Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          eRN1FPZnxf1GzIlAHVSh0zGmSlg51WtIrvFB0O6KYkA=
Subject key identifier:   ED:E0:3C:73:3C:FC:01:1F:3B:4B:9D:53:7A:75:CC:46:04:F6:D3:0D
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019A1A2B0203D55C7739133909B10F728F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          1700
Signing time:             Sat 25 Oct 2025 07:00:17 +0000
Manifest this update:     Sat 25 Oct 2025 07:00:17 +0000
Manifest next update:     Sun 26 Oct 2025 07:00:17 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: DgUjFZxwREeNBQtqvqARXkZxJHyAQUSt+8PG3LLvOTQ=)
                          2: 3mOoENhQssYcE0_jNIiNCd1IJhM.roa (hash: NxDjxUHodJorGdwgiCzGcQ9QT0JyGcub9gsrImCrSi0=)
                          3: Ap3gL9Yp7uumyoe2yxrwjvNZDxk.roa (hash: wudrm+gdegSTau2jZcPXyXW7DUxfSyZ4WVu/YKmSW1A=)
                          4: ELP7t5lJtmtgM2_pSHY2borhcWQ.roa (hash: anmJF+ajsRAns7lhsAxkAlsYncDfzcyUe/BQwnLm440=)
                          5: OT6YHDk_lhZsoGwe6NFFGa5Sz3g.roa (hash: 3UK4RMJ18E6BJ3Pt3k1N4ljIIeVHfvFurvUMotxJ7ow=)
                          6: xPlV_dPEF5A6IiGBWHJlqdqTyug.roa (hash: L4B5IhPuaoOP7uH4/YjON7e/k30j+W6z6mE0lKhs4Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:2b:02:03:d5:5c:77:39:13:39:09:b1:0f:72:8f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Oct 25 07:00:17 2025 GMT
            Not After : Oct 26 07:00:17 2025 GMT
        Subject: CN=ede03c733cfc011f3b4b9d537a75cc4604f6d30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:82:52:ed:4d:e7:f9:82:29:c4:89:2f:50:
                    d5:a8:6a:c4:0b:46:98:ff:83:e6:f8:9b:b6:23:b6:
                    13:55:e3:35:cb:03:3e:30:9e:90:98:92:de:e6:99:
                    5c:dc:56:7a:20:ad:4c:61:a7:ac:d2:6e:e4:05:67:
                    8a:56:62:d1:d6:c7:d7:3a:5a:fd:65:18:25:35:2d:
                    f0:a0:08:94:ba:c6:e7:2d:4e:71:da:af:d2:49:10:
                    57:92:be:72:16:e6:a0:fe:d6:32:7c:9a:96:5e:0e:
                    b9:c6:21:39:57:79:24:eb:bd:c8:51:70:ea:a2:2f:
                    a3:34:62:9c:30:fa:bc:9c:87:69:fd:95:ef:61:84:
                    7a:13:29:37:22:ea:0f:5d:5d:2a:4b:6b:ed:22:f2:
                    5d:8b:38:25:7c:2e:ad:8b:79:e8:ea:e2:4f:b4:f2:
                    14:23:0a:9d:18:b9:b4:bb:44:27:b7:08:ec:bb:62:
                    7b:54:b9:6e:8f:be:2e:ae:ec:ad:d3:5c:de:1e:11:
                    02:0e:96:df:4f:ae:dc:82:15:2e:50:97:fc:6b:6e:
                    85:92:1f:78:af:a1:37:35:19:46:b0:44:71:ed:fd:
                    ff:88:00:30:59:dc:69:97:78:87:44:71:88:eb:39:
                    ba:08:fa:c9:84:90:9c:e0:9d:ed:77:9a:00:27:a0:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E0:3C:73:3C:FC:01:1F:3B:4B:9D:53:7A:75:CC:46:04:F6:D3:0D
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:59:78:39:f2:38:34:b9:18:13:53:0d:15:97:cf:cf:c0:a7:
         14:8b:56:5f:11:3b:bd:6c:1a:67:a2:82:86:ec:a1:14:d1:79:
         26:62:04:67:00:df:12:cc:d5:66:b6:1f:cf:6f:4c:af:dc:3d:
         56:47:31:be:f6:b1:d1:fe:0c:60:51:f9:d1:ce:ad:2a:1e:e9:
         1f:32:fc:4d:03:a6:03:04:18:7d:aa:d9:7e:c5:5b:73:a5:91:
         91:72:c5:fe:86:59:a5:0f:7f:96:fc:07:11:17:1b:1f:2d:ca:
         7e:47:f1:12:35:68:31:ac:7a:fc:05:ef:9c:3a:dd:e0:c4:43:
         63:99:c7:5b:d2:55:e4:fa:02:43:a1:2b:59:b3:8e:f6:e4:2e:
         51:c6:a6:50:e9:2f:27:e6:56:4c:aa:3a:d0:a7:ad:8a:3f:c4:
         b1:7e:bb:54:c5:91:63:57:66:32:a7:2e:f2:c7:67:4b:c0:c5:
         ae:29:3f:5f:42:46:85:40:40:df:20:73:2d:dc:ae:c0:44:8f:
         34:ed:6a:7b:28:cc:a8:92:9c:d2:da:ca:d1:c6:ac:f6:19:f8:
         a4:1f:9e:5d:dc:2f:78:fb:e4:06:8a:f3:75:8b:b5:9e:e7:8b:
         6a:57:b7:b0:81:78:76:65:d2:be:97:78:d0:a4:52:d2:35:2d:
         74:ef:4d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:28:29 2025 by rpki-client