Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
File:                     04V55MfaAd8EZRhiNumvJ-tzEu0.mft (raw, json)
Hash identifier:          AGl7QGLIoTfr9zoK8GERwWMCZ0c7ieRmYLkJs9Ppzwk=
Subject key identifier:   45:B6:E5:6C:A0:49:DA:EB:50:8A:41:C8:6F:48:3C:CB:FB:86:66:60
Authority key identifier: D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED
Certificate issuer:       /CN=d38579e4c7da01df0465186236e9af27eb7312ed
Certificate serial:       0199FEB479152D45FE198C74D66A6D70650E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
Manifest number:          0429
Signing time:             Sun 19 Oct 2025 23:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:04 +0000
Files and hashes:         1: 04V55MfaAd8EZRhiNumvJ-tzEu0.crl (hash: 8ynPUMN+TjwlgT1FSKRqOxKUkcA8Q1h4Bqr4yDhKWAY=)
                          2: 69DdI940Yh4oMejHIlOAybu5hGs.roa (hash: oNe0WU8knWo/mXYKX1G8NRoFBB3BCMhioapXHf+HLEg=)
                          3: Uxu1JjHkshCCeiHLHxVp_E0lRZs.roa (hash: YvTnmumvwq+sxP66uResD/jRGFZs7Uiz5KOMG1wGYVo=)
                          4: lLapjcdu9pW40ntTmus4mLCMMao.roa (hash: MG8R+EP074Ya4+jL+dMKnWgExZH+J/kJfQaN+eeMgg4=)
                          5: otPEIjukLSXBX1LNzA0kpJ-Qcfs.roa (hash: s8s/CT+3vYo5BDl9VfuNpa4iWRnSeVvGtwmOw+eay5E=)
                          6: ye7c9m6rG8EHvz3fSqWQC8eRnw8.roa (hash: OFM1TpyE+vNA8yY6b7k5rCn5DIDXAB7vZilkBN1528I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:79:15:2d:45:fe:19:8c:74:d6:6a:6d:70:65:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d38579e4c7da01df0465186236e9af27eb7312ed
        Validity
            Not Before: Oct 19 23:01:04 2025 GMT
            Not After : Oct 20 23:01:04 2025 GMT
        Subject: CN=45b6e56ca049daeb508a41c86f483ccbfb866660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:84:93:1d:b0:1a:9d:ea:20:de:48:01:df:bb:
                    66:95:e8:af:0c:43:a2:0a:c5:74:cd:63:d1:44:43:
                    d5:8c:6d:42:a2:62:15:cd:25:71:bd:87:26:c0:8e:
                    1f:07:8a:3a:15:e5:bd:3a:ce:74:d1:ee:6e:4c:7e:
                    12:0f:7e:a5:6c:6f:98:b8:f1:77:7b:57:f0:ed:5a:
                    fc:ca:b0:d3:ed:af:23:df:ae:d2:71:63:b9:b9:53:
                    61:fc:5e:a5:00:25:8e:bd:d5:78:72:a1:20:19:0d:
                    1f:da:07:e4:be:18:3a:4e:79:b9:ff:df:1b:85:bd:
                    21:0c:b7:23:21:79:aa:5b:74:ff:ce:15:4e:71:ac:
                    8d:9a:1a:a4:f6:3f:1d:7b:ac:ef:a1:d6:51:56:33:
                    53:f3:f4:05:93:08:e1:65:1f:3a:d6:65:86:f8:15:
                    ea:59:f4:6d:e5:9b:07:c6:c8:da:2d:a0:6a:b0:44:
                    cc:60:15:66:09:bc:07:14:b9:d0:a4:9d:05:61:14:
                    31:09:5d:83:1f:30:97:19:e9:40:70:0f:b4:df:ee:
                    15:91:33:70:94:ff:0f:96:1d:5c:47:7c:e2:b3:cb:
                    ce:13:a3:d7:14:b3:39:83:83:fc:09:1f:8a:d7:55:
                    e8:01:69:b2:e9:73:38:99:ef:5d:98:80:07:5e:50:
                    ec:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B6:E5:6C:A0:49:DA:EB:50:8A:41:C8:6F:48:3C:CB:FB:86:66:60
            X509v3 Authority Key Identifier:
                keyid:D3:85:79:E4:C7:DA:01:DF:04:65:18:62:36:E9:AF:27:EB:73:12:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04V55MfaAd8EZRhiNumvJ-tzEu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/94622d-c26d-4376-b059-bd405419b00d/1/04V55MfaAd8EZRhiNumvJ-tzEu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:88:90:77:f8:45:b7:75:41:2c:69:75:3b:7b:d4:f0:fc:
         bf:92:c5:35:8e:a9:e5:c1:a9:5d:44:3e:ee:0c:2f:8f:f1:43:
         0a:ed:fd:32:9e:2f:d2:3c:58:a0:f0:f6:c7:a4:ba:22:9c:94:
         8a:32:1f:14:fd:4f:9b:bd:6c:37:d9:2c:32:97:be:75:c1:6c:
         45:11:f9:bd:ca:7e:2e:53:de:83:6a:02:80:df:ba:b1:0f:36:
         8d:ae:df:20:12:fe:fd:5f:aa:e1:98:8c:7b:9a:bc:db:10:82:
         ab:6c:ce:62:c0:0b:70:7d:42:e1:99:95:6c:8a:8f:96:e6:23:
         11:ef:d4:1f:5f:b9:bf:a7:e0:68:3b:aa:56:e7:e5:1d:03:d5:
         46:6b:49:ab:fc:41:68:68:02:d7:40:f5:6d:fb:ad:5c:8c:42:
         7d:16:00:fb:27:81:e7:95:c5:6c:b7:15:e3:05:56:3d:5d:1c:
         2b:a6:b5:57:55:ed:7f:52:c0:66:19:3c:90:21:eb:a9:6b:67:
         a5:32:ef:21:a8:22:53:6d:70:9e:33:62:39:cb:ca:c9:bb:2b:
         35:56:ab:90:6f:40:55:7e:cb:58:a7:68:09:e2:4f:1b:16:f4:
         78:b3:82:9d:31:2f:00:0d:a2:3a:a7:79:ba:23:fb:18:f3:e9:
         ed:d7:03:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:08 2025 by rpki-client