Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File:                     1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier:          SM+w0baO05ErIupS7x/wHH7LRSX4E8z/4r4yFZBlhEw=
Subject key identifier:   F7:42:F9:BD:25:14:26:1F:9C:35:6F:E2:55:92:E2:ED:AF:40:F7:BE
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer:       /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial:       0199FC218EE74BEBC791E6146B007D6C098D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number:          04D1
Signing time:             Sun 19 Oct 2025 11:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:21 +0000
Files and hashes:         1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: Q4ptU/nAJu230KwTFS2U9sun1gWjnEYoWTARVn+3D1k=)
                          2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
                          3: UjWNhRVDS1dQtyrLqu8XE8cVl2c.roa (hash: VP+asIeQeiE6n/s3d0KCeiS8nBmXkURRsgcwQHE149Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:8e:e7:4b:eb:c7:91:e6:14:6b:00:7d:6c:09:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
        Validity
            Not Before: Oct 19 11:01:21 2025 GMT
            Not After : Oct 20 11:01:21 2025 GMT
        Subject: CN=f742f9bd2514261f9c356fe25592e2edaf40f7be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:c3:32:40:dc:cc:19:ff:d6:2c:c4:f9:7c:
                    05:47:c5:bc:50:22:56:a6:7f:e5:ac:2f:e7:73:6c:
                    e1:12:79:14:20:34:1a:9d:61:71:3a:a2:b1:dc:be:
                    6a:96:6f:ed:25:6b:34:d2:30:13:cb:31:23:5c:38:
                    70:66:76:41:25:dd:b7:48:12:35:88:8c:3e:ea:97:
                    cb:8f:3f:a2:d6:f0:4f:ff:22:3a:c7:c7:43:5e:ae:
                    a5:40:8f:02:f0:e9:52:ae:be:1e:c8:c2:b5:7e:40:
                    11:9d:f1:84:51:38:99:06:bb:8e:4d:d7:44:db:7f:
                    b9:f7:b0:43:31:88:c5:51:0b:f8:67:8c:0a:69:53:
                    f3:06:c9:f8:d0:50:89:38:89:62:52:48:45:d7:15:
                    46:16:98:f7:1d:d0:4c:73:c4:69:ac:1b:f0:fb:c9:
                    04:9d:d2:4a:0c:89:6e:57:e2:4a:5e:ab:47:e5:55:
                    fb:1a:54:3b:08:8d:ab:46:2f:a5:9c:fb:34:cc:24:
                    e7:06:92:ec:c0:25:a5:c9:35:61:47:89:be:1b:2a:
                    69:0e:58:ab:ac:75:27:1f:fc:65:19:83:12:fe:12:
                    a8:ec:62:d3:9d:c1:a1:72:ae:e2:df:e7:13:ff:36:
                    f2:67:c7:8c:7b:b9:57:2f:a7:ff:fd:ca:88:45:dd:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:42:F9:BD:25:14:26:1F:9C:35:6F:E2:55:92:E2:ED:AF:40:F7:BE
            X509v3 Authority Key Identifier:
                keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:48:c8:d4:e3:34:a6:a8:bb:e6:46:ff:a6:f9:e5:da:83:1c:
         7a:5e:a4:0c:86:c0:df:c3:fd:33:4e:e2:7b:91:c0:72:9c:16:
         4d:3e:f4:5a:74:8b:07:d8:f2:6b:f5:01:7f:11:dc:18:23:74:
         b5:a1:2f:2f:cb:ae:0a:7c:4c:33:75:14:19:c4:d0:69:42:9e:
         06:0f:80:a2:b7:6c:7d:7e:e2:bb:15:0c:ef:df:d1:48:b3:e9:
         25:65:52:cf:c0:e5:62:1b:03:8f:21:75:33:91:3b:9e:f3:d7:
         33:f6:d8:ec:a6:99:7c:74:08:b3:06:32:4c:d8:95:ec:6e:eb:
         69:5b:71:95:95:6e:16:13:8f:e8:84:af:5d:39:39:ea:bd:e4:
         03:72:40:3e:da:b4:67:ef:e4:2b:00:af:87:89:f8:42:44:1e:
         da:f9:e0:6c:a1:2c:a3:10:f6:bb:19:0c:22:10:35:5d:eb:89:
         4e:4e:07:53:0e:fb:c8:07:c9:89:8f:87:f4:b6:60:58:44:c4:
         4c:5c:9d:85:27:58:7c:21:11:4e:7c:f2:92:41:42:1c:d1:1e:
         b4:d7:a5:da:7f:2b:c0:20:2c:2b:f7:0f:47:79:dd:b1:fb:bf:
         40:de:d4:72:e4:0a:53:ef:89:57:b7:51:d6:28:68:d2:05:b8:
         f3:34:68:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:32 2025 by rpki-client