Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File:                     4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier:          E/rGhD8dqmv2P1Yx9OsX9QqWJw3FkbXM7CNCoYSqzmo=
Subject key identifier:   19:42:5F:A3:4F:9E:47:26:FB:E8:9C:B1:DA:F0:64:EF:26:86:75:65
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer:       /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial:       0199FC214B6A26979F11FEBF77C69A1AB7FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number:          54
Signing time:             Sun 19 Oct 2025 11:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:04 +0000
Files and hashes:         1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: PjefXkwEEHIFkIk6U/mK0zH9wZi3yPDHR93JlGXapo8=)
                          2: HI7B1jr-szIvsbzfV6wrZqk3kpw.roa (hash: nW/JeadW697758rAda0qBRczYN3xljyyCO9Qys1RCMU=)
                          3: uF6s_hWqOyMm0beoSVdz1ofj_2U.roa (hash: sqABMRSLhInMQI+0EZuydVNxHulBTRCcnZGrhwhVSWA=)
                          4: yRXQpBuW1Pb2FFdzFa5o9VdREJ4.roa (hash: s9ixFSMI7GWSkeLxQmBgssbeEOKAKZsZGKgkyxXA67A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:4b:6a:26:97:9f:11:fe:bf:77:c6:9a:1a:b7:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
        Validity
            Not Before: Oct 19 11:01:04 2025 GMT
            Not After : Oct 20 11:01:04 2025 GMT
        Subject: CN=19425fa34f9e4726fbe89cb1daf064ef26867565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:00:76:87:34:d6:2c:3f:63:c3:e2:95:b4:
                    b5:70:96:4d:50:26:a0:9f:99:89:d5:7c:7c:67:c8:
                    72:78:70:ef:1b:c1:0c:9b:6f:f6:d6:e0:84:02:dc:
                    48:ee:a2:1a:35:6a:12:1e:ec:4b:25:41:66:b6:2e:
                    d0:d4:d6:f8:0a:ea:9d:5f:7c:44:1a:5a:4c:23:ee:
                    3b:94:25:50:57:72:62:ff:57:f3:af:42:9e:87:6d:
                    c5:1f:87:81:d1:1e:85:16:84:23:96:15:d7:06:14:
                    b6:a3:13:57:db:72:e4:22:1e:3c:3a:94:a3:f2:0f:
                    8a:20:75:0f:22:bc:45:42:90:0e:c1:1a:d2:0e:43:
                    17:59:ab:a8:7e:44:56:77:90:36:14:34:90:52:ca:
                    32:9d:02:7b:48:ec:6b:fa:6d:56:d8:67:ae:ce:76:
                    9d:dc:6d:84:38:55:81:33:55:a8:45:2c:9f:60:5f:
                    f0:d3:2b:56:1f:03:ac:b2:41:6a:af:fc:b8:42:f3:
                    30:9e:cf:5e:bc:22:a3:74:c3:8a:72:42:a8:3b:3c:
                    55:b3:da:36:63:39:e2:55:38:9e:21:5f:d0:2b:0d:
                    33:01:e9:fc:1a:e0:7c:d5:dc:77:79:2e:54:2c:46:
                    a2:93:9c:88:89:8a:ad:48:25:0d:00:00:80:56:44:
                    98:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:42:5F:A3:4F:9E:47:26:FB:E8:9C:B1:DA:F0:64:EF:26:86:75:65
            X509v3 Authority Key Identifier:
                keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:62:d1:87:58:28:e4:cc:21:bf:9b:75:dd:59:55:b5:f1:
         8c:40:f1:1f:42:33:3b:96:f4:1c:6a:3a:0d:ec:bc:ac:9c:b2:
         fe:f3:ce:e3:f8:0c:50:99:71:d8:89:e7:2e:d0:ec:cb:8e:aa:
         ce:d7:55:8d:c0:64:23:35:92:36:0a:46:97:a1:7c:7b:ac:93:
         8c:f2:06:cf:a4:0a:de:f1:34:38:6b:53:db:73:7c:5c:af:0d:
         14:33:e0:cc:9b:c6:59:cc:24:f0:51:cb:05:25:d8:47:fb:36:
         2c:1e:75:70:fd:07:48:ad:06:08:53:85:71:4e:9c:b3:8c:0c:
         90:84:22:32:b5:5a:c2:e1:4d:44:dc:09:a0:77:a0:2b:74:0d:
         5a:39:e6:c9:00:72:97:c1:bd:24:e2:48:7b:7d:a4:12:77:96:
         63:dc:e2:ed:d0:55:a5:86:cb:87:a3:cb:a4:a9:ef:69:fe:a0:
         4d:b4:7b:33:7e:70:2f:be:6e:56:73:23:b5:d7:6f:1f:8f:b3:
         1e:ec:51:c7:b8:8c:33:f1:ba:76:85:48:8d:1a:10:25:cd:f0:
         65:bc:f1:cb:9b:41:02:6a:92:ee:7b:97:27:69:b7:91:fd:04:
         54:68:24:83:f8:d5:19:2d:91:8a:03:44:d1:52:38:9d:73:ab:
         73:98:0e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:57 2025 by rpki-client