Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
File:                     1-rZRJK62A6DdXFzuGgq2UhOX22A.mft (raw, json)
Hash identifier:          mFqUh1+BOD9rT6XeThOlQbxpAODF4R2F8cGp2vNrNDk=
Subject key identifier:   E7:36:E9:E7:DF:80:73:50:93:19:A0:88:10:28:36:97:0E:D1:0F:07
Authority key identifier: FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60
Certificate issuer:       /CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
Certificate serial:       0199FBEAF2C2A8D6D33DF809C069A5271273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
Manifest number:          0A3C
Signing time:             Sun 19 Oct 2025 10:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:42 +0000
Files and hashes:         1: 1-rZRJK62A6DdXFzuGgq2UhOX22A.crl (hash: 2W/wFJ1AIh5yDkn+qkUEvodGUgilskYwtLaxagFH2jY=)
                          2: p41jrQB80nM3Fi93nL78jR6iBMo.roa (hash: nJZUqGT5BG1vu4ck1mxKQBzWxDOQCEnlZy8FawGaQcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f2:c2:a8:d6:d3:3d:f8:09:c0:69:a5:27:12:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab65124aeb603a0dd5c5cee1a0ab6521397db60
        Validity
            Not Before: Oct 19 10:01:42 2025 GMT
            Not After : Oct 20 10:01:42 2025 GMT
        Subject: CN=e736e9e7df8073509319a088102836970ed10f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:11:7f:05:3f:41:74:34:69:85:58:a8:d3:
                    9a:f6:1c:3a:65:3a:5b:72:41:2f:4e:8e:67:7b:a6:
                    32:c5:b0:b3:bd:a2:83:20:ae:4b:81:c7:01:bd:41:
                    85:f8:54:05:7c:90:11:24:bd:9f:1e:25:8b:84:6c:
                    92:0f:eb:88:72:c4:90:e7:f4:4a:e3:ec:da:b0:48:
                    9e:b0:19:ac:53:9b:69:93:2c:24:17:66:06:ed:ac:
                    e3:00:01:00:ff:3a:09:eb:49:42:58:81:5c:40:23:
                    bb:48:c0:50:d8:7f:84:3c:32:dd:ef:07:40:b4:91:
                    4f:30:33:6d:82:e7:77:4e:31:94:fd:8b:18:34:39:
                    41:61:8a:e1:67:8a:74:56:14:2a:6b:48:15:02:67:
                    a1:36:b4:08:3a:32:9a:c9:c7:82:ce:f4:a8:82:89:
                    56:24:cb:19:b3:8c:fe:0c:e9:d3:f7:d8:5b:db:36:
                    51:1e:f1:63:13:29:8e:26:ed:05:e5:1f:37:a7:85:
                    9d:91:c8:91:29:42:24:61:f1:f8:d5:ac:f4:ba:e9:
                    3b:c1:d6:19:45:08:41:1d:55:fd:80:6e:b2:d5:4b:
                    5e:3e:61:9b:cf:73:63:54:f6:ef:53:41:c8:36:37:
                    29:d4:ff:ba:f4:9a:f2:e7:c0:04:df:dc:86:62:9b:
                    4d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:36:E9:E7:DF:80:73:50:93:19:A0:88:10:28:36:97:0E:D1:0F:07
            X509v3 Authority Key Identifier:
                keyid:FA:B6:51:24:AE:B6:03:A0:DD:5C:5C:EE:1A:0A:B6:52:13:97:DB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rZRJK62A6DdXFzuGgq2UhOX22A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ef1699-8c13-4235-a589-63fe6be62dc9/1/1-rZRJK62A6DdXFzuGgq2UhOX22A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:23:54:b0:18:af:3c:f6:54:9f:75:4b:25:39:44:b4:cc:10:
         fa:b1:1a:2b:f9:5e:0e:27:91:c3:79:bc:fe:81:0b:e1:bc:d3:
         56:d9:24:8a:53:d2:78:f4:28:1d:fd:8e:18:2d:94:74:cc:43:
         8c:fd:27:23:01:6d:c4:c6:99:76:5f:d2:ba:04:6d:2f:ae:cd:
         40:a7:75:13:e6:4b:c7:f9:b8:11:8c:e3:01:67:72:bc:c7:fc:
         23:4c:f0:b3:12:80:13:a2:86:90:ac:54:bb:40:dd:15:64:7e:
         48:c2:e3:e0:74:da:8c:9d:84:be:13:c7:f7:be:be:cf:64:c4:
         27:1e:38:4d:08:ad:fb:5e:c1:8e:27:32:8c:ba:41:6d:1b:9b:
         d1:9e:ff:1d:92:17:f3:5c:ef:bc:b9:9f:32:05:17:3f:dc:a9:
         b3:cc:0e:fb:76:27:bf:d7:db:23:5b:c2:8c:0a:59:90:d2:d0:
         f6:6b:67:b2:8b:09:8f:4c:8b:ee:81:af:63:ae:96:95:98:6b:
         89:39:90:7a:45:59:78:ec:c2:23:98:cb:63:8b:5d:65:09:c9:
         e6:3d:69:30:95:b3:2e:59:d5:2e:79:6e:f5:eb:1f:4e:ea:5d:
         81:e6:9d:22:59:c5:ba:7d:b5:ad:b7:2a:6e:74:6c:26:40:3a:
         99:66:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:33 2025 by rpki-client