Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File:                     1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier:          q4cCljqIF+dRjBc55xDRKK67t7mgym8Ra9pWGDcXYTU=
Subject key identifier:   5D:EA:E7:09:0C:51:DE:54:68:10:B8:B0:2E:8A:6E:F8:77:55:5C:F6
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer:       /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial:       0199FC8FB0EB8F5FD49CED28DC35C23E01D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number:          1307
Signing time:             Sun 19 Oct 2025 13:01:39 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:39 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:39 +0000
Files and hashes:         1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
                          2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: fivKhoAv3ro65Z+/iZyKRwfclikuQCOLbZV6Wt77Z5U=)
                          3: 9eH4i0p6oCfS5Co6koOAWFXm7Jw.roa (hash: tsyzy52lOJrhyfRNf4yeW+R41ItQLxSE8ed3yFpy/I0=)
                          4: QfAYzGD_1GwyHB0copGWfxkgHfs.roa (hash: cG1fHnG7UX+yYX1P9wPnTe50lfsVKVVOrvuJOZCFFRU=)
                          5: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
                          6: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b0:eb:8f:5f:d4:9c:ed:28:dc:35:c2:3e:01:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
        Validity
            Not Before: Oct 19 13:01:39 2025 GMT
            Not After : Oct 20 13:01:39 2025 GMT
        Subject: CN=5deae7090c51de546810b8b02e8a6ef877555cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:50:37:ff:c9:71:3f:4f:61:a8:31:f7:44:4f:
                    d7:7d:f6:a6:f8:28:d6:85:b4:85:49:d3:88:ab:db:
                    7b:9b:ea:65:4a:6d:bf:15:38:d7:51:b9:72:3b:f9:
                    c7:b8:33:9b:f0:43:01:bd:6c:a1:a0:a1:34:bd:dc:
                    e6:d9:13:aa:25:88:c9:2e:18:27:09:9d:31:df:cd:
                    73:ee:16:4a:81:89:e9:4b:b4:3b:1d:85:ab:99:f9:
                    4b:0f:5a:2b:5c:2b:3d:42:87:e0:a0:da:7c:c3:25:
                    7c:42:44:5a:6e:7d:cd:5e:7f:69:40:03:63:88:9e:
                    4c:45:78:9f:78:79:9c:03:f0:ba:0c:fe:1a:4d:63:
                    4d:dd:8c:71:f0:eb:7c:1b:9c:a6:2b:2d:d3:83:28:
                    07:f0:4f:1f:44:95:e9:74:99:b0:41:c6:fa:02:fa:
                    5d:19:92:1c:8d:5e:9c:7d:a8:74:2a:1f:bc:3d:5e:
                    9e:32:b1:81:9c:b9:e4:1a:ad:92:c6:9b:db:41:ae:
                    9d:4f:0c:1a:ad:42:60:1d:51:f0:92:8c:2f:59:60:
                    72:02:6c:9a:5d:a0:81:a5:d6:90:50:6c:6a:cb:7a:
                    36:9a:91:c9:4d:37:4f:61:4e:ae:82:58:02:cf:0a:
                    ef:9d:c1:e4:cd:2d:ca:51:35:96:6f:dd:e4:a6:e8:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:E7:09:0C:51:DE:54:68:10:B8:B0:2E:8A:6E:F8:77:55:5C:F6
            X509v3 Authority Key Identifier:
                keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:99:5a:26:bb:04:52:40:bc:80:2b:41:53:4a:20:e9:6a:
         b5:9d:71:d5:e4:a6:27:79:37:3c:8e:d8:27:1e:f3:a1:8a:21:
         73:d4:a9:1c:40:04:83:8e:9f:0e:02:70:c5:02:bc:09:c6:50:
         01:c1:f7:ea:f3:e3:01:2a:15:6b:f7:9e:c5:96:ff:94:47:41:
         00:00:b4:19:52:34:4f:cb:82:84:d0:28:7c:d8:ad:06:af:1d:
         cb:30:42:c6:91:a3:95:44:c4:10:72:e3:92:04:b3:f3:16:0d:
         b2:54:0f:94:31:5b:f6:4f:e7:4f:de:90:9c:2d:20:29:46:44:
         97:3c:43:ea:d7:39:4a:ff:04:40:ab:d3:58:57:5b:76:b7:e4:
         42:76:44:4b:41:47:18:5e:00:12:8d:e8:d9:dd:cd:21:d9:ad:
         9c:b9:11:e0:45:6c:21:8f:74:a4:b1:a8:ee:a5:92:52:95:67:
         d0:bd:95:36:61:b1:4a:bd:61:e8:a8:b1:12:c5:ff:5a:80:7b:
         2d:e6:ba:81:10:b1:13:a6:5f:70:b0:ce:ea:92:ad:55:3e:0a:
         53:a8:66:25:89:aa:ae:79:d2:ee:4b:3f:4e:58:83:81:ba:94:
         3d:e0:b2:93:ca:4d:fd:0e:93:e3:8e:5b:a8:bc:2d:74:53:cf:
         4a:a5:6c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:02 2025 by rpki-client