Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
File:                     1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json)
Hash identifier:          WrqZeyb7rxe3eQlkCIWVpPdQBBJSMAP/RisQRW+Rukw=
Subject key identifier:   A1:B6:A3:27:CE:1D:71:92:14:28:66:B8:ED:1C:8B:A7:47:C0:EB:82
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Certificate issuer:       /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial:       0199FDD90467BBC6C5401495D4474DD24E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
Manifest number:          1401
Signing time:             Sun 19 Oct 2025 19:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:21 +0000
Files and hashes:         1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: DMz2CVNFkyVo3gqd4rTe/4pVOoWqoClVlAAWyaGIumY=)
                          2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=)
                          3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=)
                          4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=)
                          5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=)
                          6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=)
                          7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=)
                          8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=)
                          9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:04:67:bb:c6:c5:40:14:95:d4:47:4d:d2:4e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
        Validity
            Not Before: Oct 19 19:01:21 2025 GMT
            Not After : Oct 20 19:01:21 2025 GMT
        Subject: CN=a1b6a327ce1d7192142866b8ed1c8ba747c0eb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:38:74:50:cd:b3:f1:f4:fc:99:a2:1f:44:
                    37:fa:b1:23:ee:4c:c9:76:39:b8:30:01:db:38:7f:
                    dc:d4:d9:94:48:fe:fd:d2:c5:0a:0d:27:9f:4e:49:
                    fb:54:18:d6:40:d8:1b:71:63:12:35:c6:95:3a:66:
                    2e:2c:d9:28:45:9d:d1:2e:05:92:ae:c7:9b:4f:71:
                    6d:20:1c:c3:b4:4a:4f:36:89:00:c9:df:66:0a:ab:
                    d2:82:32:fa:42:57:a0:e7:55:6f:e9:43:48:57:a9:
                    01:dc:b5:ad:96:97:48:3b:4e:b4:12:25:42:bb:c7:
                    96:5d:b2:d4:bb:f5:eb:92:4f:d8:85:7e:b5:1a:d9:
                    3f:4a:1c:8e:9b:6f:2b:5f:69:61:60:43:5a:4b:c8:
                    77:c2:8e:38:9f:8b:a7:7e:6b:75:72:98:c5:b8:75:
                    80:a9:4b:12:34:de:fc:2e:a8:f1:b9:d4:9c:eb:21:
                    ec:df:49:a6:7a:a1:2d:39:86:d9:89:c7:10:10:b2:
                    95:ce:29:7e:41:2b:3c:60:88:bc:aa:9e:95:a0:ec:
                    4b:1c:7c:c7:99:35:08:ea:7c:7b:1b:de:32:f1:d7:
                    9e:8c:18:f3:fa:23:b6:50:2c:59:aa:d2:52:0d:e4:
                    60:46:a4:62:49:e7:b7:cc:01:a0:eb:ac:51:a0:fa:
                    42:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B6:A3:27:CE:1D:71:92:14:28:66:B8:ED:1C:8B:A7:47:C0:EB:82
            X509v3 Authority Key Identifier:
                keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9a:3f:c4:1a:89:dd:33:c1:94:f9:3e:70:dd:f9:5d:27:94:
         e2:ac:19:39:ca:48:e0:0d:fc:0d:50:1b:f2:19:2d:ba:d8:bc:
         25:2d:0b:80:b5:81:7d:5f:ee:60:77:14:5c:16:41:a5:02:b1:
         a1:b2:de:9b:ab:3d:60:ee:7d:07:c9:bb:a8:7b:1f:a1:43:10:
         48:2f:a4:bc:98:2f:d3:ab:f2:d5:15:0e:82:a5:ea:db:35:0f:
         e1:4b:22:a5:ff:dc:01:11:99:c1:d3:33:df:6c:a8:83:71:7d:
         ec:e3:d7:f7:ac:fe:13:fe:25:1d:95:d3:d1:95:06:9b:0c:8a:
         6e:17:6b:e1:ef:ff:07:7d:0e:f0:2e:3e:91:40:c9:d5:ab:5f:
         8b:07:79:9d:cd:68:a5:4d:3c:db:68:3b:cd:38:45:5d:bc:d5:
         66:7d:ea:f7:ab:a8:41:04:18:10:4b:a9:c9:b4:4f:f4:cf:24:
         ec:ef:60:d7:1d:12:65:43:33:29:b1:cc:72:42:91:ae:6f:77:
         9e:99:0f:6f:d0:c5:8a:36:31:ce:3b:e6:c2:71:ec:2a:55:df:
         34:26:70:ab:47:da:d6:62:fb:c5:8c:e2:d8:e0:f7:fb:0c:6d:
         bf:1f:46:f5:07:86:d8:af:97:4a:2c:f5:8c:d2:29:14:ed:96:
         24:df:3f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:10 2025 by rpki-client