Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          uLiJjLojP4mTpxZvSgshdhOs+3z4heRSvfFAsQpL3NE=
Subject key identifier:   A1:7E:51:CA:F0:DB:58:41:85:4A:B5:13:F0:09:BA:E0:18:47:11:2B
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       0199FB45924340B6BCB19C26B8828949DCA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          1594
Signing time:             Sun 19 Oct 2025 07:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:04 +0000
Files and hashes:         1: 1-a7NHj5wuktVBuAJ3ADk_WqHSH4.roa (hash: mo8wd9SPepK89v0F2kQzkzZ3y4Ds3XU7kLVQ6u6lBCM=)
                          2: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: gHnoFkabvSaydK9n4fSVBZntr4LHIs72wTjzvawkk6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:92:43:40:b6:bc:b1:9c:26:b8:82:89:49:dc:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Oct 19 07:01:04 2025 GMT
            Not After : Oct 20 07:01:04 2025 GMT
        Subject: CN=a17e51caf0db5841854ab513f009bae01847112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:16:a7:9c:6d:d8:cb:a6:34:c4:a1:1f:8e:24:
                    23:33:dc:91:ff:bd:f5:61:60:35:90:55:e1:f7:7c:
                    21:57:cb:ad:c2:3d:19:b2:e4:21:42:60:3d:f9:bc:
                    d6:55:11:b9:3c:06:70:c1:94:4d:69:4c:52:de:17:
                    6d:21:f9:4c:db:77:6b:d5:40:a2:34:2c:df:e5:84:
                    9e:90:23:ba:28:d9:5a:4c:5a:5c:f4:48:61:e1:32:
                    78:64:21:6a:b0:cc:6a:20:08:ac:e9:00:42:ba:bb:
                    cb:1b:4f:b0:da:df:c8:e6:95:f7:b1:da:fd:47:c1:
                    9e:71:01:12:fe:bb:cb:54:9d:52:b2:9d:77:ef:56:
                    ee:a8:e5:7f:af:0a:78:9f:74:67:9b:83:6a:67:fd:
                    a5:b0:8c:41:fa:4e:b1:fa:cf:02:db:3b:5d:29:c4:
                    93:42:48:01:79:d1:4a:1c:8f:88:ee:6f:52:f0:92:
                    6a:93:40:fc:c3:dd:b0:3a:b3:22:2a:f5:88:02:c5:
                    70:6c:21:7f:05:dc:46:76:05:9e:3b:0b:67:72:e2:
                    fe:71:ab:9a:f9:49:a1:6b:e4:28:4c:03:bb:7c:27:
                    1d:57:48:84:e5:8d:3d:53:a6:8c:6c:a6:24:35:20:
                    68:c9:db:6a:ae:9e:e5:c7:9f:72:f2:e9:27:ff:5a:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7E:51:CA:F0:DB:58:41:85:4A:B5:13:F0:09:BA:E0:18:47:11:2B
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:61:c1:72:b0:52:86:8f:8d:62:fe:15:90:28:d3:2c:75:7a:
         06:c6:4a:91:06:1b:02:10:92:c5:6d:b8:12:2b:b0:a6:31:11:
         21:09:94:16:30:1d:b4:c8:ee:21:50:e0:d6:54:8e:91:de:aa:
         67:cd:56:8f:74:f4:5b:26:b6:ca:5c:f6:22:0f:ae:9c:5f:48:
         19:97:f3:31:54:be:15:21:9c:7e:f9:18:b5:2f:24:d1:a5:5d:
         25:18:f9:cd:b0:92:c9:60:29:d1:e4:47:86:4e:01:32:50:26:
         b4:37:08:33:ce:de:b4:7b:0e:db:69:3c:c9:c7:b4:0b:f2:6d:
         52:55:c9:42:af:d9:39:34:55:76:72:83:d5:99:b8:7f:e0:91:
         ce:23:11:75:20:4a:24:4a:2c:5e:02:1b:a1:b0:82:55:ad:b4:
         9b:d7:e7:b3:85:fa:37:67:2c:1b:ce:88:0d:c6:a0:e0:6e:dd:
         b9:06:7f:c6:d8:38:8a:7b:34:9e:f1:8e:fa:c0:98:3a:e6:cc:
         6b:5f:73:b4:c1:cb:fa:3c:1b:56:ca:f0:0a:bd:27:20:97:7f:
         00:d5:f4:8c:9b:21:66:ec:14:0e:06:19:88:96:7a:94:17:2a:
         4f:e9:13:67:81:8c:3a:36:18:d4:24:ec:0a:a1:b1:12:fc:cb:
         78:d3:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:15 2025 by rpki-client