7:95:
                    66:5c:5a:d6:42:aa:27:d0:6a:c0:5e:e6:0a:13:33:
                    7f:84:14:1f:b3:72:0f:c6:69:41:55:17:4e:8a:fe:
                    f2:dc:49:22:c4:56:68:28:37:20:22:a8:e7:a1:57:
                    ad:1f:6e:2f:6c:ab:21:40:3e:82:81:09:e6:cc:9c:
                    85:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:47:FD:62:26:7C:CC:32:73:58:AE:AD:7D:E9:0B:D5:9A:69:19
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:46:47:5d:d3:13:fe:8e:1a:21:f6:3b:82:b9:54:bf:bc:98:
         d4:83:23:ff:89:21:33:21:fb:72:11:b0:7e:57:0c:92:83:fe:
         58:8b:b3:49:fb:94:26:3a:71:9b:03:04:1e:ef:b9:22:e0:dc:
         96:ba:05:89:ad:fa:3b:41:72:b2:32:c0:bc:c2:e5:8d:b9:88:
         8f:3d:1b:ae:37:cd:7e:d3:db:f3:50:7a:46:b8:26:bf:f8:66:
         81:93:9a:95:1b:e5:3d:74:89:48:ef:94:19:f7:37:2f:e1:30:
         3b:e9:18:c7:4a:9d:b8:c4:6d:0f:20:96:f7:ee:db:5e:7b:87:
         71:7b:38:94:59:83:d7:94:f5:2f:55:75:04:06:87:71:4b:26:
         db:f1:59:9b:85:c3:a8:b5:94:84:8d:63:86:3b:f5:f2:72:ea:
         bc:a0:d6:2b:f7:c4:11:e4:9f:ff:ce:b4:78:5b:a8:01:a4:15:
         85:b3:96:a5:f6:73:d4:38:8a:40:2a:87:7c:4d:bc:d9:ef:10:
         cc:15:4d:65:03:9b:c5:4f:d7:cc:8b:50:e0:5d:70:82:69:5a:
         e2:64:77:67:ad:24:f7:16:d1:08:79:9d:bd:3a:9a:0b:a4:a4:
         a7:50:9d:46:12:94:1f:a1:ff:1a:6b:43:e5:59:66:a1:76:cb:
         92:94:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:54:39 2025 by rpki-client