Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
File:                     AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft (raw, json)
Hash identifier:          idOCMzU1EbDd+q7h21ZskjghAn4/Cop47YurLftPVuU=
Subject key identifier:   02:A1:C9:F3:03:9D:5F:D7:34:F3:06:95:D2:0C:F1:94:A3:95:63:13
Authority key identifier: 01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E
Certificate issuer:       /CN=01d1a1353f7f8b505fc98750e86787f4e046432e
Certificate serial:       0199FDA1C2B07C7AD45721D8A2B3C9981BDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
Manifest number:          1764
Signing time:             Sun 19 Oct 2025 18:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:00 +0000
Files and hashes:         1: AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl (hash: AQ02VNfAmZd9H3BPKPQA5XmxDKjjAa5lT6DBsVkpHv0=)
                          2: Qag3TzhF7KhIYH5aibVcZEo78dU.roa (hash: LGNFeenPDMIIHhq8fjkVK3bg4N97KxBcN+ypQDigoxM=)
                          3: iUQqy6L6aDZjvtuJxQqMCFgGkBI.roa (hash: 2s0toD9du/uNKvxO9wvANUSYpPI3MyFsTUVNofTuzE8=)
                          4: pGRf_UUtjRt-_g2C1JVet-aTzvE.roa (hash: FTLP858yB7qWwsssBb1qn2lRhr6UD4obl8X6eHrvZsI=)
                          5: vux6kFwpBUkuJvt9MGI0-OndmYQ.roa (hash: SsewcomJRN+4b8wQ2MGVZVNLvCQFuWU8SrIutsyFvJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:c2:b0:7c:7a:d4:57:21:d8:a2:b3:c9:98:1b:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d1a1353f7f8b505fc98750e86787f4e046432e
        Validity
            Not Before: Oct 19 18:01:00 2025 GMT
            Not After : Oct 20 18:01:00 2025 GMT
        Subject: CN=02a1c9f3039d5fd734f30695d20cf194a3956313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:0f:d1:ae:0b:c3:83:84:cf:e4:fb:52:e5:
                    df:e9:d4:bf:25:a5:73:8f:24:b9:0f:66:9d:68:2b:
                    4a:d9:d0:f1:67:5a:91:b1:da:c3:f7:2a:ec:ec:d3:
                    90:85:d0:9e:62:a6:f8:51:08:fb:a4:b6:af:85:a5:
                    cb:70:03:dc:a3:3f:a7:d2:b7:c1:91:12:89:d0:fa:
                    06:a4:91:5f:4d:4c:35:08:31:de:f2:70:20:1b:dc:
                    d3:2a:48:e2:e1:71:5f:55:46:0e:a9:aa:9f:61:77:
                    43:5c:37:9d:af:a1:c9:4f:9a:6f:88:2c:5f:4a:98:
                    0c:8c:a2:ae:3a:06:e0:a4:6e:ad:19:ed:24:b1:db:
                    78:60:e9:8f:d5:e6:4e:4a:76:c6:e1:fb:ad:99:4a:
                    a1:f1:43:c8:3f:02:3e:94:8e:75:1a:6c:38:5a:03:
                    cc:ed:f7:34:c4:57:e3:4b:a2:23:f6:7e:85:db:7f:
                    58:10:86:a7:b8:2b:a6:1a:1f:3f:0d:9b:b8:0c:d9:
                    f6:b0:30:a5:a5:bb:8e:68:6a:d3:cf:cf:c9:bf:f1:
                    5d:2a:04:2b:97:a5:06:d1:d9:ea:6c:e1:46:d9:9f:
                    f1:c3:d3:42:7a:28:60:e2:49:13:a7:e7:5e:a9:92:
                    f2:16:97:40:61:26:09:66:10:a8:77:46:2e:8d:49:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A1:C9:F3:03:9D:5F:D7:34:F3:06:95:D2:0C:F1:94:A3:95:63:13
            X509v3 Authority Key Identifier:
                keyid:01:D1:A1:35:3F:7F:8B:50:5F:C9:87:50:E8:67:87:F4:E0:46:43:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/AdGhNT9_i1BfyYdQ6GeH9OBGQy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:7b:12:78:ab:77:9d:6b:23:9f:2b:1d:bb:c8:61:08:16:
         39:03:d9:5e:c1:b4:a5:be:ba:2a:0d:7d:7b:df:28:f9:4c:59:
         8d:d2:cc:da:42:38:48:31:3b:13:27:e1:99:94:7b:e0:eb:23:
         47:dd:46:af:99:dc:80:85:85:13:9e:40:dd:3b:ca:da:09:ee:
         a1:f8:96:7d:88:f3:bf:08:11:bb:79:cb:78:0c:5b:47:3a:00:
         93:2d:47:4d:fe:45:46:4c:c3:57:99:01:6a:63:9c:a5:b8:20:
         10:02:de:10:94:0c:58:08:da:4f:44:89:e3:72:f5:42:da:1b:
         2c:11:fa:ed:32:92:8a:45:c3:98:41:5b:ff:26:77:f4:dc:a4:
         82:1c:cf:1f:a4:8f:d6:fc:03:c0:cf:0b:22:34:fe:e8:56:4b:
         03:5a:f4:8f:78:d3:1e:80:43:d4:ae:7b:84:b4:c8:a0:e0:62:
         ae:6a:9f:e5:b8:e5:fa:7a:ff:1a:27:5f:4a:e9:23:47:88:23:
         6a:1d:60:29:3b:1a:25:87:ea:d0:c2:22:1e:47:6d:37:69:61:
         ef:8c:59:6a:6d:72:8b:d6:44:90:ae:c5:ce:8a:28:c0:78:68:
         4e:6f:74:60:69:0a:ed:ad:17:da:c8:6e:26:8b:33:83:fa:09:
         03:34:cc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:30 2025 by rpki-client