Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          tUrl5ai8A7M8DjBHtkxnzJeoocZj9Ry1OqbdMQ3dbHI=
Subject key identifier:   17:8A:6B:97:43:E4:D2:1E:73:E5:CF:6D:01:AE:EC:35:DF:4E:44:F1
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       019A04B5F441CFBA47F255B470816F62A203
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          0628
Signing time:             Tue 21 Oct 2025 03:00:24 +0000
Manifest this update:     Tue 21 Oct 2025 03:00:24 +0000
Manifest next update:     Wed 22 Oct 2025 03:00:24 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: wq0ztWDhZ3nrrkkmq3zOzWBcJE+b7gFaaCRtbD8SiN0=)
                          2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
                          3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:04:b5:f4:41:cf:ba:47:f2:55:b4:70:81:6f:62:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Oct 21 03:00:24 2025 GMT
            Not After : Oct 22 03:00:24 2025 GMT
        Subject: CN=178a6b9743e4d21e73e5cf6d01aeec35df4e44f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:f8:f7:3f:94:cc:74:bb:6b:74:c0:c0:da:
                    51:ff:1b:29:63:70:ed:af:c7:30:7e:c0:04:56:8b:
                    4f:fa:24:db:cf:6b:62:03:e2:ce:a2:54:f7:ed:af:
                    a4:9c:a0:78:d1:d0:56:43:63:cd:0e:09:ae:ad:d1:
                    7f:f8:dc:54:79:fc:12:9b:48:db:0b:0c:b6:14:0d:
                    b4:28:8f:2a:cd:8f:02:4d:27:43:ec:f0:6f:c6:9b:
                    36:b8:18:23:5b:0a:98:f4:77:f3:7a:e4:9e:be:50:
                    56:8a:1a:80:2d:18:17:47:10:d6:ac:a6:bc:f0:52:
                    80:95:b8:80:7f:f9:f1:c7:11:99:73:a5:98:aa:d1:
                    b0:4c:06:cf:3f:4d:fa:a5:d1:62:f9:51:c9:c0:44:
                    d9:e0:1e:4a:f5:76:d9:e9:d2:70:d3:6e:86:e1:06:
                    7f:11:2c:21:0c:7e:51:b5:65:c9:4b:49:d8:73:a1:
                    02:d0:07:69:bf:4e:50:84:81:1e:8f:35:18:1c:d1:
                    d7:a5:2a:5b:74:ae:fd:e1:be:06:de:27:90:89:5b:
                    d7:2a:11:87:89:b9:45:09:7e:41:df:6c:27:3e:95:
                    a9:b9:ea:23:25:09:77:72:7a:f3:c7:85:fc:fe:93:
                    6c:0f:b6:3b:0e:a1:3c:7d:9b:ab:9b:83:57:ac:88:
                    59:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:8A:6B:97:43:E4:D2:1E:73:E5:CF:6D:01:AE:EC:35:DF:4E:44:F1
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:63:63:5f:21:8f:74:b1:df:ab:5d:9d:60:ac:02:c8:29:00:
         45:93:21:01:14:9e:0e:a1:52:98:f2:e2:c3:a4:2d:38:3b:5c:
         2e:8f:fb:c4:45:55:1b:19:38:23:83:05:1f:9c:36:ce:e2:e5:
         d5:40:69:05:49:d3:a8:a8:5e:3f:dd:5d:2f:1e:00:ba:fa:b2:
         ad:6b:f4:3c:9b:eb:41:9d:63:98:31:e2:aa:54:36:f2:b4:21:
         54:e1:14:b3:31:1e:d8:92:3d:ce:6a:b3:8f:7f:58:76:07:19:
         95:68:58:a0:cb:62:64:4f:b1:61:89:c7:ec:9e:1c:f8:0e:88:
         cc:e3:7a:ee:fe:4c:f3:fb:28:61:a9:50:b0:13:50:15:6c:85:
         bf:24:f9:8c:a9:d7:c7:61:eb:b2:71:32:71:2b:91:f0:db:85:
         cb:5b:08:6f:0e:cd:5b:9c:39:f8:27:40:eb:ea:7c:74:b6:2d:
         b3:05:3d:8c:47:16:dc:e7:0f:4b:f7:33:50:f5:40:2b:7a:74:
         15:cb:25:dc:22:39:d5:d0:ce:51:f0:d5:5b:c3:02:a6:d3:df:
         77:dd:de:b7:66:8d:4e:b4:b7:78:23:d1:cc:61:99:e4:e1:23:
         88:fa:88:21:11:6f:40:1b:f4:f4:f2:52:14:c7:cc:93:1d:4c:
         70:e7:b2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:28:01 2025 by rpki-client