Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          qHge7luQg0c7gdmjEnK3X7TcWnwAhOzyUzsj0lsbmxQ=
Subject key identifier:   D4:89:D3:B1:B8:29:D5:DC:8F:9D:5B:61:BC:E8:E1:30:22:B4:CB:3D
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       0199FCFD6DCF98535C159D4C6F176836AAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0B42
Signing time:             Sun 19 Oct 2025 15:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:31 +0000
Files and hashes:         1: 1-AOVRFLZrj2nPYVaoQTOsQL1WlQ.roa (hash: o++gvFVPi/+ixRZFv2gXzhdCHbthUj+xLJ1n6s73kig=)
                          2: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: U/LkZl4aOmu2sjxgN/Uux8CSWpMARR6usHVhBC6zKdQ=)
                          3: iPclpyCcjmZRUirmlpynRe1jVlQ.roa (hash: 9e/d5wv0jrIlrbYbKSFVCEW56rVM8D3l+wGRzbJ1rM0=)
                          4: k3_oz24o1aoYtUGxnQB-tgEqkWA.roa (hash: xn4nb296At8c6SRwQOq+N62PJ2qN+1mD+HyDa0byceo=)
                          5: kfd0B7YUXjP5BkiSga_I2bFGDjE.roa (hash: BHoHm0FgI/hNJZj/ps+lj0bhjSOg0FxpXV30jd+oQxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6d:cf:98:53:5c:15:9d:4c:6f:17:68:36:aa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Oct 19 15:01:31 2025 GMT
            Not After : Oct 20 15:01:31 2025 GMT
        Subject: CN=d489d3b1b829d5dc8f9d5b61bce8e13022b4cb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e3:39:f0:a2:de:2c:80:1e:71:6c:9c:65:b7:
                    75:c5:40:b8:c1:11:2d:e8:a8:41:8c:bf:85:a8:43:
                    a4:e6:bf:5e:4a:c6:95:5b:79:dc:c3:2c:78:e7:9a:
                    27:bf:39:78:44:a2:fa:0e:cc:e9:e1:4c:46:19:90:
                    82:f4:5d:53:8b:79:85:59:a7:81:b2:fd:88:62:e4:
                    68:62:54:68:53:d0:55:39:ae:0e:a8:4c:77:65:c1:
                    75:30:05:38:d0:47:80:99:69:e0:7c:ba:ba:82:8c:
                    f4:5b:ad:a7:a0:d0:09:75:53:bd:10:1b:05:6c:e4:
                    fe:8a:e5:ea:41:c5:81:c2:c1:33:ce:71:90:07:73:
                    58:70:6a:50:c3:4f:7d:13:b7:8c:f2:4c:a8:e2:fe:
                    54:ea:a7:88:84:42:66:7e:8d:44:f6:4b:7a:5f:00:
                    37:38:4e:9c:23:92:4f:46:0e:50:f4:19:91:c7:40:
                    d2:ca:fe:64:6a:d2:44:94:d9:6c:5e:c5:91:e3:b0:
                    4a:aa:59:13:14:e2:94:d3:dc:c1:b0:88:f5:5f:f5:
                    fc:01:35:8d:7e:b2:fc:40:94:0e:48:31:37:47:6e:
                    f4:73:7c:a2:01:f3:7c:ce:8c:9b:e8:bd:d5:4f:08:
                    84:a5:1c:34:61:e7:aa:fa:c8:5b:3f:89:53:bd:c4:
                    13:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:89:D3:B1:B8:29:D5:DC:8F:9D:5B:61:BC:E8:E1:30:22:B4:CB:3D
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:fe:bf:2f:6b:81:3c:ee:82:53:18:fe:30:4e:b0:97:51:a6:
         4b:94:19:e9:ee:c0:6d:c9:7b:5a:df:34:de:ec:23:09:44:3a:
         d0:69:9a:e7:12:5f:b9:6b:8d:ef:d8:4f:c8:0b:6c:b5:7c:f9:
         b3:1b:ca:1b:d8:fe:16:5c:27:ff:d0:81:a9:02:a8:b1:80:03:
         fd:81:8c:7b:ea:e7:8e:69:ce:aa:11:3a:bd:42:ce:9e:71:c7:
         6d:87:2a:91:25:88:72:40:43:0d:c4:9b:e4:3a:72:af:dd:17:
         d4:f5:58:cd:f4:c1:d8:b5:6d:10:f1:27:f5:62:db:94:c7:a9:
         70:58:c3:31:8f:45:c7:59:6d:26:7f:76:db:e3:67:77:88:9e:
         20:d4:e8:b9:8a:55:ac:a4:8c:01:a3:10:3f:e0:db:24:4a:50:
         b3:e5:f7:c0:cd:fb:b2:18:17:f2:12:15:89:4c:fa:61:b4:c9:
         8f:33:02:97:61:bc:37:0b:f1:b9:27:46:94:4b:87:27:69:db:
         86:1e:a6:8e:63:b2:69:d0:11:e3:6e:a5:96:ed:34:4d:d5:06:
         36:41:66:e7:84:83:6e:9e:f3:1f:cb:86:32:01:79:2b:3f:10:
         9c:88:ab:ef:0c:d4:0e:79:09:5b:65:4d:5f:0f:29:8c:77:83:
         ac:9f:f9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:53 2025 by rpki-client