Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
File:                     1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json)
Hash identifier:          vwKWIFA0nVzFl7vGNAm1qEOTu3Rxabeq+Pz1uC3+to4=
Subject key identifier:   0C:81:26:17:1C:82:44:61:BB:33:49:F0:28:DB:18:99:8E:04:BF:C7
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Certificate issuer:       /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial:       019A0D4B44F1007FCC6292F856BF4E26C91F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
Manifest number:          1409
Signing time:             Wed 22 Oct 2025 19:00:27 +0000
Manifest this update:     Wed 22 Oct 2025 19:00:27 +0000
Manifest next update:     Thu 23 Oct 2025 19:00:27 +0000
Files and hashes:         1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: GdYFHayn3/LP6KHqpKLcQa4f8vgL4cOswtIbI4F/KZY=)
                          2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=)
                          3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=)
                          4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=)
                          5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=)
                          6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=)
                          7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=)
                          8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=)
                          9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0d:4b:44:f1:00:7f:cc:62:92:f8:56:bf:4e:26:c9:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
        Validity
            Not Before: Oct 22 19:00:27 2025 GMT
            Not After : Oct 23 19:00:27 2025 GMT
        Subject: CN=0c8126171c824461bb3349f028db18998e04bfc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:d1:b3:05:08:b0:c3:dd:02:a8:9c:55:a2:
                    c0:4a:8b:0a:d5:4d:d4:d1:ca:d5:6c:3e:ca:98:4e:
                    aa:84:55:3a:e4:84:0d:bb:ca:7a:0d:2d:c8:0b:c2:
                    48:83:98:bc:d4:77:cb:6b:bf:db:0f:d1:58:78:c9:
                    74:af:7b:6f:68:28:b4:fa:96:fd:bd:19:c7:90:97:
                    98:2a:c2:0f:fa:71:8a:35:60:3c:28:20:1d:1c:76:
                    a1:3b:52:3b:23:f7:a1:15:af:01:de:96:d4:0e:00:
                    2e:8d:74:cb:0d:d1:9b:51:3e:41:15:e2:8c:02:77:
                    92:85:69:6a:7c:f8:77:4a:24:2a:aa:c9:e1:68:cb:
                    b7:f4:6c:24:58:ab:95:25:fc:95:4e:40:cb:f0:e3:
                    a9:0d:55:db:b0:d1:b4:e8:b1:18:c9:98:bf:b9:4d:
                    13:b6:ec:40:b9:78:eb:5e:70:9b:7d:36:a0:79:bc:
                    42:d0:8d:7a:f9:73:b8:1f:02:33:59:c0:23:a8:54:
                    e0:6d:43:af:fc:93:0a:f7:88:e7:7e:81:9b:d8:86:
                    d6:81:5e:5f:0a:71:65:bc:3e:27:69:b2:39:dd:20:
                    8b:35:78:76:71:70:c5:24:94:60:e1:ab:c5:ea:79:
                    cb:93:cc:7e:ca:6f:63:3d:ca:ca:ae:98:68:1f:d1:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:81:26:17:1C:82:44:61:BB:33:49:F0:28:DB:18:99:8E:04:BF:C7
            X509v3 Authority Key Identifier:
                keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:31:fb:d3:0a:55:69:cd:f4:b1:b5:a0:49:2c:82:1a:09:e4:
         ba:08:1c:56:4e:5b:7d:c9:96:16:29:62:61:99:32:d7:c1:f7:
         f9:65:07:07:e4:6b:41:16:3d:48:a7:8c:0e:e2:fc:df:04:d7:
         17:52:31:7f:22:cb:34:7c:08:40:dd:c7:b7:5b:59:7f:33:e2:
         70:37:ed:84:c7:7b:0f:25:9b:1b:11:66:b9:8f:4d:ca:78:4e:
         bf:20:16:60:c3:26:5e:71:c7:e5:d9:cc:6d:75:08:26:d0:35:
         43:e5:82:f9:52:59:8c:7d:73:02:5e:74:0e:23:de:64:72:1a:
         41:90:b2:6a:45:19:bc:f7:23:ec:a0:ec:b7:27:03:89:c3:80:
         9d:35:02:6f:2d:21:cb:fc:72:e5:f9:3b:43:ff:86:55:4a:52:
         b8:02:90:b3:a9:14:57:f0:a5:5d:cc:2e:69:fa:9b:75:c6:12:
         4c:50:b9:e1:18:9f:6b:ec:dd:df:7f:68:c4:77:5a:3a:40:b6:
         45:ba:10:10:38:2e:28:39:90:21:eb:3a:13:9a:08:b8:90:b4:
         69:8a:8c:5c:41:b2:1e:40:57:c7:94:96:92:98:bc:33:e8:34:
         e6:53:ed:75:fa:a5:02:78:12:41:1e:42:ce:66:b1:cb:b4:c4:
         08:64:3f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:25:46 2025 by rpki-client