Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File:                     1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier:          quAwa+RrHuDrPRYlpo1gBlgtQwwNihZxJVU0YHQCq8s=
Subject key identifier:   7E:81:AA:C8:01:57:27:C0:35:49:34:30:C1:6E:B5:46:64:70:EE:6D
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer:       /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial:       0199FE472C7CC46BADE32F3E9048B623C18F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number:          05BC
Signing time:             Sun 19 Oct 2025 21:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:41 +0000
Files and hashes:         1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: lNpX3DWrubeQToDCMZKMu9Zrd8kdOuhbAI10VCRJTvk=)
                          2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:2c:7c:c4:6b:ad:e3:2f:3e:90:48:b6:23:c1:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
        Validity
            Not Before: Oct 19 21:01:41 2025 GMT
            Not After : Oct 20 21:01:41 2025 GMT
        Subject: CN=7e81aac8015727c035493430c16eb5466470ee6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ab:76:6d:cd:51:e0:cc:4e:54:65:62:e8:59:
                    f8:1d:aa:c0:f8:0a:5e:02:29:4b:d5:35:e9:d0:ec:
                    b2:4c:e4:e0:a7:a6:33:c3:a5:e8:d6:18:d4:17:dd:
                    14:cf:aa:f2:7c:d3:fe:05:c4:e1:74:0b:c7:67:85:
                    e1:ca:47:f8:6e:a7:9b:11:f1:91:07:27:10:36:8e:
                    d8:c1:f0:11:b0:78:19:f1:9b:23:e8:bd:b0:5f:ae:
                    ca:9c:4a:7f:5b:b4:43:51:65:47:c7:3c:b8:d2:42:
                    09:80:79:d3:a5:b9:fc:c1:1c:9d:df:43:05:f9:28:
                    55:8d:c4:d9:25:dd:7b:d1:12:f6:8a:f0:ab:3f:5d:
                    7e:89:48:83:a7:95:f1:c4:46:06:de:08:e6:22:5f:
                    6b:42:a5:4f:43:3a:e6:83:33:51:e6:5b:11:8f:db:
                    87:f2:05:13:9a:d7:2b:e9:b1:4f:d0:b2:01:b6:b2:
                    e4:55:cd:21:cf:90:4e:77:87:78:b9:52:48:ee:9a:
                    d3:6f:a6:89:ff:dd:3b:40:b3:64:92:2a:95:11:37:
                    b1:3a:7b:61:77:e7:74:38:4a:9a:5e:aa:b9:00:70:
                    e1:c4:72:f8:e4:33:9e:e8:fe:27:d8:40:27:38:76:
                    02:16:40:c5:73:e0:65:ef:e5:bb:57:98:b1:86:a1:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:AA:C8:01:57:27:C0:35:49:34:30:C1:6E:B5:46:64:70:EE:6D
            X509v3 Authority Key Identifier:
                keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:41:e7:f1:11:81:d3:47:0b:99:10:e2:0c:27:12:81:24:0d:
         68:d1:e2:9b:24:52:80:d4:57:fd:2b:86:21:bf:eb:ca:f5:62:
         e4:11:29:58:de:e9:f4:71:a1:cf:c5:52:00:a9:46:9d:27:a1:
         a5:24:a4:22:aa:3a:57:99:3b:a0:6e:27:1e:bb:7d:bd:75:b3:
         a1:30:7a:6d:19:70:94:0b:cc:1a:55:22:45:da:2d:07:0c:aa:
         62:00:9d:20:90:57:9e:f8:a1:6b:7f:cc:50:11:18:43:d4:f2:
         29:e0:ed:01:f8:bf:53:b3:82:df:0f:74:bf:47:ad:9e:c9:02:
         d4:52:36:32:63:f1:a3:05:e3:2a:41:57:73:45:34:81:09:43:
         30:52:97:a2:cb:6d:01:5d:0a:35:63:b4:f1:6b:ac:b7:25:30:
         19:b7:91:03:c2:e9:d8:9f:9a:4f:ad:f8:66:2d:6f:77:95:d0:
         fa:a3:2a:be:c7:39:f0:2a:d0:0f:85:0b:61:4a:12:99:61:a8:
         92:b8:d9:e8:4c:6b:a9:a6:7e:7f:6b:9c:28:3a:12:14:b2:fb:
         87:ca:12:e2:69:c3:7a:da:e7:da:34:a2:c0:ee:7c:ef:7e:57:
         06:98:e8:22:cb:0c:1e:df:ae:62:76:45:af:4a:45:48:67:16:
         6f:01:2c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:00 2025 by rpki-client