Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
File:                     cvfxR2_4KR768oSc0_IUZyJnsAE.mft (raw, json)
Hash identifier:          KEJf7A33yvmvlkJPAEWAfuXLpPHxGJunG9vuAKLvmx0=
Subject key identifier:   AF:9E:60:80:97:A5:95:52:2B:6A:3C:4B:F4:97:BA:9F:91:AB:D3:35
Authority key identifier: 72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01
Certificate issuer:       /CN=72f7f1476ff8291efaf2849cd3f214672267b001
Certificate serial:       0199FDD967EB364378FE14E92762B7358850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 19:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:47 +0000
Files and hashes:         1: cvfxR2_4KR768oSc0_IUZyJnsAE.crl (hash: mobyTXO5bviEhz5ZQbK4mvnUJcBat/lVHUkv6F9LqiY=)
                          2: dh_JgCZHkTokMGRr7H9M3cKhoRc.roa (hash: 4Kx8qkmvFu9/ph3LEnJvdO/hVDQr2VoTVCm1ptdvoEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:67:eb:36:43:78:fe:14:e9:27:62:b7:35:88:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72f7f1476ff8291efaf2849cd3f214672267b001
        Validity
            Not Before: Oct 19 19:01:47 2025 GMT
            Not After : Oct 20 19:01:47 2025 GMT
        Subject: CN=af9e608097a595522b6a3c4bf497ba9f91abd335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:6b:60:14:e1:a2:16:dd:99:ff:fb:b1:6f:
                    4a:35:43:00:68:de:fa:86:99:ac:b7:db:e8:b9:6a:
                    e9:1a:3d:1c:75:9e:1b:fb:74:e1:ce:16:6c:b2:6a:
                    28:a2:bb:c0:f2:b0:ce:df:37:9e:a7:03:ec:b8:68:
                    e7:3f:d5:dc:18:48:d8:22:df:93:0f:86:32:e8:5f:
                    b5:c0:eb:5b:ee:2d:ed:38:de:3c:28:c9:cd:61:a1:
                    8e:02:c6:8d:40:10:05:1f:37:d0:82:1c:9f:17:7f:
                    05:9b:70:ad:55:b2:02:a6:30:08:1b:a1:60:e9:11:
                    02:0c:6e:e6:25:59:5d:55:e4:06:d3:14:ca:34:ba:
                    e7:18:c9:8c:e6:4d:c1:65:e3:ef:2f:6f:f4:81:68:
                    a8:9b:2c:16:4a:d5:35:0a:e8:6a:41:03:9d:3d:6b:
                    96:4a:f8:e2:d2:35:84:7e:b5:c0:31:e6:ab:8c:07:
                    2d:7d:3d:cf:3d:eb:0a:ef:20:9b:f7:67:9c:3c:d6:
                    b8:99:dc:49:91:7d:62:99:f1:f5:27:a6:27:3d:71:
                    94:bc:0c:43:3c:67:c8:30:b6:6f:59:cf:f9:e9:a3:
                    a7:46:45:26:af:a2:02:13:d9:91:66:88:f8:4f:db:
                    81:c5:b4:2c:63:6b:6b:bb:48:a9:41:fd:df:95:51:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9E:60:80:97:A5:95:52:2B:6A:3C:4B:F4:97:BA:9F:91:AB:D3:35
            X509v3 Authority Key Identifier:
                keyid:72:F7:F1:47:6F:F8:29:1E:FA:F2:84:9C:D3:F2:14:67:22:67:B0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cvfxR2_4KR768oSc0_IUZyJnsAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ecd1-1e2b-42d5-af71-391d10ff947c/1/cvfxR2_4KR768oSc0_IUZyJnsAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:31:46:cb:52:9c:97:98:77:fd:0e:8c:4b:7d:a6:f3:93:
         aa:7a:75:75:33:0c:8e:d8:02:1e:73:c8:b1:1b:3c:9f:1c:8e:
         05:b4:da:4f:17:15:ca:e9:25:90:c7:0b:fd:f0:2b:e7:9a:8e:
         6a:4e:ff:8f:c2:4e:5f:d8:41:6a:e2:58:1a:d9:4f:5c:19:66:
         55:cb:a6:27:f7:1d:b7:46:9b:4f:e6:25:f3:8a:e6:52:5d:5d:
         be:5a:a9:a6:e0:04:f8:83:bd:7c:d4:63:ef:c1:f5:87:e9:e0:
         72:03:1a:04:cf:78:47:c7:dc:23:c5:66:bb:86:19:75:55:a6:
         de:83:f3:9d:20:29:a0:be:ab:30:de:8d:5b:d5:32:86:8d:c2:
         fd:6d:3c:b6:9c:1c:93:4c:dc:86:79:ba:73:67:87:26:bb:a8:
         48:11:b0:a4:e6:75:55:ee:c2:f1:44:fb:2e:5b:7a:7c:b6:a0:
         e3:42:fc:3e:74:b9:a8:ff:03:9c:da:dd:85:28:33:9a:cb:2a:
         70:51:70:46:76:c2:23:37:d9:2e:f5:99:00:39:9a:80:8e:69:
         39:1e:a5:7f:f2:cc:70:1c:b7:6a:cd:0f:3b:35:af:9c:7f:1e:
         51:4f:c0:58:d5:29:54:3a:6a:cf:48:2a:a0:99:02:58:0e:bf:
         7d:d5:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:57 2025 by rpki-client