Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          9IxHiJKxo5h6MGeVdiwtuceOBFR9Hut79Dc7LMDnAjs=
Subject key identifier:   C8:19:B3:02:80:E1:27:A4:68:FB:4C:77:7F:65:24:F5:D8:E8:B1:64
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019A214049D998E552C4947E41381D704E44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          0674
Signing time:             Sun 26 Oct 2025 16:00:52 +0000
Manifest this update:     Sun 26 Oct 2025 16:00:52 +0000
Manifest next update:     Mon 27 Oct 2025 16:00:52 +0000
Files and hashes:         1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
                          2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: ep5ECl6NGk+3BHgv5tvfsbpWQtbEUbcRuZkG1elLV1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:40:49:d9:98:e5:52:c4:94:7e:41:38:1d:70:4e:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Oct 26 16:00:52 2025 GMT
            Not After : Oct 27 16:00:52 2025 GMT
        Subject: CN=c819b30280e127a468fb4c777f6524f5d8e8b164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:12:9a:2e:06:73:10:9a:97:43:93:a0:8a:32:
                    1d:9d:36:71:d0:18:30:16:57:fc:06:ab:73:58:90:
                    50:8b:50:f3:3f:82:21:ab:a0:94:e0:91:c1:32:fa:
                    e8:9e:6f:63:16:e7:c8:82:b1:88:44:6d:4a:63:ad:
                    ba:19:29:9a:1f:94:ea:ae:81:60:60:5a:54:31:23:
                    9d:be:49:e1:bc:8b:71:ee:0c:07:d6:92:08:a2:b4:
                    51:cf:ad:ec:c8:bb:bb:19:30:be:85:f6:37:cb:88:
                    d9:ba:66:d7:67:d5:e1:46:51:99:42:93:35:e1:d8:
                    68:d0:af:a1:75:27:04:63:c1:7c:dc:d0:45:83:b8:
                    b9:db:ed:b0:32:cf:d2:84:30:60:a4:d9:6c:e3:d8:
                    22:45:f3:f2:b9:d5:86:23:35:c0:72:b8:e3:a2:0f:
                    a0:04:ff:45:b5:f7:2d:03:23:70:b3:99:47:9f:1f:
                    d3:19:e0:8b:18:1c:04:21:a2:be:20:6d:82:e8:9a:
                    b4:44:df:e0:1a:c7:b3:1b:af:ff:b6:2f:9f:46:9a:
                    12:9a:00:f5:60:bc:24:57:35:4a:9c:12:5e:6f:55:
                    55:9a:69:f5:34:13:41:bd:db:4a:87:a2:a0:51:2d:
                    78:fe:53:34:08:e9:3d:17:e3:35:66:b4:84:36:a4:
                    a9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:19:B3:02:80:E1:27:A4:68:FB:4C:77:7F:65:24:F5:D8:E8:B1:64
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5b:d6:5b:2f:7b:5f:29:91:d9:b1:dc:a4:5a:e1:9e:70:62:
         83:4c:6d:a2:25:05:26:c9:b9:03:55:f8:90:a0:21:c4:0c:82:
         0a:b8:82:38:63:da:37:c9:b0:20:3f:5f:5c:13:2c:ee:f6:18:
         dd:0f:a1:6d:cc:04:8c:c7:ee:aa:e2:30:56:75:cf:38:7c:b9:
         db:d6:e8:6f:27:50:cf:24:4c:33:c0:41:58:d5:ef:cd:08:ab:
         2f:bc:12:6c:fe:24:51:af:54:27:50:df:5b:f9:4b:e1:e1:c6:
         44:a6:89:94:fd:ea:37:62:5c:bc:d2:f6:26:1e:47:bb:54:dc:
         12:0d:e4:dc:e0:de:08:3b:9e:47:ce:f8:c9:3a:76:92:fb:6a:
         1f:bd:13:5f:04:94:27:ac:18:09:f0:12:21:d5:9e:39:dd:87:
         35:7f:11:80:c3:78:86:11:45:5a:98:36:1a:e9:61:76:a1:ca:
         67:b8:62:73:36:d2:20:7c:ef:bf:ff:50:b7:c7:80:ca:50:2a:
         dc:10:51:82:e8:67:24:e7:0d:6d:f0:5a:77:5e:d5:c5:4e:39:
         9a:2c:6c:77:f3:e2:e4:34:be:8c:c3:c7:10:a9:40:33:28:7a:
         b7:a4:93:70:d3:77:8b:c3:63:21:1c:96:d3:f8:f2:ea:d0:48:
         a7:e6:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:21:56 2025 by rpki-client