Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
File:                     h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft (raw, json)
Hash identifier:          relVDWypPF2js4EfhtPOc9+nTDan3liEFkP8cb7b9Mg=
Subject key identifier:   1F:25:B3:90:12:39:0C:F9:21:7D:75:76:19:CD:32:26:BD:FF:46:49
Authority key identifier: 87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27
Certificate issuer:       /CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
Certificate serial:       0199FBEA93339E3BDC495DF38F544D592830
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
Manifest number:          149D
Signing time:             Sun 19 Oct 2025 10:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:18 +0000
Files and hashes:         1: FsnHQCl3YIPQ-Kr--FXccxOvsak.roa (hash: 36hDdDotapDvjoXAZEUVlMvaerSFU32EL1uK11igVxs=)
                          2: h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl (hash: 0nJc/GNdjBMQRs4po72CIIWFh1pCVoW/XZlWEOcNI8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:93:33:9e:3b:dc:49:5d:f3:8f:54:4d:59:28:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87851544a6427d2c8e279e4b94b92aaf0009ed27
        Validity
            Not Before: Oct 19 10:01:18 2025 GMT
            Not After : Oct 20 10:01:18 2025 GMT
        Subject: CN=1f25b39012390cf9217d757619cd3226bdff4649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d1:29:82:94:cd:aa:00:6e:fd:84:76:80:c7:
                    99:67:01:11:a2:93:8b:82:1a:6d:86:5e:1c:e2:2d:
                    d4:60:f2:19:ae:9c:ea:07:83:eb:ba:ab:1c:66:a1:
                    8e:ec:81:82:f4:3c:0d:e4:a7:a0:0b:74:36:29:ba:
                    3d:a0:c2:a2:f5:d9:f7:22:1d:7f:61:2a:10:50:2e:
                    30:ee:de:d1:f4:04:35:d9:5a:cc:a3:12:26:2e:16:
                    2c:d4:c7:7b:70:b9:1d:33:8d:a2:53:ad:25:69:57:
                    f6:25:17:44:a7:38:3e:2d:6f:1d:b8:2f:3c:f7:e5:
                    8d:ab:1d:15:70:3b:2a:36:f7:08:0e:61:4a:85:1b:
                    24:ce:af:6d:41:1a:0b:d5:94:e0:ac:6b:b7:98:bf:
                    15:8d:74:1a:94:f9:55:8c:47:da:f8:e9:a3:55:fe:
                    73:d0:08:dc:c4:c4:18:3a:2c:d6:26:6e:ce:6a:bc:
                    87:4e:e5:82:ce:72:cb:c9:43:00:6b:d4:60:7d:ab:
                    e6:fd:bb:6a:dd:bc:e0:62:94:86:96:fa:a0:27:f8:
                    df:18:72:6d:18:96:cb:2c:10:8e:63:3a:cd:8f:d7:
                    9f:a5:62:bd:07:26:e0:a3:d6:69:8c:92:4a:b7:30:
                    96:73:b9:52:51:58:23:c2:cd:25:f6:16:8a:da:f8:
                    11:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:25:B3:90:12:39:0C:F9:21:7D:75:76:19:CD:32:26:BD:FF:46:49
            X509v3 Authority Key Identifier:
                keyid:87:85:15:44:A6:42:7D:2C:8E:27:9E:4B:94:B9:2A:AF:00:09:ED:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/47b1fd-34b6-4195-849f-85434f6169f1/1/h4UVRKZCfSyOJ55LlLkqrwAJ7Sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:db:f9:5b:d3:78:5c:04:5f:2c:b7:6e:4a:60:ed:af:98:ff:
         fd:21:8f:45:0a:d0:cd:65:e3:74:2d:9a:e6:08:94:32:e2:76:
         b8:66:a5:7f:cd:e9:96:7b:8d:e5:f2:5a:ed:dd:4c:3d:89:a6:
         da:10:2e:d1:06:62:65:a3:18:21:4c:51:9c:42:57:5a:6a:84:
         33:d2:e5:5f:6f:3b:c3:ff:44:7a:53:3c:78:81:de:b5:1a:cd:
         17:c4:6b:5a:4e:a8:6e:51:82:fa:9a:58:20:b0:5a:d7:55:b2:
         df:ab:3a:a2:2a:86:97:b1:f6:75:8c:24:5a:71:6b:59:d8:76:
         52:bc:e4:4e:fa:43:2f:38:ea:53:20:f3:1f:87:26:b1:f4:55:
         f9:22:8f:c0:be:ba:96:47:a2:f1:ae:6d:c6:03:d9:4f:18:da:
         94:35:1f:c2:60:f6:83:d4:40:17:fb:69:8c:fa:6d:08:cf:e0:
         42:de:86:b6:4c:2f:7c:f0:8f:ba:39:94:bd:5b:95:ab:e7:df:
         c0:47:5f:1e:48:42:cb:3e:1f:66:51:68:df:7c:7d:47:a5:71:
         a9:89:af:ef:c8:45:46:9c:ef:bf:5c:ac:76:19:ff:44:f6:81:
         84:d4:6e:41:7e:97:1b:90:70:2d:ad:fc:cd:04:0e:9f:75:5c:
         1e:d1:ee:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:40 2025 by rpki-client