Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          Whs25ughNfOF00k0Br43G0/DtI6Ekr/TbBfNhIvW9zU=
Subject key identifier:   E9:FC:70:20:DD:BF:A6:D0:4C:87:36:C4:9B:BF:5E:D7:FB:0F:E6:2E
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       0199FC8FC261100353DC4BDC60A21B6F8D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          1628
Signing time:             Sun 19 Oct 2025 13:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:43 +0000
Files and hashes:         1: oJpDXJAu0YqhYsb3XLvaHm4tsBw.roa (hash: xhyugIU0xCgv9NQxhCyoywbyYjL95zytlkIM+aeR33s=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: PUJWIONhI+b0lWCRHAMFxSFvlHBKgpeYsP8Cij+E8Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:c2:61:10:03:53:dc:4b:dc:60:a2:1b:6f:8d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Oct 19 13:01:43 2025 GMT
            Not After : Oct 20 13:01:43 2025 GMT
        Subject: CN=e9fc7020ddbfa6d04c8736c49bbf5ed7fb0fe62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:de:93:ad:2c:9e:26:65:7b:db:cf:68:5b:
                    61:a2:5e:6a:79:e6:25:ed:b8:31:cc:d0:41:03:4a:
                    fa:03:d0:9e:91:6f:03:f2:bc:93:a0:a1:75:6e:04:
                    b3:e7:fe:9b:cb:d1:c1:4e:8b:3d:ec:2b:91:d5:16:
                    46:b8:fa:2f:50:f5:7d:d6:6f:59:08:cc:82:d5:f0:
                    b1:fa:df:7c:52:6a:7b:e9:78:9e:a0:23:45:6a:d6:
                    e9:18:f1:e1:28:ed:4d:9e:d3:62:73:4a:99:5f:d4:
                    9e:09:ba:67:83:d3:c1:62:37:f6:4c:d0:e3:cb:7b:
                    c4:ec:2f:20:00:0b:91:18:29:83:53:c9:ef:34:6e:
                    b4:9b:9b:3a:23:79:55:06:ad:cc:78:8e:d9:54:b6:
                    22:10:ca:fd:f7:98:b8:4a:af:76:88:51:14:8d:5b:
                    b8:51:9f:54:0a:a9:b9:c6:ca:73:f3:71:e5:b6:db:
                    ef:06:c1:58:c0:5f:fe:48:89:40:62:8a:0d:de:02:
                    4f:87:a8:d8:b8:a3:bc:e8:52:ac:d1:f7:b3:e5:65:
                    19:77:27:71:87:c3:45:33:9d:73:98:34:10:c2:97:
                    23:d7:ae:eb:13:b5:dd:74:0b:26:8d:c3:4d:35:2e:
                    14:ea:46:b0:b0:0f:04:96:b7:09:f8:ea:60:43:37:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:FC:70:20:DD:BF:A6:D0:4C:87:36:C4:9B:BF:5E:D7:FB:0F:E6:2E
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c6:57:4f:92:6a:53:51:fa:3d:f0:2d:25:43:7e:9c:68:f0:
         07:f7:26:b7:fc:e3:34:92:53:69:7d:6b:77:37:d6:b4:c7:b7:
         7c:81:d5:94:77:12:a0:99:e2:ad:84:73:84:a9:16:63:e6:37:
         e4:d6:46:f7:f4:8a:2c:8d:f2:42:1a:08:ff:59:ed:50:f7:ad:
         44:56:92:30:38:3c:56:2e:4f:52:28:73:ce:5d:f7:79:b5:52:
         4a:73:e7:9b:a2:67:e9:a5:77:c2:f7:50:c9:20:13:70:c0:fe:
         4f:05:ec:8a:88:cd:47:ae:e5:fc:a0:be:c4:44:f5:2a:95:ba:
         0f:ed:e7:55:c2:e3:3c:0b:ba:e8:6e:1b:f5:e6:c8:59:f1:94:
         d7:ef:dc:ad:75:0a:18:f0:a5:17:23:20:3a:d2:12:83:4e:17:
         c4:2c:7f:14:8e:39:e9:38:8c:26:df:ba:72:bb:f4:b4:a1:8c:
         96:70:6e:76:0a:e8:c6:13:d0:f7:bf:44:1a:49:31:91:b8:bc:
         a1:b0:03:18:99:ad:ec:e8:ff:24:7a:13:7d:e4:dd:51:cc:6c:
         7a:d6:08:7b:30:cb:6e:57:d2:9d:05:fd:68:d7:19:b8:ee:46:
         bc:d0:32:41:b8:1b:d0:ca:e0:6c:bb:f1:09:ef:50:32:fe:13:
         00:ef:62:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:55 2025 by rpki-client