Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          vZdcjxfEzHEFckLKloRdaw17u7+NBQkASAuTaslxeXE=
Subject key identifier:   E1:AC:02:B4:59:35:56:9F:85:C9:83:C0:BF:BA:73:EE:D3:F1:C3:E4
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       019A251CF683727AC8193BB8F4EAC48E8DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1712
Signing time:             Mon 27 Oct 2025 10:00:46 +0000
Manifest this update:     Mon 27 Oct 2025 10:00:46 +0000
Manifest next update:     Tue 28 Oct 2025 10:00:46 +0000
Files and hashes:         1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          2: Dz4ErQbnd8_kzk-alTqGPDRjZQk.roa (hash: oUGAV70/klx5EwrIAVjfJ2MtbzXKGb1ntDwcOeTxtWE=)
                          3: NbSoMWFGWBCHoJlGwWivjFTCFBY.roa (hash: k5rJPB0kkBNvDa1kkQgwmYoySN8P077TC//BMQ29qA0=)
                          4: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          5: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: OVmVrNhV7CNJukuHdD5TDBdM5Tr7i9wID6TXAvaKdzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 10:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:1c:f6:83:72:7a:c8:19:3b:b8:f4:ea:c4:8e:8d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Oct 27 10:00:46 2025 GMT
            Not After : Oct 28 10:00:46 2025 GMT
        Subject: CN=e1ac02b45935569f85c983c0bfba73eed3f1c3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:41:95:fd:0f:83:ab:08:48:bc:67:62:c3:
                    25:a2:8d:6e:7c:c5:54:5a:c1:76:69:46:08:00:64:
                    60:58:a9:e3:1a:95:e4:1e:5f:ff:3b:ad:04:78:00:
                    5d:e5:4d:4e:07:e5:77:98:33:43:e5:65:ed:21:42:
                    37:a8:8b:18:ce:1e:32:3d:c5:ad:ac:d8:5c:77:f6:
                    77:63:35:21:c0:64:cc:1f:55:b5:94:89:91:3f:ad:
                    9c:78:3b:8a:f8:e2:3b:c0:4b:dc:35:29:e0:e4:1c:
                    fc:16:2d:c1:d6:be:d6:cd:b3:e0:2a:b0:c1:7b:ad:
                    72:f9:4e:14:d0:10:bc:4e:86:25:af:a5:2c:16:ba:
                    d5:b0:9c:92:98:33:63:60:87:58:0d:77:c6:f3:c3:
                    fb:ce:07:17:45:13:a2:5d:44:b3:3e:a3:54:25:e5:
                    b1:c6:f0:fe:5e:ec:94:37:df:22:11:dd:3f:ed:1c:
                    b2:0c:43:11:dd:8a:94:8c:46:4b:90:0a:bd:c9:df:
                    31:ac:03:23:99:dd:6f:40:15:5a:ef:d6:2e:f1:f2:
                    2d:3a:74:b6:4a:76:ae:c5:2b:9e:ce:45:cb:bf:89:
                    c9:3f:5d:56:25:36:01:a4:ee:67:11:42:bc:87:67:
                    a3:77:d0:b6:3a:66:b9:e6:9f:d5:f6:f2:e6:77:e5:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AC:02:B4:59:35:56:9F:85:C9:83:C0:BF:BA:73:EE:D3:F1:C3:E4
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:eb:08:e1:6d:4b:de:03:14:39:b9:00:72:93:86:d9:58:a6:
         76:43:b7:3b:88:62:c5:3f:e0:9b:53:2a:9a:65:83:2c:29:18:
         b5:a8:73:b7:f6:16:8b:28:1c:07:1c:2c:72:ea:9d:9d:8c:32:
         d4:55:0f:cd:c5:36:05:f5:d1:d6:35:23:a0:a2:97:c5:08:c5:
         6f:01:71:4d:e9:1d:71:3b:7b:5a:54:d3:41:b7:69:0f:ea:51:
         7f:9a:24:d5:8a:7c:7b:a0:ba:45:53:ff:f8:ae:d0:7a:fb:7a:
         f1:5f:2e:5b:55:d5:5f:81:5b:ba:88:86:ae:b3:bf:33:a9:58:
         c0:74:07:1a:87:a2:05:01:3e:c3:57:1e:81:15:bf:39:44:9e:
         85:18:07:75:d7:b6:ae:b4:c7:c1:83:63:c8:66:44:a5:ee:5b:
         69:83:c7:53:bf:dd:2c:e5:6a:97:e5:f0:94:e0:09:58:ad:9a:
         6f:03:4f:1d:9c:12:30:4b:25:d1:74:0f:be:c4:76:af:b8:98:
         42:46:63:9c:7d:ef:e5:89:a7:7b:02:42:66:cd:c1:01:4a:5d:
         d8:5c:93:20:bd:86:2c:98:cd:b2:59:67:ae:42:26:20:3d:68:
         7b:c2:7c:78:36:d6:1d:7b:c8:7f:b9:b7:8a:51:c9:1f:48:fd:
         45:56:b3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:13:08 2025 by rpki-client