Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
File:                     Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft (raw, json)
Hash identifier:          MLMMC3nRYn2hj2foVo4LjGLzUPmN8M51Qx55jKhDNnY=
Subject key identifier:   77:C0:A0:8D:E7:1A:0E:6C:CC:B6:A6:F1:23:0E:D7:CE:F7:45:B3:DC
Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4
Certificate issuer:       /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
Certificate serial:       0199FC2149919D42632CE20BED123D5674A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
Manifest number:          1701
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: 1OWaJkh3xMG85_hCH7EG9MsKPnE.roa (hash: 7Qj+nAZULs6II5SyfVpkBsSwcikp23VZRDpTVixA+q4=)
                          2: Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl (hash: lzzITkvtaB/VJ9zHn1s730Hi/Qr1QvhHXF2q/+ZNP9Q=)
                          3: K1GYgGr3hVsUpWVJLHmGy32L5QA.roa (hash: V+/gfd5Z1YHEZovVaNN6AlDJJhDgcbG2IadrxrDNEPo=)
                          4: Mda1l0AwsWFxrFKAO5UAIaaO2ew.roa (hash: XNbIfF2ySZOzwZgfT+giemW2vec9LK6qJHTp6caSWC8=)
                          5: jBF_bICGrh-Zpj_nQEtwtQSNli4.roa (hash: 3ywaKzQHi1q5WLkv8swf6jE1ccWvKG90P1Gsm1c6Kpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:49:91:9d:42:63:2c:e2:0b:ed:12:3d:56:74:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=77c0a08de71a0e6cccb6a6f1230ed7cef745b3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:5f:41:ed:45:ac:44:72:bc:26:79:28:d5:
                    d7:e2:08:92:f4:d4:a7:3a:98:2b:2d:29:16:92:8f:
                    4c:a2:bf:d0:d5:44:66:d2:61:f2:bf:16:e1:34:51:
                    73:3d:1d:d3:4d:24:1f:fc:3e:67:50:d4:24:0f:54:
                    ea:06:ce:8b:22:b3:a6:91:f4:49:c0:9f:0e:82:8f:
                    01:d9:1f:f6:e6:bc:26:a9:65:6c:22:e2:cd:ee:3f:
                    b9:5f:f9:0b:4f:bb:bf:93:55:14:79:c1:1c:6a:bb:
                    d9:e5:4f:7a:7d:20:99:d8:93:ab:d9:d4:e5:bf:79:
                    b6:40:14:dc:cd:db:6a:f1:70:9e:45:dc:05:40:03:
                    f2:f2:84:5f:99:f7:57:01:b0:b1:f1:7c:cb:1c:d9:
                    08:51:96:51:59:ab:23:29:7e:c9:51:ac:45:5f:4f:
                    00:c9:93:d9:bf:60:62:c8:6d:c7:51:b4:78:d1:4f:
                    af:a1:48:11:4f:7c:0b:b2:20:31:bb:4e:ce:05:0f:
                    62:b5:d8:28:7f:94:0a:5f:12:50:3d:0d:d1:09:aa:
                    f8:c1:cd:50:c2:ba:40:95:65:12:0a:9e:4f:f8:de:
                    77:7a:1e:7a:08:25:88:65:cd:69:d1:ba:51:24:b6:
                    97:b0:d8:ba:a2:d7:f4:32:82:e7:ac:1a:cd:df:13:
                    e3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C0:A0:8D:E7:1A:0E:6C:CC:B6:A6:F1:23:0E:D7:CE:F7:45:B3:DC
            X509v3 Authority Key Identifier:
                keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:51:f4:df:8f:f2:f4:8b:dd:7d:02:e1:38:f5:e7:04:21:c4:
         3c:61:75:72:d0:12:f0:e8:57:79:bb:57:5b:a5:09:d4:82:80:
         8f:14:83:6f:d7:95:5b:4e:73:07:a1:01:75:d4:22:08:04:a8:
         4a:00:ee:01:f0:c7:11:87:ca:85:0c:b4:22:51:37:7e:84:80:
         a1:2b:2b:bb:37:c5:26:d3:d8:62:4b:b4:05:7c:d7:03:d8:bd:
         58:49:a8:4a:d0:b9:98:ca:f4:20:f0:72:d9:07:29:36:39:43:
         55:4f:a2:6c:29:86:50:01:3d:ee:5f:7c:11:08:e7:bd:ea:94:
         33:5a:88:46:f6:c9:2b:52:e8:69:37:b5:1f:a7:62:de:55:f8:
         c9:dd:aa:f8:e5:c7:2e:7c:c6:12:5d:47:0c:65:fe:74:37:60:
         d4:6a:c4:65:27:7b:3f:99:a0:3e:a2:32:92:f4:0b:db:c3:e3:
         59:19:4b:6e:cc:6c:a3:80:50:97:38:e7:31:fc:95:f7:89:37:
         9e:57:4f:3c:09:f2:2f:c2:fc:97:91:76:be:27:41:bf:7e:e3:
         e0:4e:67:b2:13:45:3a:34:0e:38:1c:b8:42:6d:50:69:51:34:
         7f:4c:3b:47:6d:9d:a6:50:a8:50:c5:27:ff:1a:1d:4e:50:37:
         b6:fd:03:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:08 2025 by rpki-client