Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
File:                     i9rBinrVAbp-oTVnkJ8X5PcydBM.mft (raw, json)
Hash identifier:          vIUK9zrfh29imQfAW4jyABrZ1/IoX6yRtyV/Mi33mB4=
Subject key identifier:   1D:8C:99:83:5C:7D:6F:2C:1F:18:C1:8F:FC:21:54:E2:E4:7E:6F:94
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Certificate issuer:       /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial:       0199FD34211E20606DB8C1AD44479DD2F93E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
Manifest number:          1652
Signing time:             Sun 19 Oct 2025 16:01:15 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:15 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:15 +0000
Files and hashes:         1: 32R6bWlY_kT-IdzSOS6jUQoRg-4.roa (hash: xWfBJ4oVxeGqTJ5vFTiwfbecb58t1uRd3p+DZin3epw=)
                          2: HP_SsTP0iECRo2qQTfpc4ow4BYk.roa (hash: bGvpmINQH9SYwwDIsLytTIqIgfQUsNxOvfIPBHdX/N4=)
                          3: Q_hIcWDqn-PPQ56DLKDjeCBoXsw.roa (hash: MwFedjwgPwjvhrH7DUyYSiNCIyagEddbNZKwfOKaBy4=)
                          4: UbRiiNRPdI8MdUZD3H45dXG9KbE.roa (hash: ++edDwYhafn/DmjVTYR5FglX/ixBfBBX5Ov1+q3i1ek=)
                          5: _tBUXGLFeeKTNMit4od0RNATZXo.roa (hash: athIqN712Nn9ZvwJAZkQ9ogvGwW83fg7Abmm94I+u1U=)
                          6: hEJxhg9SzRAq0K6L58EjzXPZnDg.roa (hash: ccaUWhka+1gikh07jNowzbblvhiIUCKQLkaV3vwDt2Q=)
                          7: i9rBinrVAbp-oTVnkJ8X5PcydBM.crl (hash: pDcFyWaDpXMkWL+rVhCak9GWtQ9s2iRwLMtN+L5H5YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:21:1e:20:60:6d:b8:c1:ad:44:47:9d:d2:f9:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
        Validity
            Not Before: Oct 19 16:01:15 2025 GMT
            Not After : Oct 20 16:01:15 2025 GMT
        Subject: CN=1d8c99835c7d6f2c1f18c18ffc2154e2e47e6f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:5e:7f:fe:9a:d6:b0:12:48:d1:8c:80:8c:
                    1c:01:4b:32:ec:35:00:d9:72:0e:d6:88:63:ba:38:
                    69:1c:2d:d6:ee:d1:81:05:14:20:1e:0d:70:74:c9:
                    af:f7:11:9a:9b:7c:42:53:92:97:c8:b2:3d:15:52:
                    f5:81:da:ee:84:45:2d:e1:0f:7d:60:26:f1:bd:db:
                    79:b3:8e:02:2e:1b:de:e0:f0:c1:76:3e:83:2a:df:
                    1e:a6:ca:7c:ab:ef:44:bb:9e:31:6a:84:12:81:6c:
                    be:4b:f9:e2:df:23:ad:b8:dc:90:d2:a6:92:e6:07:
                    bc:ac:21:e8:78:9d:06:00:ff:61:88:92:27:67:4a:
                    47:b0:70:e6:55:e9:16:22:dd:31:67:06:73:c5:c3:
                    0d:67:d3:a1:5c:13:8f:cb:ec:14:de:b6:2c:c0:93:
                    59:7d:fa:47:38:4c:e1:05:6c:9f:93:08:4c:5b:5c:
                    1b:74:8c:28:4a:78:b3:5a:23:fe:08:dc:63:b2:cf:
                    f4:00:19:c6:e0:7b:64:d6:10:33:7b:1a:23:3a:e9:
                    18:45:89:1f:30:b5:23:a6:c1:a4:eb:88:f3:c9:d4:
                    92:3e:1e:68:42:74:97:08:8c:2f:20:99:d9:97:33:
                    b8:86:a5:eb:33:6d:2a:f5:cb:5b:6d:fb:97:51:91:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:99:83:5C:7D:6F:2C:1F:18:C1:8F:FC:21:54:E2:E4:7E:6F:94
            X509v3 Authority Key Identifier:
                keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:22:e5:86:11:f4:b7:31:2f:1f:0b:80:98:c8:b9:b3:6b:8a:
         02:6d:2f:c1:17:16:94:46:12:48:2b:b9:c9:35:25:47:79:73:
         d5:0d:31:15:27:03:f8:11:7a:4a:a2:fe:8f:d9:17:f7:d6:7b:
         c9:d0:b7:3c:43:fa:f6:ed:b5:26:fc:0f:f3:26:12:c4:49:d2:
         44:23:79:59:97:3f:10:0e:ba:f3:f9:17:ec:b3:86:44:fa:3a:
         c5:67:4c:42:9d:92:9b:59:ee:df:13:11:da:f8:05:06:97:6a:
         a0:ca:d2:02:4e:82:32:bd:4b:bf:09:1e:c4:d5:5e:ea:23:f6:
         b1:b0:db:0d:1d:c5:62:f5:cd:b4:d6:9f:9a:91:3f:f8:27:20:
         d4:01:35:d1:fd:cd:16:10:ee:7d:82:7c:43:a2:b1:ee:f5:b6:
         3d:cb:3a:89:aa:02:0c:1c:a9:9c:31:a6:90:9f:b6:6e:b5:aa:
         80:29:29:95:57:37:7a:f6:cc:7a:1e:04:8b:ef:3f:13:38:db:
         4c:5e:93:04:2c:c5:bb:52:1d:2f:10:3d:08:b9:11:aa:af:c5:
         ac:aa:8c:3b:0f:fe:0f:83:be:47:65:28:36:05:da:66:db:c4:
         76:98:01:2f:83:db:2c:07:e5:a9:5a:19:bb:25:f9:17:37:21:
         ee:4f:8b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:39 2025 by rpki-client