Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File:                     Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier:          tm0kwY0VjPI6hTENfipLcA3KIrvjOb6U7zCF7EG7uGI=
Subject key identifier:   79:06:FE:20:53:B8:E3:12:C3:1F:1E:90:19:0C:EA:C1:CC:AB:08:13
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer:       /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial:       0199FC2180F71307BE1C367713D783403CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number:          028A
Signing time:             Sun 19 Oct 2025 11:01:18 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:18 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:18 +0000
Files and hashes:         1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
                          2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
                          3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: 98khoXM8c5ZXElJzukeaeyNyoE49k1tI4LclBBOwnLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:80:f7:13:07:be:1c:36:77:13:d7:83:40:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
        Validity
            Not Before: Oct 19 11:01:18 2025 GMT
            Not After : Oct 20 11:01:18 2025 GMT
        Subject: CN=7906fe2053b8e312c31f1e90190ceac1ccab0813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:4f:c1:62:0c:21:03:32:38:85:8e:32:5b:
                    e7:cc:af:14:0d:4a:27:4e:63:bf:60:cd:20:12:d0:
                    2c:40:f7:94:18:77:95:e5:fc:16:9f:5c:9a:42:31:
                    2e:49:83:df:86:18:53:61:e4:ab:1e:6c:3c:75:c8:
                    fe:7d:e1:aa:4d:7f:a8:b2:a9:33:a0:ec:18:ca:c5:
                    a9:03:9d:1e:65:a6:6d:4c:2d:df:9d:a9:aa:82:72:
                    54:c8:49:f5:af:ec:df:d0:b5:93:88:82:a3:e9:c5:
                    30:fe:f4:2b:fe:99:19:9b:c6:8d:29:82:4a:2a:f0:
                    31:19:22:35:ea:5d:ff:52:72:13:e0:b8:10:14:09:
                    67:a2:2e:49:8d:e5:f2:e6:09:57:63:f7:c3:c2:6e:
                    ea:92:79:13:51:d7:8c:f1:be:19:d4:bd:ff:ee:f7:
                    c5:43:fc:df:1a:f5:a3:ea:89:39:e6:32:7a:c3:19:
                    4b:d0:79:fb:49:6a:9b:e5:88:6a:c5:d1:6e:59:c1:
                    3a:88:10:99:17:c7:d6:b9:a7:2e:67:bb:14:d1:ae:
                    44:da:cc:b5:7b:db:37:30:68:94:b4:fd:b6:59:62:
                    56:93:83:37:74:33:1e:ba:31:63:9a:aa:77:57:db:
                    e1:63:57:77:ef:6a:35:33:4c:19:bd:77:11:f7:58:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:FE:20:53:B8:E3:12:C3:1F:1E:90:19:0C:EA:C1:CC:AB:08:13
            X509v3 Authority Key Identifier:
                keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ee:b3:2a:a3:c8:4b:09:10:7c:4e:d2:31:f0:53:34:be:64:
         a9:13:23:9d:c5:1e:a6:a7:09:f1:7e:93:fc:a4:d7:06:d3:23:
         8e:86:fb:3d:d7:dc:67:07:c9:10:40:5a:23:90:63:af:6c:f7:
         99:1d:ad:1b:5e:70:0e:64:7e:5b:28:78:f9:22:5f:9e:80:64:
         41:86:b8:29:13:91:0b:07:99:66:69:8f:d3:ec:18:73:55:4c:
         9f:d1:76:ea:7d:e2:f6:56:b2:71:b7:44:42:cb:c0:a0:8a:b7:
         d2:53:7b:29:20:11:0d:96:2d:86:b9:b6:59:95:8d:be:96:53:
         dd:26:48:37:4d:a5:c2:3d:b3:84:89:d7:bc:4f:5d:9a:60:0a:
         f2:08:17:51:c8:73:bd:43:b0:b8:23:80:34:5f:ff:2f:b7:ae:
         03:63:a2:8b:c3:f4:6a:fb:f0:9e:f5:ee:7f:93:e4:da:8c:16:
         74:47:ed:5f:d9:4c:f6:68:9d:a8:e4:1a:78:3f:12:3d:e8:9e:
         65:3e:45:97:23:ec:9e:1a:fe:94:69:2b:9c:a5:8e:a4:79:d8:
         6c:00:f3:02:83:04:8b:b3:0e:26:7e:2e:ff:25:10:3c:db:13:
         8c:4c:94:07:97:4a:c9:24:fc:a9:d6:2a:d8:a2:73:b8:b0:e4:
         72:d4:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:03 2025 by rpki-client