Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
File:                     sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft (raw, json)
Hash identifier:          c/92PBqa2zdCJDc/z0WNYYbc8+CIe12EWOqJLioXP/8=
Subject key identifier:   A1:CE:9F:14:CD:21:33:E8:BC:D8:76:65:65:9A:8C:16:5B:8C:2C:FA
Authority key identifier: B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C
Certificate issuer:       /CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
Certificate serial:       0199FE1058BD7EE01E51CA9A0A9A42EB55D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
Manifest number:          0B5F
Signing time:             Sun 19 Oct 2025 20:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 20:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 20:01:48 +0000
Files and hashes:         1: pp7YHiA9bCcV4n9KXbmtGvXw0Hw.roa (hash: xXtqKC6cCm9cF/kgqDQZlMKjBn2ULr5S39vUn/a3JHc=)
                          2: sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl (hash: gks/E4GOYmeM/IhXaFYpJbyZEQ04QU00axs9L3fDnHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:10:58:bd:7e:e0:1e:51:ca:9a:0a:9a:42:eb:55:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19549d68305e29dfb00069a52d3d4e1f2c5604c
        Validity
            Not Before: Oct 19 20:01:48 2025 GMT
            Not After : Oct 20 20:01:48 2025 GMT
        Subject: CN=a1ce9f14cd2133e8bcd87665659a8c165b8c2cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e7:9e:2c:38:a9:0f:09:83:b0:c2:60:3f:69:
                    a1:e7:c7:2b:66:99:30:e5:08:0b:89:f1:b1:aa:24:
                    28:32:1c:2d:c3:57:bf:81:aa:fc:86:75:66:93:63:
                    ac:92:4a:d3:26:6e:86:44:6a:66:7b:dc:04:2a:cc:
                    c4:ae:91:d8:8d:67:c1:5a:68:8e:eb:8c:c9:a9:e0:
                    3e:8a:88:5e:c6:c4:b3:36:db:32:60:ef:c6:f2:8b:
                    f7:4f:ef:a5:3b:f7:a4:d8:45:25:03:b4:70:31:39:
                    6f:f0:4a:17:67:70:a0:30:7d:35:85:ee:db:fb:db:
                    e3:30:ff:32:7c:1a:69:e5:75:52:62:2e:72:56:2c:
                    5e:4a:2c:14:74:57:60:43:ab:bc:b4:a4:65:94:71:
                    82:14:b9:e3:8b:55:d6:90:b7:a8:dc:d7:b6:0c:07:
                    38:5e:da:a2:27:88:c4:6c:af:8f:36:8d:b7:e8:9f:
                    e9:c5:30:22:2e:8c:75:86:19:17:5c:a1:e9:27:b2:
                    0c:0e:9e:2e:d9:ca:23:72:5f:bb:d7:2d:4d:9e:ed:
                    b9:f6:a8:d4:5f:1c:63:f9:90:3f:2a:c8:bf:12:52:
                    7e:85:b5:fc:59:1c:64:f2:64:78:3a:87:72:c7:8c:
                    b3:d4:77:1e:29:3d:9c:0d:e3:82:9e:c2:f2:be:8e:
                    72:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CE:9F:14:CD:21:33:E8:BC:D8:76:65:65:9A:8C:16:5B:8C:2C:FA
            X509v3 Authority Key Identifier:
                keyid:B1:95:49:D6:83:05:E2:9D:FB:00:06:9A:52:D3:D4:E1:F2:C5:60:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZVJ1oMF4p37AAaaUtPU4fLFYEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/af1f72-ce8e-42b1-be5a-a283c9048f0f/1/sZVJ1oMF4p37AAaaUtPU4fLFYEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:40:e6:7a:49:d0:3f:f4:55:61:11:c1:0d:0b:dd:fa:45:
         8a:04:37:d3:6c:d3:cf:11:41:01:27:da:e8:17:bb:ec:1b:22:
         4b:fa:af:d1:f7:d4:de:d4:a6:95:06:0a:fc:ab:89:60:8c:55:
         71:b2:46:67:97:55:8e:b2:9e:19:96:f4:16:12:34:f9:b6:b9:
         cf:ce:e7:bf:ec:2a:fa:48:fb:a7:1e:85:b0:fd:d1:3d:90:75:
         f5:6b:ec:67:fe:94:fe:0d:13:3d:1a:fb:38:f3:02:5d:f1:ff:
         c6:c0:d6:46:79:b9:85:48:d6:37:18:ae:99:11:02:ca:df:ed:
         b3:29:91:ba:87:7e:d9:9f:2f:fa:1f:69:01:cf:70:7e:65:34:
         cb:c8:6a:a0:c7:eb:81:9a:db:77:47:07:88:f5:b9:47:08:95:
         fd:80:db:18:b7:cd:12:19:1b:2f:ee:08:69:ef:55:8d:03:07:
         72:5d:d4:ac:8e:5a:e5:49:da:2c:ce:81:dd:86:a6:6c:2d:b1:
         38:01:21:8a:94:55:90:e5:0d:72:46:7c:2f:04:a7:7a:98:be:
         9e:84:65:c9:24:10:7c:8f:ce:b0:77:06:bc:e8:95:d6:71:a7:
         c2:86:32:00:fe:8c:30:50:b1:33:c5:3a:27:e5:23:ce:50:c8:
         9f:12:a7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:16:14 2025 by rpki-client