Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          10sazZi3R35dSOmVdya2LStKRAmw4jHv6ipxIX+btLQ=
Subject key identifier:   A6:EA:F0:FB:61:0E:C1:78:29:73:06:53:9F:0E:3B:B1:96:D7:BB:3C
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       0199FE469D9505EF262898FAF06AF6E801CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1652
Signing time:             Sun 19 Oct 2025 21:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:04 +0000
Files and hashes:         1: HVVJONofo563h9QMYaZ4QxaodCA.roa (hash: yg/TA6SdsD3Id5UMI0b19L1T62Icbt5ojBDi7qobzgc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: L3bYQmgW1Lxfitjx0mc4fEqsvVS9z1TM9y9lIj1rh9Q=)
                          3: eUHjJwuDj8xNwMB_4iM9TrMswPo.roa (hash: ClkYaKsyUxfoPn59P3GqQQlCdtnOCewBPFKLRNlTbXE=)
                          4: fHwbuKmo2CK36Zvix3cU0fytdMg.roa (hash: 837DuOduNlriLHDjUbJ8NtGNUf2LQkcWK+CE6Nfv/to=)
                          5: hTXyI46q8ybU3Dz0eS3ayB3HFbg.roa (hash: XI37ysO8Yf94g3nRE6Kdilk8PRdJybt6ja3RqZ8LGfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:9d:95:05:ef:26:28:98:fa:f0:6a:f6:e8:01:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Oct 19 21:01:04 2025 GMT
            Not After : Oct 20 21:01:04 2025 GMT
        Subject: CN=a6eaf0fb610ec178297306539f0e3bb196d7bb3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:2a:3b:b1:4e:d2:53:3f:19:a4:c9:a9:e4:
                    b5:73:e8:94:4f:c2:1c:00:d2:a0:d8:f2:84:1f:05:
                    26:ff:b7:6f:f8:f2:50:2a:82:79:b8:08:b1:b8:c0:
                    d3:d9:a3:7a:56:0f:b5:f2:ee:85:dc:a1:6f:66:d5:
                    f9:9b:be:a9:b0:e4:4b:37:6f:8d:5a:ac:ce:ab:cd:
                    1d:c1:57:e0:39:bc:23:af:f7:14:03:00:48:12:0d:
                    f4:18:e6:c0:c8:e7:65:e3:45:f8:d1:45:d1:9c:ca:
                    30:ec:27:40:be:98:40:58:4f:97:45:b7:07:47:c0:
                    e1:e7:a4:94:55:fd:c9:06:27:65:9e:b7:3e:06:66:
                    2b:0e:31:fe:c5:61:f5:ff:46:3c:00:c1:6a:14:b0:
                    0d:fa:8f:b3:91:99:a2:e1:bd:16:48:f5:47:8b:6c:
                    6b:fe:73:12:c4:5b:97:c9:d5:12:c7:78:f1:b3:51:
                    80:39:c8:bf:56:bb:1a:bf:ee:4a:82:a4:40:38:87:
                    17:81:a1:5b:60:72:c4:7f:0e:19:02:39:b5:a4:70:
                    58:42:30:74:b8:aa:af:e3:4f:0b:14:45:fc:6f:0a:
                    43:51:94:e0:35:cd:35:07:04:83:c6:81:e1:4d:4a:
                    a9:59:01:e0:a2:07:9d:98:3e:20:df:77:5a:21:f6:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EA:F0:FB:61:0E:C1:78:29:73:06:53:9F:0E:3B:B1:96:D7:BB:3C
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:38:fb:d3:92:a9:07:f6:e7:c1:b1:8c:be:60:11:1e:36:cc:
         54:29:55:08:8a:7b:18:4c:1b:42:cd:c3:4c:b8:7d:11:7c:46:
         19:bd:89:96:5d:8b:95:95:b9:f9:d7:7e:fe:89:45:1f:90:34:
         31:36:e1:ce:5e:fa:dc:a8:7b:2f:2e:19:95:6d:33:ce:e6:e7:
         a8:98:f2:5b:8f:2f:70:60:e2:06:ff:fd:fe:b4:9a:fe:30:42:
         ab:44:5e:c7:64:70:21:ee:fe:93:7d:4d:a7:c2:98:e2:e6:21:
         86:ec:08:f4:66:e7:98:85:16:9c:7c:f6:47:3f:92:35:77:ab:
         71:dc:92:7c:00:40:e8:c4:10:66:6b:2f:4b:4b:97:02:65:51:
         82:18:dc:84:f7:9c:53:48:9a:6d:97:03:8a:66:d0:66:60:b4:
         3c:e1:75:36:17:24:0a:2b:42:3d:58:c5:1e:26:24:88:10:c3:
         33:85:fa:d0:2e:a3:63:bc:b2:2b:c2:76:b0:f7:6c:cf:cb:60:
         e4:3a:9f:62:a1:72:98:e0:b6:8f:d0:87:23:4a:40:59:b9:de:
         ce:cf:76:88:20:8e:d0:06:2c:a4:66:1f:0a:17:00:80:8b:3c:
         5f:c8:08:a6:e1:0e:9b:8e:d8:6c:a3:d4:b3:fb:52:f3:2f:36:
         6a:72:ea:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:19:30 2025 by rpki-client