Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
File:                     l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft (raw, json)
Hash identifier:          s97qcf6EinBIQGB2carI+P4mrrTiMEKw73LzSenls4Q=
Subject key identifier:   A2:01:03:34:67:24:20:E7:0E:64:17:0A:EE:BB:0C:CA:85:1B:4D:D9
Authority key identifier: 97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3
Certificate issuer:       /CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
Certificate serial:       019A1E3F0E6FC59702CF204730C5D552B740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
Manifest number:          0641
Signing time:             Sun 26 Oct 2025 02:00:40 +0000
Manifest this update:     Sun 26 Oct 2025 02:00:40 +0000
Manifest next update:     Mon 27 Oct 2025 02:00:40 +0000
Files and hashes:         1: 5ODJwRdnQa13oezz5TNTCEyKtws.roa (hash: zQdrgcuE5ymqxo+lmUXMohaBUr8MekfjfO1peWkuPsk=)
                          2: 8PEWFaitqsUZ6z1cmHuAHUZb0BQ.roa (hash: eQE9VX3LaUVY9e8uyeXfzxRtJvjbxOh0QvDdkJtI1qM=)
                          3: l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl (hash: tt+cTjcHAZdYmu4pXcd2BhsH+4wZGLVTcCtZOAhrYC8=)
                          4: ookYOsl62US6mMi6GMg2HcD_y2A.roa (hash: NEIgALewSP5rnsPbfbCrZ+39OwZPrksdjPilVku316k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 20:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:3f:0e:6f:c5:97:02:cf:20:47:30:c5:d5:52:b7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97530cab3bae5b529fabeb9979bd685f7b2bdab3
        Validity
            Not Before: Oct 26 02:00:40 2025 GMT
            Not After : Oct 27 02:00:40 2025 GMT
        Subject: CN=a2010334672420e70e64170aeebb0cca851b4dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7b:7c:8c:58:50:ad:15:0b:24:c5:98:0a:38:
                    c4:93:59:96:f7:98:35:38:85:38:19:d9:b6:50:92:
                    35:7a:6e:ff:1a:13:c9:69:df:b3:b7:41:90:67:e7:
                    b1:f1:68:a5:0d:94:45:84:45:d1:bf:c8:16:ef:cb:
                    68:3c:b7:fe:b0:69:d7:b8:8a:e9:d3:be:ec:78:b0:
                    9d:7d:89:a2:c9:ff:ef:1b:5f:c3:71:fd:52:86:c1:
                    da:56:05:0a:07:b2:cf:66:66:3e:63:05:ba:41:ae:
                    2f:44:ca:29:0c:5c:6b:b5:75:14:9d:7d:e9:36:6b:
                    11:4f:e7:e4:3b:10:c3:42:a7:40:c7:08:47:cf:60:
                    c6:b1:e1:7d:3d:fe:8c:44:fa:3e:35:6f:2d:ff:ff:
                    6a:36:eb:a1:64:34:fd:72:6e:d3:5f:25:69:33:8c:
                    00:24:e6:4c:69:4e:41:49:d8:54:74:05:2c:1b:5a:
                    3d:19:3f:24:f7:13:3f:ac:5c:0b:3d:e8:db:37:90:
                    7c:44:14:e7:46:7f:4c:a6:f7:b3:b4:c7:d0:5c:29:
                    a8:44:94:d7:0c:a2:3c:c8:32:a4:e7:18:b8:d5:2e:
                    0a:dd:8d:61:e1:72:e7:86:21:dc:be:48:1f:c9:9d:
                    07:d9:eb:2f:1f:0c:56:43:10:02:7e:aa:60:02:ab:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:01:03:34:67:24:20:E7:0E:64:17:0A:EE:BB:0C:CA:85:1B:4D:D9
            X509v3 Authority Key Identifier:
                keyid:97:53:0C:AB:3B:AE:5B:52:9F:AB:EB:99:79:BD:68:5F:7B:2B:DA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6252f9-6787-406a-b91f-9cfa2c7d816e/1/l1MMqzuuW1Kfq-uZeb1oX3sr2rM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f7:7e:0b:c6:61:48:7f:ed:3b:ef:2b:8a:04:da:e0:d8:37:
         ba:92:b8:10:87:3e:b6:a6:f0:14:76:46:10:a9:0a:f2:ef:a8:
         7d:a2:b2:65:5a:45:b4:17:79:56:73:07:1d:82:c8:b6:6c:ac:
         3c:be:cd:89:9c:48:a8:1c:b8:df:bf:e4:24:72:a1:01:f8:70:
         80:dc:e2:c9:2c:81:4c:c7:97:5e:7a:b5:fd:1b:b3:8c:68:f6:
         a7:ad:70:5e:e9:84:11:a5:5a:81:a9:8b:4a:eb:4a:2a:88:d9:
         2d:45:44:82:4a:d6:ff:79:b2:ec:d9:b7:8d:9e:3f:5a:ed:9d:
         3d:c6:81:0a:8a:2f:72:81:1c:c7:13:9f:71:db:e5:6f:53:a1:
         47:13:41:30:26:b6:85:6c:a9:10:94:80:b0:df:8e:eb:8f:db:
         9a:7f:27:c5:70:3f:41:71:9a:cb:da:ab:ff:11:e1:b6:0a:92:
         12:a1:b5:a6:7f:28:5b:fd:71:ef:38:a3:f6:64:1e:90:83:15:
         6e:f9:b7:38:18:77:66:4b:da:b6:60:64:d1:c7:34:cf:dd:c6:
         78:e0:2e:5f:7a:49:e2:15:21:91:7b:53:2d:05:d8:2c:9c:7a:
         6a:36:17:45:f4:50:47:f2:9c:1f:bc:74:54:ec:ec:fd:df:f7:
         db:e9:52:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 05:31:12 2025 by rpki-client