Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          Ugg99gNKl8f35oVQt+7/RU6XfrSAFbl0DvACAn0tnls=
Subject key identifier:   75:F9:CC:D2:77:6C:D8:6B:33:4C:27:54:6B:F8:A6:DF:B9:3E:0D:C2
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       019A22C07631D92F07FA5D10D035C99F7088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          16F7
Signing time:             Sun 26 Oct 2025 23:00:29 +0000
Manifest this update:     Sun 26 Oct 2025 23:00:29 +0000
Manifest next update:     Mon 27 Oct 2025 23:00:29 +0000
Files and hashes:         1: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: VYy2mrA/m8Ix5kSAkedPszGfRNy9tpVMSANL3YShNew=)
                          2: mKXM1sCXbX4WM_fKlx6FQU4VLjU.roa (hash: bq/vxuiDoDVFgx9I1292qiHAVq4peufKuf4SJNis0Io=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:c0:76:31:d9:2f:07:fa:5d:10:d0:35:c9:9f:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: Oct 26 23:00:29 2025 GMT
            Not After : Oct 27 23:00:29 2025 GMT
        Subject: CN=75f9ccd2776cd86b334c27546bf8a6dfb93e0dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:4c:32:b5:f4:70:e6:e7:6d:d3:fb:a5:4d:
                    b8:cd:7b:40:2f:c8:5f:98:8f:cf:3e:dd:d1:14:9a:
                    10:8b:1a:28:e2:30:e0:c0:e7:28:f5:36:bb:1a:fd:
                    81:10:35:00:ab:14:28:e4:85:92:04:5d:96:92:5b:
                    df:22:54:d8:11:b6:00:8a:00:2a:9f:d9:ee:8d:36:
                    a8:e5:8f:71:42:a0:1e:a6:1c:3b:92:ac:c1:d9:cf:
                    85:68:57:ba:91:b6:22:ed:60:83:0d:ae:e0:3a:f9:
                    11:44:c7:8f:89:07:04:13:62:fb:5c:7f:32:c6:7a:
                    6a:75:fd:86:e4:fb:b2:60:72:5a:6b:5f:6d:ce:d8:
                    7f:29:9f:4d:8e:c2:00:ee:9a:12:32:26:f7:c1:ca:
                    9d:4c:66:e5:62:18:5a:d0:f1:2f:74:0c:fb:80:ce:
                    2f:74:84:79:37:de:f8:c0:b0:85:0c:71:45:d1:f4:
                    21:39:18:e5:f3:25:08:ec:db:03:8f:8b:0b:28:88:
                    03:99:54:c2:e9:f0:29:14:17:dc:e9:17:ea:40:62:
                    ba:6f:2e:79:2d:72:ba:14:15:02:ba:df:69:52:0c:
                    5d:1d:83:f4:0e:f1:7f:40:d4:ad:14:6c:9c:fe:45:
                    4f:f6:2f:49:5a:d3:a6:56:57:94:8e:2a:af:71:2d:
                    fc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F9:CC:D2:77:6C:D8:6B:33:4C:27:54:6B:F8:A6:DF:B9:3E:0D:C2
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:e9:f3:dc:6c:96:d2:cd:12:9b:85:9e:4a:e3:6a:8c:c4:
         d2:14:5e:7e:44:b3:77:bf:d3:56:1b:ef:a5:41:ab:ab:82:98:
         87:20:34:4c:6f:e4:52:83:24:c0:4d:48:8c:d7:6b:b5:f6:02:
         1f:a6:91:4c:b9:de:ae:ca:81:94:7a:eb:89:0c:48:25:c6:83:
         d6:1f:74:ad:0c:1c:4c:13:ed:ce:86:53:3c:1f:54:88:35:3d:
         bb:9c:8b:6d:05:82:b3:61:b7:61:2c:98:35:c1:d8:9f:e7:53:
         3a:d1:23:15:ea:d6:10:30:c7:a3:27:40:ef:24:47:d0:4f:cd:
         c6:6b:9c:8f:dc:fc:0c:56:4f:1c:e4:f1:39:62:0c:3d:e6:be:
         ad:51:65:3d:af:c9:0d:bc:89:3a:6e:b6:7d:1c:25:9f:ab:3a:
         6d:39:9f:3e:e1:11:42:fd:2b:0b:f2:59:2b:65:11:b7:0a:45:
         f5:74:2a:49:92:55:cb:74:df:fc:03:b9:b9:f2:c3:99:01:55:
         51:c6:38:fd:90:1b:79:f4:e8:c0:5b:6e:bd:00:48:c1:77:e5:
         c6:8f:d7:12:b0:c4:29:6b:f3:5e:c0:58:c1:93:f8:58:e9:cc:
         de:c8:21:c2:11:08:7f:38:e5:bb:02:e8:57:20:75:a8:89:74:
         de:03:76:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:19:02 2025 by rpki-client