Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          24xA0dmCiqmPAxxlp+gvaKYeTpCjdxlgo8VHrhHFcy0=
Subject key identifier:   66:83:37:37:B3:85:47:30:3D:C7:EE:2B:EA:8C:F1:80:FF:52:F3:6E
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       0199FB460B0C548A28236AE1F6673CB7955D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          1065
Signing time:             Sun 19 Oct 2025 07:01:35 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:35 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:35 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: HXBN4QRasRl8YLKIOfKgFKrwyK7/dxTDVPYmdCVLm0o=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:0b:0c:54:8a:28:23:6a:e1:f6:67:3c:b7:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Oct 19 07:01:35 2025 GMT
            Not After : Oct 20 07:01:35 2025 GMT
        Subject: CN=66833737b38547303dc7ee2bea8cf180ff52f36e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:ab:ba:b8:36:58:78:da:29:79:57:26:76:
                    8b:52:fe:2d:15:3a:8e:41:fb:26:73:a0:6a:64:3b:
                    77:b0:94:5d:b2:48:0f:df:13:65:06:b4:fa:76:31:
                    c3:81:15:f2:7d:44:a9:f6:78:b2:a7:0c:11:78:dd:
                    64:56:75:60:80:9d:f4:1d:3c:6f:2a:10:7e:3b:96:
                    b7:0d:1c:ef:e0:60:0c:8d:54:d5:fc:e0:58:80:cf:
                    83:06:4c:7f:c6:70:82:b0:b3:0b:d5:55:73:d7:ba:
                    7e:b0:80:ca:06:7e:b2:8a:a0:c2:6b:82:ae:72:a4:
                    93:1d:00:8f:fc:74:e2:db:38:0e:86:02:b8:de:b4:
                    7c:88:75:50:1e:92:a0:48:52:7b:94:4f:55:ee:1f:
                    95:f3:5e:03:1c:87:3e:8d:e3:5c:c1:90:9c:18:a0:
                    d6:1c:f5:4b:a6:20:cb:c5:47:69:b0:a4:12:e2:fa:
                    e3:bc:64:b1:ca:a6:77:88:12:81:3c:cc:36:b6:4b:
                    e6:ea:6b:f5:6c:b4:bd:75:ec:9d:4d:04:7e:71:d9:
                    89:40:fc:90:2e:47:9e:41:da:ac:5f:f0:09:94:64:
                    31:ad:a5:07:7c:fe:e9:a7:40:34:81:8a:79:39:ec:
                    bf:47:e6:f8:ee:cb:ea:11:cf:7f:52:0e:ad:f0:80:
                    98:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:83:37:37:B3:85:47:30:3D:C7:EE:2B:EA:8C:F1:80:FF:52:F3:6E
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:a1:61:0f:40:61:d1:33:02:18:a2:e0:b8:29:d0:ed:3c:72:
         d7:42:90:f9:cc:3b:49:55:fa:14:84:ae:d1:d2:21:4c:30:d5:
         85:7e:09:18:30:70:ae:c8:11:79:94:9b:15:ed:f6:e2:66:8e:
         be:96:cf:30:2d:f4:36:fb:b2:45:da:8f:d0:03:bd:eb:2b:ca:
         04:15:97:be:13:cf:55:9c:74:20:60:ab:dd:3b:d1:77:02:41:
         b0:fc:6b:0e:6e:e3:3e:9c:33:ed:4a:c2:26:4e:ea:74:c7:9e:
         1d:15:f0:7b:e1:3c:b3:a3:93:00:7f:2b:ac:3c:ba:ee:87:1f:
         b2:92:06:bd:3f:79:36:82:d4:83:5d:73:6c:f6:05:b3:da:1c:
         8f:b1:3a:7b:c5:22:fb:b0:11:4a:47:da:aa:c7:75:28:f2:39:
         53:b5:1c:58:a6:39:30:c2:c5:7c:76:c7:eb:ff:c5:79:89:2b:
         64:3c:f1:7a:22:15:87:84:1e:72:57:b5:0e:ff:d3:f0:9d:0e:
         07:d8:a4:36:11:68:c3:93:59:bb:62:0d:3d:50:53:bb:6f:2a:
         82:ee:54:e8:8e:a3:40:11:ec:bb:23:24:aa:12:b0:56:91:f6:
         b8:d5:d5:ba:12:43:10:67:93:35:12:1c:a4:b6:dd:be:35:1f:
         3f:71:a6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:36 2025 by rpki-client