Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
File:                     ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft (raw, json)
Hash identifier:          63/YZWbVku9Ck0YZySHQCpmOQX7SA/Xd+skoB5d1Hh8=
Subject key identifier:   49:A1:FB:29:32:D8:A8:16:F2:C6:71:0A:D4:52:19:59:73:32:FE:27
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Certificate issuer:       /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial:       019A02C77D62CE29C88DE5F0FF8E99F45324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
Manifest number:          1629
Signing time:             Mon 20 Oct 2025 18:00:19 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:19 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:19 +0000
Files and hashes:         1: ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl (hash: qF/ajCMves8dcbU+bz147+H3Z+/w+hLAlwsoeI0zQX8=)
                          2: hML-Tag6b9qlpG18VlhLUkClkKg.roa (hash: LEX7BjdOFqa/vQo+qGyu7UsdS3xFcEis6fY7DeQDRek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:7d:62:ce:29:c8:8d:e5:f0:ff:8e:99:f4:53:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
        Validity
            Not Before: Oct 20 18:00:19 2025 GMT
            Not After : Oct 21 18:00:19 2025 GMT
        Subject: CN=49a1fb2932d8a816f2c6710ad45219597332fe27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:22:e7:a0:2c:a0:44:31:ef:49:49:53:d0:
                    bb:b3:88:e7:58:49:a0:c3:91:f8:ee:84:ab:2a:3c:
                    ff:0a:f6:f7:79:e7:fa:18:93:76:98:6c:18:55:e3:
                    38:63:c3:1f:00:9d:65:1f:54:a8:44:ba:1d:00:3a:
                    71:b6:34:4f:82:91:b2:87:de:14:25:cf:8b:e0:14:
                    27:c1:87:f1:4b:f7:10:eb:b6:b0:46:63:78:a2:0c:
                    f8:4c:4a:fc:26:e7:54:27:02:74:8d:95:81:cd:ef:
                    19:76:df:03:4e:65:e4:24:0c:ef:f6:7d:08:51:5e:
                    29:d1:f8:92:e3:5f:65:1f:19:1f:22:42:91:31:05:
                    bd:6b:6c:b7:c2:9b:29:88:3a:77:28:74:02:58:60:
                    a8:6d:80:4f:b4:f4:1b:c8:ac:eb:2f:21:e3:03:7d:
                    e0:14:7b:df:d5:84:49:53:27:ff:4a:a1:ea:db:56:
                    da:58:ff:7c:79:27:23:d9:b7:5f:91:29:67:cb:c3:
                    ca:6d:e3:a0:e4:d0:59:bf:e3:89:ae:74:9c:b0:ef:
                    be:11:72:ec:3d:03:6c:1b:9c:47:78:0c:5d:78:f5:
                    67:45:21:93:c6:80:ae:d1:ee:39:88:35:40:7b:e6:
                    13:9e:c3:c5:33:a7:b1:ab:b3:82:c6:ad:8f:b6:a3:
                    a8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A1:FB:29:32:D8:A8:16:F2:C6:71:0A:D4:52:19:59:73:32:FE:27
            X509v3 Authority Key Identifier:
                keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:fd:25:c3:7e:c3:00:d5:36:ee:ba:11:a5:b6:34:bb:17:19:
         19:9e:02:2b:e5:8c:24:6a:16:f1:2b:e4:9e:ae:98:e7:bc:74:
         bc:80:f1:0a:f5:be:fc:ba:8d:aa:b8:dd:84:74:fb:af:87:c5:
         18:95:3a:73:01:ce:e9:83:2a:a2:f5:f9:69:8f:37:53:18:19:
         a8:49:46:e1:95:19:4a:02:85:5b:da:54:20:69:c7:db:11:80:
         c6:45:f3:62:d1:cd:bf:2c:2c:39:0c:b4:1b:da:98:28:aa:28:
         34:b2:e1:be:46:b2:48:ba:82:7c:0c:72:14:0a:b3:33:bb:32:
         42:1f:50:00:61:93:0b:3a:08:11:9c:e4:90:7d:5f:0d:d9:76:
         cf:72:21:d9:9a:1e:64:41:2d:f7:8c:3d:3e:33:f8:b5:c4:fc:
         d8:c7:5d:c0:15:7c:c9:44:08:ad:07:d0:6c:1a:0d:79:91:4b:
         78:e8:b5:79:a2:27:1a:4e:f1:04:22:7d:f4:74:18:b1:41:2b:
         4c:98:44:bc:64:5f:82:0b:f7:bd:10:9f:ca:89:50:f5:1c:20:
         cb:5a:d4:e9:8f:f2:ee:70:ad:71:a6:41:d4:15:06:5c:7f:28:
         9a:ba:06:f9:1d:28:87:48:53:73:a8:bc:08:30:bc:ac:02:f4:
         16:09:d9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:11:18 2025 by rpki-client