Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
File:                     RWF9LghjWN2nvbDcRmyhyG7U_so.mft (raw, json)
Hash identifier:          LIkCZD9m7WkQbvFGhwMRKQBa4PrGGSZfwvNXDv8tQzA=
Subject key identifier:   30:62:73:F1:CA:00:3E:48:86:BE:3E:F2:CF:2E:21:E8:66:A0:45:AF
Authority key identifier: 45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA
Certificate issuer:       /CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
Certificate serial:       0199FC2137C63C6E0F63C54E6771CFBAD5F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 11:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 11:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 11:00:59 +0000
Files and hashes:         1: Kp8YOETyXn_CJNlkKRcjiHTajds.roa (hash: pE4tiu3XHnbIpJeimbwG8Yyb4EwnGUv1VJS0J7muojA=)
                          2: RWF9LghjWN2nvbDcRmyhyG7U_so.crl (hash: cTGxCx9584tdznrMDnk6eQuT0G6h2/vLi3x0fN5/nQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:37:c6:3c:6e:0f:63:c5:4e:67:71:cf:ba:d5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45617d2e086358dda7bdb0dc466ca1c86ed4feca
        Validity
            Not Before: Oct 19 11:00:59 2025 GMT
            Not After : Oct 20 11:00:59 2025 GMT
        Subject: CN=306273f1ca003e4886be3ef2cf2e21e866a045af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:1c:ac:73:fd:56:8a:1f:a9:71:49:b5:72:
                    4d:05:fd:2a:9c:ac:22:0e:3f:28:5d:b8:3d:8b:06:
                    74:a3:5d:80:ef:b3:c7:20:84:e8:32:24:ca:4a:33:
                    21:62:07:b2:9f:ba:a0:a2:87:64:a4:d9:e2:ce:5f:
                    c3:a9:4f:9f:1f:75:80:ce:15:b6:45:c5:a8:33:b7:
                    b8:aa:b9:91:e3:7b:94:58:b8:11:a8:99:c5:89:89:
                    f4:bc:c7:8a:27:d2:81:c3:5f:0e:23:d2:83:47:45:
                    6d:77:77:dc:ae:98:0e:9d:bc:07:0c:f5:3b:68:02:
                    c9:62:5d:35:c9:0e:51:87:65:42:3b:28:e0:f9:97:
                    e3:c9:93:13:09:ee:26:74:67:54:9e:a4:ca:7b:8e:
                    b3:5f:84:68:c5:1d:aa:e8:71:cc:50:27:13:d1:45:
                    4f:42:5b:4f:14:4b:9f:45:a7:4e:ab:b0:77:69:eb:
                    dd:49:77:67:c8:fe:f4:0c:2a:49:72:8b:40:8b:ce:
                    a3:96:26:e5:6c:17:aa:48:9f:0d:c4:54:17:98:8a:
                    ad:bd:de:fd:79:c3:76:4b:4b:fe:47:16:b6:23:4b:
                    78:02:fb:57:16:73:46:96:ca:e7:e1:ab:37:bd:c1:
                    04:d1:b9:06:c2:72:d3:45:4f:13:7c:c0:15:fa:d8:
                    cb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:73:F1:CA:00:3E:48:86:BE:3E:F2:CF:2E:21:E8:66:A0:45:AF
            X509v3 Authority Key Identifier:
                keyid:45:61:7D:2E:08:63:58:DD:A7:BD:B0:DC:46:6C:A1:C8:6E:D4:FE:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWF9LghjWN2nvbDcRmyhyG7U_so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d81b59-c05a-48fe-b5b1-158927337689/1/RWF9LghjWN2nvbDcRmyhyG7U_so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:57:8c:0a:a9:0d:43:ed:c7:d9:28:9c:48:8d:80:ac:af:
         70:47:06:a0:8a:7d:38:e5:bb:77:66:66:24:91:77:c3:ee:b5:
         fc:0a:4a:d4:d1:16:78:7f:63:bd:de:21:47:2c:ae:8e:cd:28:
         0f:53:d6:2b:8b:b2:c1:65:fa:df:39:cd:b5:2a:bb:c4:bf:0d:
         14:0b:4c:52:65:72:5b:65:70:63:79:cd:ef:82:6d:78:48:29:
         42:d3:22:51:fa:58:36:82:d8:3c:d8:7e:34:9a:dd:c8:26:83:
         12:06:b5:87:50:7c:95:eb:4d:40:ec:19:c3:c2:bb:9d:92:a0:
         16:df:34:32:4d:10:b3:cc:24:b7:d1:98:7e:69:5b:08:0a:34:
         23:1d:1d:ca:26:b8:4d:fa:72:54:e4:d2:52:bd:64:ad:e5:8a:
         f3:ef:79:d9:8c:33:51:90:0d:a3:84:72:cf:6a:b2:f0:60:65:
         eb:05:78:26:02:3a:50:60:17:91:d4:a4:14:1b:c7:1a:93:80:
         97:ab:3c:1c:22:53:46:7b:4c:77:f1:be:d8:04:54:ef:72:ec:
         05:be:0d:cf:f2:c8:fb:de:93:5b:03:2f:c0:a8:1a:a9:c3:23:
         59:37:e7:76:8c:01:51:c6:58:45:4c:ed:87:fa:d0:cd:45:f2:
         fb:20:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:01 2025 by rpki-client