Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
File:                     SAw7k_8qNPv6WuglVvZwNAy11ck.mft (raw, json)
Hash identifier:          cHUTQd4F/L+uFqVwdsguMn8XHUz1FpJ7SR52UDX3P9g=
Subject key identifier:   FA:D5:14:D3:89:D5:17:6C:16:B9:D2:82:43:42:2A:B9:73:8E:BA:A3
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Certificate issuer:       /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial:       019A64D81F4AC25261D27B662BBBF7221956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
Manifest number:          1718
Signing time:             Sat 08 Nov 2025 19:01:16 +0000
Manifest this update:     Sat 08 Nov 2025 19:01:16 +0000
Manifest next update:     Sun 09 Nov 2025 19:01:16 +0000
Files and hashes:         1: M6pYVSPeRii26Fe6-xA2oF6TOhY.roa (hash: ALWsaRUrnNv1Osi/17oum/JvXg9TackTfLVpB/IG6ok=)
                          2: SAw7k_8qNPv6WuglVvZwNAy11ck.crl (hash: 5oa5P1Ht1aS5asjFmcHn3jBFrbqf6nT9WxFo1kZAMcM=)
                          3: o_-CPWekkGbizNj3OifTY4NJDPc.roa (hash: uwNEErvUsdFhNjQ3+JpAmIUn/dDzO0Gs7xJ0LsO1aD4=)
                          4: xR8JRniMXIcnxz5B1H7wwKMwL8E.roa (hash: U8VTiajHorcJU61emonuHN7kXOWFA3+lZIhrr1YC8IY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Nov 2025 18:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:64:d8:1f:4a:c2:52:61:d2:7b:66:2b:bb:f7:22:19:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
        Validity
            Not Before: Nov  8 19:01:16 2025 GMT
            Not After : Nov  9 19:01:16 2025 GMT
        Subject: CN=fad514d389d5176c16b9d28243422ab9738ebaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:1d:a0:70:d5:e4:18:b1:a0:51:63:b6:26:
                    7a:a9:83:8a:bd:9d:9c:e6:3e:fa:c8:ca:e1:f3:10:
                    de:de:27:2c:14:f4:2d:4a:da:49:6b:09:0c:e7:c3:
                    27:c6:0e:b2:c0:69:1c:ac:48:45:82:e9:40:cf:23:
                    2d:7e:90:27:17:41:24:f5:4a:f5:7a:fa:d1:61:89:
                    66:6e:88:35:84:40:a9:4b:0d:fb:63:e4:e1:a0:85:
                    43:3b:a6:5c:b9:2f:7f:ea:bb:c8:24:6b:90:96:31:
                    8f:c2:ba:9e:ff:17:e4:6a:cf:7b:89:0a:a7:87:ac:
                    f8:c7:9c:c1:82:71:d6:d5:10:5e:0f:f0:37:0a:2d:
                    bc:8a:22:20:51:ab:e5:81:c5:0c:5c:64:14:d5:d6:
                    c9:5d:f1:11:8b:8f:b4:d0:41:7f:cd:06:8b:d4:83:
                    33:fe:96:bf:0b:c2:c2:43:40:da:43:24:14:f6:be:
                    9f:83:f1:60:83:49:26:eb:3b:9b:69:4f:6b:08:3b:
                    f8:94:c2:f4:25:21:35:a2:e3:a1:12:59:d5:d6:66:
                    cc:2f:3a:08:5e:54:b2:f0:ab:03:01:1a:03:c9:fd:
                    00:aa:36:9e:92:7d:ae:66:58:28:83:3c:0d:6b:7f:
                    5e:3e:18:df:08:94:e0:c2:e9:15:f0:27:68:43:0f:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:14:D3:89:D5:17:6C:16:B9:D2:82:43:42:2A:B9:73:8E:BA:A3
            X509v3 Authority Key Identifier:
                keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:30:ad:ba:73:3b:4d:b2:0d:fc:65:a3:30:85:73:ef:1a:5e:
         4d:3a:b1:42:bb:f9:64:8d:e9:89:71:fd:d6:92:d5:76:e3:4d:
         52:68:2f:58:94:27:60:71:f1:b3:cb:ed:18:29:f2:7a:98:88:
         4b:38:cf:ae:47:ca:d3:19:11:9f:ce:24:b5:15:7e:0b:64:85:
         d1:6b:23:8f:fd:6e:da:92:93:67:25:08:54:06:60:80:53:7e:
         b1:c4:87:fa:af:36:91:24:9e:9e:06:9b:26:62:7b:05:f7:b1:
         61:fd:0c:28:a6:b0:3b:08:16:b6:8d:84:88:7e:f5:d4:2e:76:
         3b:51:1b:7d:b0:43:44:2c:12:91:18:0c:20:fc:33:30:50:0f:
         08:7d:14:00:88:4e:81:70:13:99:fb:06:b3:dc:c6:19:35:80:
         2f:59:85:da:e1:9b:d7:ee:ba:b0:29:f1:e2:b0:b3:6b:5a:60:
         b5:b2:2e:25:c1:f2:38:85:43:55:cf:71:fa:de:a8:64:6f:78:
         17:88:09:ab:53:f0:59:10:8d:10:06:15:20:83:be:ac:1f:d4:
         4e:9e:4e:a0:6b:14:7c:9b:65:df:16:32:65:df:e9:3f:c9:0f:
         0b:46:72:29:e6:c2:9b:70:f2:3d:45:fa:84:98:db:21:cb:da:
         35:41:49:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 00:23:08 2025 by rpki-client