Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
File:                     0YpW1qFOZ2P8dzOopflDHbdWjLU.mft (raw, json)
Hash identifier:          zNIdVUdtQYnBNTsS2ukAPIf9Sz9Ci55iq7dtFGVmkMc=
Subject key identifier:   E4:AC:3A:9C:CA:8A:86:38:A1:F3:B1:E3:E4:A6:32:C9:3A:DB:31:F8
Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Certificate issuer:       /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Certificate serial:       019A006C42D44828F97F648B5D1417436FF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
Manifest number:          1679
Signing time:             Mon 20 Oct 2025 07:01:26 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:26 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:26 +0000
Files and hashes:         1: 0YpW1qFOZ2P8dzOopflDHbdWjLU.crl (hash: PGAbYtxMKEdY7YbAtsoUTZAFcG3Vg5oyMNceK4G2wpM=)
                          2: AjvxEqBMDb1RszeU2KHX57XFBR4.roa (hash: 2SKQ42yk6CMNYGHFFloN2VEeMp0spaMezeJijIs3El8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:42:d4:48:28:f9:7f:64:8b:5d:14:17:43:6f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
        Validity
            Not Before: Oct 20 07:01:26 2025 GMT
            Not After : Oct 21 07:01:26 2025 GMT
        Subject: CN=e4ac3a9cca8a8638a1f3b1e3e4a632c93adb31f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:34:74:4a:17:d2:41:61:96:2e:85:05:09:
                    d7:8b:5e:05:2f:1b:14:08:b5:be:17:61:d9:4c:9e:
                    dd:07:7a:00:cc:5a:71:f6:a0:18:8c:ab:df:0f:e9:
                    79:3f:41:6e:ca:79:d3:07:26:b6:5e:fa:05:11:fd:
                    ca:8a:f8:45:53:99:a6:e4:85:22:01:e0:ca:35:b3:
                    b3:d9:13:1c:91:04:19:f8:e0:98:31:38:4c:d4:e8:
                    38:31:94:ce:bd:a1:e2:30:0e:91:9a:19:96:26:11:
                    c1:7e:66:5d:0c:6f:da:6e:c1:9e:dc:d0:84:f8:ad:
                    8b:2a:f9:76:e1:3a:d7:e9:ad:f5:f6:83:52:5d:8a:
                    00:10:ee:8d:6d:c4:6e:a1:5d:59:e6:63:8f:06:44:
                    5f:79:6f:a1:f8:e1:f3:14:97:aa:63:8f:e3:a2:be:
                    09:b8:c2:b7:f9:59:34:a4:ba:62:65:5c:2b:66:80:
                    83:dd:f5:23:30:1b:5d:28:b3:f0:e5:ba:39:69:a1:
                    46:99:65:9b:2d:f5:87:6b:d5:26:a6:0d:69:d7:ce:
                    64:e6:a8:29:82:2d:59:9a:5b:9e:63:15:6f:35:7e:
                    af:fa:4f:79:27:aa:75:ee:f1:70:a0:4f:b4:39:79:
                    61:71:a0:28:fe:d3:8c:08:85:23:30:6b:15:fc:8a:
                    29:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AC:3A:9C:CA:8A:86:38:A1:F3:B1:E3:E4:A6:32:C9:3A:DB:31:F8
            X509v3 Authority Key Identifier:
                keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:e0:3e:b4:e1:f2:09:be:30:16:95:99:65:fd:55:40:a5:
         4e:3f:1e:a8:4f:28:be:4f:4d:ce:20:fd:e7:f3:3f:9e:c9:48:
         f6:fa:df:11:92:f7:5d:df:25:b1:6f:bc:8a:a1:9e:e9:52:e7:
         5a:27:b3:e2:06:9a:8f:40:11:e5:02:2e:75:ef:dd:8d:85:2b:
         01:c4:bb:68:00:92:aa:4d:93:2a:0c:5d:e6:3c:d6:c5:6c:c6:
         7b:2b:43:61:3a:3c:7f:c5:f3:a0:5f:36:94:f9:86:4f:1a:7e:
         c5:7f:e5:47:ef:80:9a:e8:f4:36:b4:55:5b:57:91:38:22:85:
         95:7c:8f:f8:74:4c:34:74:ef:0c:f7:6a:6b:24:78:26:64:99:
         29:97:28:89:e6:f1:50:14:9c:60:c9:57:21:77:b2:7b:b1:7f:
         46:65:dd:d1:79:38:20:94:86:29:99:96:17:6a:50:6f:8c:82:
         8e:d6:ae:90:84:c9:dc:29:c6:b3:81:ad:40:a4:01:4a:90:bc:
         1e:60:2b:e5:fe:aa:5d:67:86:94:b4:61:af:43:89:3f:44:9d:
         2c:e8:c5:68:ad:99:48:59:27:60:4d:9d:07:25:22:1f:12:da:
         b0:e2:81:17:0e:5e:75:fb:c6:eb:b4:9b:56:69:9e:32:68:c5:
         ce:06:d1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:07:35 2025 by rpki-client