Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
File:                     ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft (raw, json)
Hash identifier:          PjQiTs0X7p+W8WLTiE0wgDIUpMkmJKQfcAf+d/ZNW0k=
Subject key identifier:   B1:FF:B6:04:8D:70:11:5B:83:77:25:CF:03:AA:7F:A1:DB:E2:EB:C9
Authority key identifier: 8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D
Certificate issuer:       /CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
Certificate serial:       0199FA6A7C31C25B8CEB0AF534D08BB2D814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
Manifest number:          0825
Signing time:             Sun 19 Oct 2025 03:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:46 +0000
Files and hashes:         1: 46cUFKURmF9XnPH8sSx3t3pgjTo.roa (hash: 0QimrSPj6EgGm2B8/lr6EDBnOBJIibCqv64JLqj1ceI=)
                          2: ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl (hash: IHf95gObhhS6adOwXOysRnvYB5YYLeZAMLUWPxuahF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:7c:31:c2:5b:8c:eb:0a:f5:34:d0:8b:b2:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab6bd65fe2a86fd42f9c4f504e1eed58570f93d
        Validity
            Not Before: Oct 19 03:01:46 2025 GMT
            Not After : Oct 20 03:01:46 2025 GMT
        Subject: CN=b1ffb6048d70115b837725cf03aa7fa1dbe2ebc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5d:19:47:82:2d:8d:72:a3:17:42:39:e2:2a:
                    f2:56:ea:7f:cb:3b:49:7e:52:8d:ae:03:d1:3b:55:
                    05:69:05:90:f6:90:6c:08:30:76:d8:c2:f4:63:96:
                    d9:17:45:61:0c:eb:a0:9d:35:17:cd:bb:74:01:da:
                    05:c3:99:37:69:66:70:2a:fb:44:26:ae:a4:45:64:
                    37:b1:5a:62:eb:7a:9c:53:14:f6:46:de:31:fc:3b:
                    cc:4e:98:b7:4d:30:cb:6a:03:5f:e6:9c:fb:12:ef:
                    de:a1:96:90:cc:4d:af:d9:a5:92:1c:2e:54:19:18:
                    f5:68:e3:fe:ac:84:34:c8:dd:64:17:3b:2e:39:d0:
                    ec:bf:a9:83:8c:5f:ac:f0:46:4e:e3:5a:44:a4:a2:
                    9e:9b:cf:cc:74:04:64:88:47:9b:20:9d:6b:19:e8:
                    b5:98:f0:05:47:a7:12:ec:16:50:ee:11:90:b2:a9:
                    8b:29:8a:88:1c:0c:8f:b9:78:b2:6b:9c:9e:e5:f9:
                    4b:d1:14:7d:6d:1f:52:43:09:3b:93:41:68:99:4d:
                    4f:86:8f:09:85:b4:80:08:87:57:a9:c2:71:ce:bc:
                    45:4e:3a:0f:64:e2:74:e4:42:c9:c0:ea:aa:ee:26:
                    97:1e:26:b9:f8:de:7c:99:69:25:aa:fb:7b:14:fb:
                    51:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FF:B6:04:8D:70:11:5B:83:77:25:CF:03:AA:7F:A1:DB:E2:EB:C9
            X509v3 Authority Key Identifier:
                keyid:8A:B6:BD:65:FE:2A:86:FD:42:F9:C4:F5:04:E1:EE:D5:85:70:F9:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ira9Zf4qhv1C-cT1BOHu1YVw-T0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/45a9c5-2cc1-4f45-ba80-ad58189de754/1/ira9Zf4qhv1C-cT1BOHu1YVw-T0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:83:fa:84:de:29:72:8b:ed:39:4e:c0:dc:91:eb:38:52:35:
         7e:1a:9c:7c:6c:b7:ce:f5:6a:89:84:9a:bf:c6:9d:08:63:52:
         a5:33:94:2b:e8:f9:44:70:e0:bc:49:48:5b:f6:42:37:f1:ee:
         27:1f:75:eb:99:cc:9b:3a:5d:23:14:79:59:09:39:8a:a5:91:
         6c:83:99:9a:73:3b:da:74:5b:a9:ba:ac:74:f6:a4:56:29:09:
         78:c3:f5:7b:36:ff:f5:5d:05:c8:ab:cf:a2:00:e9:67:e1:51:
         53:79:c4:fc:31:3f:fe:65:58:f0:20:71:89:85:a0:d9:42:2f:
         3f:d9:0e:19:df:2a:ce:87:94:07:4c:88:3d:94:92:8c:f7:a7:
         9e:39:3b:4e:c1:82:d1:c0:a2:f2:0e:0f:cc:75:0d:c0:4b:62:
         40:8b:4c:39:c0:7f:4d:d4:fb:23:f9:02:82:bd:b4:89:2a:c8:
         9a:3c:b7:8c:74:4f:6d:bb:b7:8f:53:d0:4c:e8:52:d8:24:f3:
         e5:20:3f:89:b0:b1:da:46:3a:c6:68:c4:36:99:0e:c0:57:d5:
         07:3c:03:19:68:b9:67:3a:f7:0f:45:13:1c:a8:7b:75:b0:85:
         e2:79:8a:cf:d3:d3:6a:7c:7b:62:c8:fb:cb:98:b9:86:4a:13:
         3f:57:7b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:54 2025 by rpki-client