Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          Q+CtkU/48S7fuILr735tNsEbz6ZEHZQbcK47DbN2TMw=
Subject key identifier:   29:B9:CA:7F:CE:6E:F1:9B:E7:D6:57:DF:FD:D4:B1:ED:00:71:C2:8C
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       019A006C7DEDB21AF9AF8A59EF225AF06C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1705
Signing time:             Mon 20 Oct 2025 07:01:41 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:41 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:41 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: zZu+ayTF7Ip2TzvccfDNNo5+IbG7/9A0LpSLB37uJvY=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: JOvZJvxVCIjogtIv-LfIwpT-8XY.roa (hash: IRDQFzfaDrUN19oYWZOku8P+RpACtFrOm+7KAJXqJUs=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:7d:ed:b2:1a:f9:af:8a:59:ef:22:5a:f0:6c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Oct 20 07:01:41 2025 GMT
            Not After : Oct 21 07:01:41 2025 GMT
        Subject: CN=29b9ca7fce6ef19be7d657dffdd4b1ed0071c28c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:b5:29:63:52:e6:f6:06:91:76:ed:c9:39:
                    05:0b:bf:15:d4:31:4f:70:db:26:5b:ba:2c:d2:ae:
                    1d:58:cc:3c:80:4d:63:06:24:7c:da:11:71:a4:08:
                    1e:22:97:f6:17:6f:bd:8f:e0:f4:97:13:4d:8a:e0:
                    c7:12:c5:9f:e3:7f:3a:5d:51:65:83:26:8f:02:9d:
                    a2:2b:0b:09:54:f3:4f:73:a1:42:f7:43:c5:1c:d9:
                    25:a2:20:19:f0:36:c0:90:0c:55:af:46:f0:b8:3a:
                    59:7a:ec:76:c4:7a:15:02:5e:50:50:ea:90:7a:aa:
                    d4:87:f3:f2:f1:af:0c:cd:35:19:3d:1b:3c:9a:a0:
                    af:91:e6:fe:1d:c0:df:aa:13:3e:b9:23:d5:c1:df:
                    64:8a:38:b7:54:d2:9e:08:54:fb:dd:5d:2a:90:82:
                    5a:9d:cc:a9:09:81:48:e5:32:69:90:96:9d:f9:94:
                    3a:10:01:71:02:f4:79:66:94:a2:2d:c9:22:a6:6b:
                    6d:69:5d:b2:f7:5a:26:8b:3f:09:94:dc:4d:11:ec:
                    c7:05:88:78:e3:da:12:16:30:14:67:5f:a0:79:b9:
                    f4:e4:d5:bd:1d:e4:5f:d2:96:be:aa:e0:38:20:ac:
                    ca:83:c8:5a:5d:42:bb:fa:bf:fc:2b:70:78:3a:bb:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:CA:7F:CE:6E:F1:9B:E7:D6:57:DF:FD:D4:B1:ED:00:71:C2:8C
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:92:28:03:d6:92:10:8f:86:f3:e9:63:8f:ae:21:3e:22:
         c5:57:fa:30:03:cb:4f:bd:53:75:09:20:ca:1d:af:04:ef:bf:
         2f:e7:22:a7:45:46:aa:ee:65:56:83:9d:3a:2b:93:da:30:9e:
         cb:00:d1:01:74:77:17:0e:53:c3:7d:51:a8:59:e5:1e:89:70:
         af:20:1f:a3:76:bc:0c:b6:f2:6a:cd:de:60:df:61:0f:61:30:
         c5:4c:05:fc:65:a3:cd:91:42:75:5a:72:c4:0a:0d:ba:88:53:
         3d:f1:dd:0a:ec:e2:55:b7:9c:7e:be:1e:a9:d8:19:66:54:03:
         dd:e1:01:da:34:76:cd:ae:23:69:90:45:6c:95:ba:72:69:a1:
         86:96:68:a5:9d:00:f0:75:dd:76:30:9d:cd:9f:49:54:76:e4:
         d3:d3:10:dc:b3:c6:9b:71:04:ff:42:ab:03:05:e2:b0:dc:31:
         fa:ff:35:fd:6b:39:68:b6:4e:b1:f3:7d:45:c7:d3:b5:77:f4:
         80:03:2e:e5:01:1e:c0:d8:c2:ef:6e:70:a8:d1:81:ac:8e:99:
         6f:f5:9d:c6:24:51:5d:53:60:08:bf:94:13:da:c1:d6:b4:f4:
         6d:67:c2:84:b4:f8:e6:e6:3c:b7:cd:5b:a4:c0:ee:81:2f:92:
         18:52:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:35:20 2025 by rpki-client