Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
File:                     iwVEhe5ixvGTlhPLogZp7vRQT3k.mft (raw, json)
Hash identifier:          ZAHuOaop/vDXycN63i47uMXo2L3rfhK+EdqdlksK1T8=
Subject key identifier:   1B:5C:77:91:1E:6B:5F:B0:5B:BD:15:39:92:AD:22:61:92:8C:D5:24
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Certificate issuer:       /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial:       019A21097CE0CA0A9194D7509A9F4CC097EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
Manifest number:          0CE6
Signing time:             Sun 26 Oct 2025 15:01:01 +0000
Manifest this update:     Sun 26 Oct 2025 15:01:01 +0000
Manifest next update:     Mon 27 Oct 2025 15:01:01 +0000
Files and hashes:         1: FmWPQsDQv1I31vsCB-XoPwOttAE.roa (hash: xjF9H58/BASj6CKq3v5pVooMgpKIb+h+UMw0XGNXQo8=)
                          2: W0D9WIXmr4DG_xEj-xUZT82-dxQ.roa (hash: fBvWuzB9wp05SoO5x+Vb/EneDFqD/kJHT0KgvrAsF24=)
                          3: aheTt6_pS0K22xA67glREELod8A.roa (hash: qWC2pzWM7a75jc5rNLOSS10p2/VCBqYrjSpxRU7D9zI=)
                          4: g_SxF-_E_VpwVrwNdmKsnzbOYaM.roa (hash: wSo0WU3KC/Wo2i+eQ7vlG4IlKtTmfnJLRouHYXZqnO4=)
                          5: iwVEhe5ixvGTlhPLogZp7vRQT3k.crl (hash: 19WMWoC3H1qYmLBMsxd1N86nAb1oauzGSYg5EyXsYYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:09:7c:e0:ca:0a:91:94:d7:50:9a:9f:4c:c0:97:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
        Validity
            Not Before: Oct 26 15:01:01 2025 GMT
            Not After : Oct 27 15:01:01 2025 GMT
        Subject: CN=1b5c77911e6b5fb05bbd153992ad2261928cd524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:63:8f:8d:78:8a:9e:6a:78:11:4c:39:26:
                    a0:43:ac:0a:74:b3:27:88:5a:e8:3e:0b:69:da:41:
                    41:77:a9:75:0b:41:09:2c:5a:5c:f2:91:4b:ee:ef:
                    64:d0:70:5b:6d:90:27:c5:26:bb:db:b6:8d:34:58:
                    af:31:0e:88:18:72:ac:6d:42:97:cc:bc:92:bd:9f:
                    27:79:86:c3:8b:33:90:50:c6:81:6d:31:c1:ff:c6:
                    f6:1c:e6:d9:1b:eb:9f:b3:c6:8f:bf:56:c0:73:d9:
                    fe:02:f5:8e:ba:3d:95:5f:35:0b:1c:51:c7:8d:f8:
                    b9:d5:41:37:ab:ef:42:8b:32:55:8a:68:a1:c8:a6:
                    50:3a:10:b9:99:b6:da:f3:ad:b1:45:9a:69:60:da:
                    8d:a9:0e:84:21:16:b8:ba:e7:2f:a1:e4:6d:be:ad:
                    82:3d:61:8c:e5:67:0e:49:6e:15:25:77:b2:60:53:
                    7f:6c:a6:ab:35:75:78:aa:f4:b5:c3:ea:a2:30:6c:
                    a2:a3:7b:dc:88:cf:ac:8f:41:36:4a:0a:14:ee:20:
                    7f:6a:28:35:a9:71:a5:7e:cc:e3:14:87:be:b9:2e:
                    cd:a3:94:24:25:ef:4f:40:9d:94:8e:bc:63:01:a2:
                    76:d5:13:ca:d8:7c:af:22:45:8a:82:a1:e9:44:68:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5C:77:91:1E:6B:5F:B0:5B:BD:15:39:92:AD:22:61:92:8C:D5:24
            X509v3 Authority Key Identifier:
                keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e8:9e:40:4d:35:73:b7:4f:e9:0e:47:a4:1f:03:69:3b:77:
         ee:75:30:e8:b3:fa:23:20:95:9e:db:74:0c:7c:19:af:b8:06:
         55:7f:06:7c:f2:57:e7:53:2e:4d:f2:6d:75:73:c3:35:c3:4c:
         cb:a4:2a:27:48:74:93:d1:98:6e:11:b9:89:93:e2:0f:e9:f9:
         43:fd:f4:57:50:4d:7a:56:1f:80:5e:36:51:23:9c:e3:ab:6e:
         a3:44:ac:49:dc:7c:a2:73:da:94:dc:2f:f2:2e:98:e4:8d:91:
         57:06:91:08:95:38:b9:81:80:b2:a7:77:f3:53:6e:6d:e8:ca:
         28:fe:fa:4a:fe:18:c3:29:20:85:81:f8:99:96:0f:e5:62:c9:
         d7:69:ff:bc:78:ff:62:22:e5:f4:ae:32:c7:0d:2f:cf:6f:b4:
         67:bb:f2:f4:8a:16:57:ff:e3:50:c2:77:9e:c4:ee:ed:84:43:
         10:56:a7:1b:59:db:d2:b4:de:5b:d7:6a:f8:66:86:f5:f9:8a:
         7f:5a:7f:96:df:38:39:ad:98:db:b0:cf:ea:3f:eb:61:d4:58:
         d7:a5:9f:7c:16:37:9f:5e:06:e4:62:47:9f:e1:e0:3c:6a:8d:
         02:6d:87:67:4c:39:04:96:20:e4:96:f1:1e:6d:b3:5b:a1:f0:
         e9:07:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:44:45 2025 by rpki-client