Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
File:                     1zSS5NJcO70MXiDFqF7LIuyXNgo.mft (raw, json)
Hash identifier:          HAEupAolqZ1GXiXOqgtq+y57WQO+ak/MUUAneBGgzrQ=
Subject key identifier:   DA:EE:92:1A:82:D8:1C:61:78:83:6E:32:53:31:C7:02:16:8A:28:15
Authority key identifier: D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A
Certificate issuer:       /CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
Certificate serial:       0199FAD853148A5996B45E05CE69B5B96B60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
Manifest number:          0FD0
Signing time:             Sun 19 Oct 2025 05:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:44 +0000
Files and hashes:         1: 1zSS5NJcO70MXiDFqF7LIuyXNgo.crl (hash: jIAy+0aoaTBzqJicvvq8gFOy6OSbVnFA+/4T71rzI3U=)
                          2: 5xcSPqM5FqBggD3xhK_H_WBIj8c.roa (hash: 6UaEvDEdIHAI+VC/wqQ4jP8F3NZ9weH+TS5AN/LWzwY=)
                          3: NDt_WTrjoPL0cL8oTyPCRgNakA0.roa (hash: Hp1RzwRCWlMoxPuIUolhJVdqweoyQ9ReAqFHs5ETdBY=)
                          4: oTJ3WFdDrwDwPRwq0KV_9933-4Y.roa (hash: mhBZetUkSVK2917d65VbBa4ZgrfV11qg/and0h4flas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:53:14:8a:59:96:b4:5e:05:ce:69:b5:b9:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73492e4d25c3bbd0c5e20c5a85ecb22ec97360a
        Validity
            Not Before: Oct 19 05:01:44 2025 GMT
            Not After : Oct 20 05:01:44 2025 GMT
        Subject: CN=daee921a82d81c6178836e325331c702168a2815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:40:8a:fb:d7:77:73:7e:b8:14:f4:e5:2f:
                    c0:bb:80:ff:ca:e0:46:1f:d6:13:5e:1d:8e:9b:60:
                    06:ef:16:cf:b5:12:ef:8f:d0:c6:78:69:b9:25:7c:
                    74:93:eb:95:ae:7a:16:5a:76:5c:05:86:6b:29:6d:
                    a9:19:3e:dd:ed:52:be:84:91:5f:6c:51:42:ab:5e:
                    3f:85:89:96:a8:d7:35:ce:db:5b:62:fe:98:87:58:
                    0d:4b:46:2c:80:4b:28:56:cb:4f:ee:d8:df:65:9a:
                    c4:9b:fc:22:af:d8:c9:f9:b1:8c:53:eb:44:0e:80:
                    d7:42:14:39:a4:31:fe:d7:0e:f3:0c:b6:ae:37:da:
                    a5:24:3c:13:c9:d2:d1:f9:ad:16:cc:2f:a2:38:9c:
                    9c:8b:9e:42:9c:30:3d:2f:56:bb:49:84:48:6a:bb:
                    85:7a:f0:ed:c6:48:7e:d0:de:b3:5a:f3:e9:5f:03:
                    58:4d:36:a9:e0:3c:89:b0:10:83:5e:b5:b2:a6:ed:
                    c0:c8:e2:53:89:95:e0:ef:44:52:00:de:67:6c:7e:
                    78:b6:98:50:74:ea:54:f9:6b:9f:c4:a3:1f:38:5c:
                    af:51:58:92:84:ff:68:3e:91:28:5f:b4:d3:2a:2e:
                    15:4b:82:63:90:46:84:ed:08:e5:68:8a:db:42:f6:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EE:92:1A:82:D8:1C:61:78:83:6E:32:53:31:C7:02:16:8A:28:15
            X509v3 Authority Key Identifier:
                keyid:D7:34:92:E4:D2:5C:3B:BD:0C:5E:20:C5:A8:5E:CB:22:EC:97:36:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zSS5NJcO70MXiDFqF7LIuyXNgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/09aa61-87d7-4f53-9818-dec21eefa38b/1/1zSS5NJcO70MXiDFqF7LIuyXNgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6c:2c:a6:f4:1e:b8:dd:50:68:4d:be:6e:18:cd:0e:72:4e:
         d1:05:76:50:0b:a5:9f:e3:ef:d6:af:58:50:e3:d5:59:74:21:
         cf:74:1e:ca:c3:02:50:62:47:d3:cc:8f:e5:72:06:0b:f9:d6:
         0a:40:73:a8:0b:c0:80:c7:b9:f1:52:fc:f1:d6:18:dd:b2:38:
         d4:d4:55:1b:4e:af:c3:53:c5:f2:a1:48:b6:a4:02:51:9f:0a:
         13:09:86:62:e9:ad:e0:45:72:f8:7a:d9:fd:1e:ac:75:87:50:
         9e:81:9a:53:a3:d9:09:14:49:64:fb:e9:c2:7f:32:7e:b5:26:
         c4:ec:20:19:dc:83:4d:ab:cc:e8:62:62:e2:31:f4:83:f4:b9:
         e3:24:ed:4f:fa:0d:8c:32:af:60:33:b6:24:e0:dd:13:fb:ce:
         b0:30:35:a0:cd:70:67:0b:61:d8:3b:d5:39:35:51:0d:8f:73:
         82:1a:61:b2:f2:2d:d5:a3:e8:7d:c9:e0:1f:f5:a8:53:c9:81:
         d2:fa:41:e0:a9:9e:65:f0:10:cf:3d:cf:ff:8b:66:52:73:76:
         a2:8c:e2:73:e5:d1:70:fa:b6:f4:c0:40:a8:52:8f:ae:82:fe:
         75:88:0d:73:da:f1:f8:1d:29:80:85:d5:c1:9f:63:87:a2:c2:
         5d:78:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:11 2025 by rpki-client