Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
File:                     1H2KqhDtz10IFAORU5l7-_TTW6k.mft (raw, json)
Hash identifier:          AAy34yNjxInJmwGcJrxSel+YPMWR6gDlbnSe/MhsseY=
Subject key identifier:   9B:07:2D:0C:63:79:42:E3:BA:DE:3A:F9:3F:87:59:6A:AE:71:DA:FC
Authority key identifier: D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9
Certificate issuer:       /CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
Certificate serial:       019A0DB93556454A994A0CA69132225E64B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
Manifest number:          0300
Signing time:             Wed 22 Oct 2025 21:00:32 +0000
Manifest this update:     Wed 22 Oct 2025 21:00:32 +0000
Manifest next update:     Thu 23 Oct 2025 21:00:32 +0000
Files and hashes:         1: 1H2KqhDtz10IFAORU5l7-_TTW6k.crl (hash: hamLCMpbaWi2W7f4SP23IE7qnoKAMr+XDwKBBUSD/hs=)
                          2: oL3YqmLZNQTklrYCVBkqoxnVPVE.roa (hash: vNB411x6DGxlKgUop3xuDcnHI37Ap9OjrZ9OIS8r31M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0d:b9:35:56:45:4a:99:4a:0c:a6:91:32:22:5e:64:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d47d8aaa10edcf5d0814039153997bfbf4d35ba9
        Validity
            Not Before: Oct 22 21:00:32 2025 GMT
            Not After : Oct 23 21:00:32 2025 GMT
        Subject: CN=9b072d0c637942e3bade3af93f87596aae71dafc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:76:57:b6:1f:80:d6:9d:fc:fd:7f:31:75:
                    8a:12:f6:0f:be:26:c2:4d:a8:d5:fc:e5:bb:ee:90:
                    71:26:df:6b:74:9d:66:5f:4a:86:92:a0:e2:25:39:
                    da:34:22:8d:78:75:49:43:ca:f1:af:9e:58:44:1f:
                    cb:4c:7d:7c:de:8a:18:3c:0a:b9:cf:a0:e0:69:d3:
                    25:b8:50:7b:ee:11:f2:cb:98:93:ab:62:20:cf:de:
                    44:f5:c3:45:eb:a7:a3:51:19:e9:a4:87:da:b1:b5:
                    0a:cc:9d:f9:c8:58:a7:00:bf:33:c7:34:5e:42:33:
                    e2:6e:b1:21:0b:a1:57:9c:2f:bb:3f:39:ea:9d:52:
                    65:aa:e4:19:7b:70:bb:de:be:41:4b:c8:8f:95:02:
                    93:7c:01:48:76:d8:33:dd:59:92:4c:e5:3e:c2:7d:
                    7c:37:a9:2a:ae:a5:69:d8:da:c4:ad:4c:b3:38:18:
                    3e:29:44:d2:aa:a2:84:23:b4:c5:76:4a:ba:85:01:
                    e2:23:17:ec:b9:b2:6c:93:bf:7d:fe:fc:89:e3:0b:
                    3d:ee:6d:bf:d7:39:44:3d:3d:d2:da:85:32:95:f2:
                    3b:18:0d:8f:e3:9b:cd:d6:99:f2:71:44:ca:c4:8f:
                    91:3f:5b:3e:6c:a3:2b:ab:e2:df:da:ef:6d:e5:4e:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:07:2D:0C:63:79:42:E3:BA:DE:3A:F9:3F:87:59:6A:AE:71:DA:FC
            X509v3 Authority Key Identifier:
                keyid:D4:7D:8A:AA:10:ED:CF:5D:08:14:03:91:53:99:7B:FB:F4:D3:5B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1H2KqhDtz10IFAORU5l7-_TTW6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/1H2KqhDtz10IFAORU5l7-_TTW6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:f3:04:ee:4c:e5:3b:65:93:a4:c8:7e:9d:82:e4:80:6c:
         c0:97:76:e0:18:68:db:d7:7a:1d:b4:4d:65:63:d2:94:c8:6d:
         76:3c:78:08:b8:66:95:ff:e6:6c:2d:94:ca:38:28:c5:d8:d7:
         c8:c8:48:e4:da:07:14:28:87:01:a4:96:e8:3c:18:fb:88:ef:
         6d:da:78:55:6b:b3:77:b2:e2:cc:6a:aa:17:a0:01:5d:a5:0a:
         0d:53:59:c9:eb:df:dd:13:f9:98:f6:a6:41:cb:c7:e8:f7:76:
         e9:2c:f2:7f:3a:67:39:59:7e:c8:54:09:91:1e:bd:3c:86:4a:
         f2:9a:d1:ae:fe:b5:f9:7b:0a:ce:d8:3e:5d:25:0f:5c:64:9f:
         e9:55:9f:d0:ab:81:ef:b1:2c:d8:28:64:e4:25:de:60:b7:0d:
         a1:47:b9:44:4e:f8:e4:a9:bd:90:d7:78:0c:f5:3c:35:16:8c:
         26:81:a9:0a:25:03:e0:03:16:49:83:19:85:43:f1:cf:34:ee:
         06:aa:56:c5:f6:9f:f3:88:fd:82:5c:f8:af:de:d2:64:9c:3e:
         c0:de:7b:22:24:91:56:0f:48:ac:dc:0e:da:80:06:af:cd:5f:
         e2:34:2e:05:6b:e3:7f:df:34:ba:f5:2a:fe:9a:9f:6c:50:e7:
         dd:17:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 22:56:49 2025 by rpki-client