Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
File:                     1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft (raw, json)
Hash identifier:          k73UByliw/C+02bv37hTRDSQFHE8bFFIW2HIE2Aqcw8=
Subject key identifier:   CC:37:3F:99:E4:AC:1D:2A:AC:50:68:C8:75:4A:85:B8:1A:3F:5E:E3
Authority key identifier: F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78
Certificate issuer:       /CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
Certificate serial:       0199FBEB6E396A792BEB12C4078519B365AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
Manifest number:          1425
Signing time:             Sun 19 Oct 2025 10:02:14 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:14 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:14 +0000
Files and hashes:         1: 1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl (hash: 60qYQSaHJnHsDMmu0fiojle10T4E03Rc2LNZ3SmLwss=)
                          2: 4WNYU3DPTpnOXIdy-DcRolCswoU.roa (hash: lJMeZdxIdcMT6oAlo0ZhGiaOSgJa2FyIZlyPkCXNXeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:6e:39:6a:79:2b:eb:12:c4:07:85:19:b3:65:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f806ec9cf1deabf9d6cd5f8891bb82d56f91d678
        Validity
            Not Before: Oct 19 10:02:14 2025 GMT
            Not After : Oct 20 10:02:14 2025 GMT
        Subject: CN=cc373f99e4ac1d2aac5068c8754a85b81a3f5ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:d6:9b:b9:d1:3b:31:96:6e:14:cb:c5:b8:
                    cc:a4:8c:19:69:cd:2f:c6:31:2b:aa:d8:05:ee:03:
                    62:b4:b8:e8:32:bc:f2:65:42:3e:e6:0a:10:f0:d0:
                    31:08:16:7e:df:ff:a9:54:7a:f6:82:c3:5b:ba:6d:
                    e6:b5:46:46:de:eb:f7:cf:9c:01:2f:01:83:8c:9b:
                    db:09:8a:a6:f5:5d:ab:2a:3e:59:de:51:94:52:21:
                    0a:e4:cc:80:bb:54:6b:4c:1e:6a:40:ae:ee:c2:d3:
                    05:aa:58:84:2e:c8:a4:0d:45:12:2d:d5:55:a9:5d:
                    e8:65:59:b8:aa:1d:86:c2:b9:76:f5:db:2b:5b:5f:
                    5e:c5:9a:99:79:fc:05:6a:36:0d:45:43:f6:8e:48:
                    af:06:db:f2:4c:60:74:ad:d9:63:8f:38:7c:e0:f5:
                    90:f8:42:22:0a:9d:07:4f:95:fe:db:9e:88:38:6c:
                    b5:80:2d:7e:3c:a7:09:f2:e0:81:38:8d:57:6b:9b:
                    50:1a:e9:38:a3:ee:c7:dc:8a:d1:0b:7d:24:c9:4f:
                    19:17:45:77:09:d8:37:a7:76:02:73:4a:b9:9f:fe:
                    fc:f8:80:45:1f:f1:0a:28:86:8b:03:e3:22:96:43:
                    c2:88:bb:16:0a:e1:c2:72:21:ea:14:7b:0a:81:eb:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:37:3F:99:E4:AC:1D:2A:AC:50:68:C8:75:4A:85:B8:1A:3F:5E:E3
            X509v3 Authority Key Identifier:
                keyid:F8:06:EC:9C:F1:DE:AB:F9:D6:CD:5F:88:91:BB:82:D5:6F:91:D6:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/4404f5-e10c-4190-9270-ac0a84a27d53/1/1-AbsnPHeq_nWzV-IkbuC1W-R1ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:60:9d:2d:48:d8:f1:03:52:47:26:0b:46:d8:8b:a0:e5:c9:
         85:55:91:53:cd:39:02:7b:ef:75:3a:11:32:a7:a0:b2:e2:17:
         c6:e0:dc:09:0c:a7:72:80:a9:29:b0:2d:bd:ca:18:8a:3e:b7:
         47:68:68:40:b6:c6:f9:e8:bd:eb:ab:07:50:66:65:37:fc:1d:
         5e:e8:ec:b3:9a:ca:b1:13:9c:fc:89:ce:b5:cd:0b:e5:a8:86:
         67:6c:b5:2b:4b:34:a1:d8:76:97:ff:dc:77:40:7f:93:ef:ea:
         ad:d9:d7:1a:ea:c9:68:95:ae:97:8d:e3:57:70:b9:bb:f7:4f:
         5b:6f:d9:18:b8:91:8d:61:b5:d4:93:91:61:0a:83:dc:1e:40:
         47:d1:0b:05:80:3a:2f:37:e9:f1:b4:e5:7d:15:f0:30:35:e9:
         f1:5e:b5:53:77:96:f6:8c:30:53:91:f0:5e:ef:20:bc:67:7f:
         c5:4b:95:c3:e2:e5:65:2a:5b:49:9b:b2:27:d6:f4:51:31:a8:
         34:e6:5a:6d:ce:3c:61:16:0e:5a:1a:fe:d9:08:20:b1:69:db:
         af:57:07:ac:54:57:7d:13:75:e2:50:bb:51:a7:a4:25:df:a0:
         02:61:4c:06:c7:6c:f3:02:60:67:56:ae:85:00:f4:0d:14:79:
         dc:6d:a8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:50 2025 by rpki-client