Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File:                     4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier:          jRJAZIQpOvLs42EZFflf2PaIy4MqwAURO+Xo9GvvH8I=
Subject key identifier:   C1:E1:C7:2F:76:06:81:4C:52:60:CB:5E:47:D6:78:CF:DF:DC:48:B2
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer:       /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial:       0199FE7D7FFE0A1083679A8A244099770A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number:          1679
Signing time:             Sun 19 Oct 2025 22:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:01 +0000
Files and hashes:         1: 3JZ_5w4aMWvRVbzCod8mUk7eyJM.roa (hash: vnbCaew1m+lh3Dj5sXD9W+bmDkZl62H3PlaW/PwhcMY=)
                          2: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: 7vfhUCiVWZjdQ69ZwNk2MdPXymaOQEAdodrJDZ1zBN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:7f:fe:0a:10:83:67:9a:8a:24:40:99:77:0a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
        Validity
            Not Before: Oct 19 22:01:01 2025 GMT
            Not After : Oct 20 22:01:01 2025 GMT
        Subject: CN=c1e1c72f7606814c5260cb5e47d678cfdfdc48b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:19:a2:25:20:32:20:ea:82:d3:27:2d:ba:50:
                    eb:39:47:83:66:be:ae:33:48:97:28:23:ab:2c:63:
                    5b:94:ec:5b:b4:9c:a3:83:00:cd:91:3d:30:c6:bb:
                    d3:14:54:2e:9f:9d:33:d3:65:38:76:b8:b8:2f:47:
                    75:bc:3d:5f:4f:ad:76:31:84:b2:22:c7:4a:28:dc:
                    84:ca:26:77:34:de:f6:70:20:e9:22:f5:7f:8a:de:
                    af:7a:e8:b0:26:2e:24:76:5f:3e:e5:0f:b7:11:8a:
                    0a:fe:10:5f:f0:da:82:fc:65:b1:cf:23:f0:b6:aa:
                    98:15:03:96:64:97:e3:95:6c:28:15:7e:11:90:ed:
                    67:74:23:56:6e:58:9c:a1:b4:80:6e:06:88:e4:22:
                    46:77:b0:70:0e:89:92:ce:af:ae:62:1a:e0:50:41:
                    c1:c1:0d:45:66:68:a1:41:e5:6a:f5:54:91:87:13:
                    63:78:66:ef:6d:7f:d2:90:a6:ea:8c:1a:ce:c4:3c:
                    fd:12:0f:4a:17:dd:e7:f3:c0:59:6d:8e:96:3a:95:
                    cf:c8:ff:fa:e8:38:05:9b:50:e5:60:af:0c:4c:17:
                    fb:4d:a1:d5:4a:b5:34:ac:0e:a9:27:60:2c:02:4c:
                    76:2c:9f:46:e0:95:42:bc:c3:ae:d4:ab:a0:06:65:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E1:C7:2F:76:06:81:4C:52:60:CB:5E:47:D6:78:CF:DF:DC:48:B2
            X509v3 Authority Key Identifier:
                keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5f:fb:af:49:00:2b:52:c9:1d:c9:04:d8:87:f7:18:a2:29:
         4c:e5:fd:8e:bc:72:a0:a6:dc:72:03:21:a2:bf:7b:71:fd:95:
         f1:26:c0:e1:b1:06:5b:86:13:ca:66:f8:eb:7b:b8:47:10:07:
         ce:37:4f:17:dc:90:01:33:91:93:72:d8:ac:10:a5:8f:5b:68:
         0d:51:a2:02:cb:29:1a:c3:81:2c:ca:f8:16:71:d7:56:ec:0c:
         76:c4:ac:7d:fc:1e:e5:ab:7f:22:8e:0c:10:35:03:76:98:ef:
         45:4c:49:98:ba:82:a2:df:08:7a:39:90:7a:23:c3:91:27:f3:
         dd:00:34:cd:12:92:86:8b:fb:d2:5b:60:1c:b0:ac:1a:74:0e:
         9f:c1:79:26:95:0f:81:a8:5f:ca:4a:f2:8b:3c:4b:12:48:47:
         6a:73:44:db:01:00:be:10:81:cc:fc:45:98:46:60:d4:1f:63:
         d4:4d:64:b2:e3:03:56:6a:65:c0:7d:b1:48:c1:b0:99:5b:ed:
         81:a4:bb:8f:b9:cf:97:32:f1:96:ae:3f:fd:23:5b:86:55:be:
         8e:4e:c6:2a:90:79:c1:c6:d9:10:be:fd:26:30:05:38:fb:77:
         b6:84:f3:ea:4c:dd:82:6c:8e:67:01:fc:cf:c4:11:30:b1:8b:
         f9:9e:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:16 2025 by rpki-client