Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
File:                     EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft (raw, json)
Hash identifier:          f/kI7A2YnQ1ox/DkXQro5ToXnX/joUqbz8dGaK19BEc=
Subject key identifier:   1B:49:EA:E2:56:3D:6A:3F:7D:AE:E8:53:9A:F9:C2:D5:A9:66:9D:7E
Authority key identifier: 12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4
Certificate issuer:       /CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
Certificate serial:       0199FB7CE29B582BACB9B43CE22902B0424C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
Manifest number:          1525
Signing time:             Sun 19 Oct 2025 08:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:29 +0000
Files and hashes:         1: 3aNd9eZsJolPAPy2WUcnIA679FQ.roa (hash: eblt98UAYSnzgUqaK1ZwDyinlKt8BByqD/nttuJnoYY=)
                          2: EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl (hash: d6X6gz0RempAm6yin7YFB3M3OQwNuSPcZJrADkr/+lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e2:9b:58:2b:ac:b9:b4:3c:e2:29:02:b0:42:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1262f7da8fee5d2a7bcdd4014a70a927db499fa4
        Validity
            Not Before: Oct 19 08:01:29 2025 GMT
            Not After : Oct 20 08:01:29 2025 GMT
        Subject: CN=1b49eae2563d6a3f7daee8539af9c2d5a9669d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f1:42:26:7c:1c:bc:36:d1:26:fd:07:13:12:
                    54:b1:93:42:6e:68:0d:5c:43:93:2b:ec:ac:19:5a:
                    8f:bc:8f:e9:2d:ae:e8:fc:7a:d5:a0:5b:98:ef:fb:
                    2b:fc:c7:4a:d4:b2:73:33:62:d6:c7:85:48:a5:e6:
                    bd:91:36:d9:7d:8d:31:9d:ee:9d:fa:cb:7c:ab:70:
                    89:86:3f:86:d6:c7:2c:76:a1:e1:da:15:26:2b:d3:
                    8d:de:27:bd:3f:64:83:a2:f0:0f:99:bd:f9:28:d0:
                    f4:4e:87:6a:54:28:5f:af:43:2e:94:88:b2:fb:9b:
                    5a:51:42:f4:41:7d:1b:e6:1c:1a:bb:c0:c1:e9:2f:
                    70:65:8d:65:45:f7:8a:92:ad:e2:37:3a:2c:9e:06:
                    30:9a:1c:00:c5:8a:97:78:dc:a0:93:af:4a:b2:6b:
                    5a:8c:56:49:36:79:f5:f5:68:a1:40:0f:53:2c:0e:
                    57:46:2a:28:be:99:39:0a:f8:83:91:1b:2f:c9:4a:
                    d3:e7:5a:b8:32:21:e7:86:fa:4d:e7:d7:ba:66:f7:
                    4c:03:1a:27:62:f8:6c:80:ca:7b:c5:a5:76:4c:40:
                    c7:ec:f4:0f:68:c6:df:3c:bb:ec:04:e1:9a:ca:9b:
                    53:85:1b:2e:c8:ac:1d:26:f2:08:9e:d3:ef:2c:06:
                    e4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:49:EA:E2:56:3D:6A:3F:7D:AE:E8:53:9A:F9:C2:D5:A9:66:9D:7E
            X509v3 Authority Key Identifier:
                keyid:12:62:F7:DA:8F:EE:5D:2A:7B:CD:D4:01:4A:70:A9:27:DB:49:9F:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/35a807-b28d-442d-bab0-a610d75c32e2/1/EmL32o_uXSp7zdQBSnCpJ9tJn6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3f:5d:9c:e0:40:d1:a9:aa:46:17:41:14:05:6b:c1:5a:dd:
         df:d5:24:ef:ba:08:db:cb:7d:34:cd:a8:dc:e3:37:a9:16:19:
         6d:a4:f3:9c:6e:8b:c9:ee:a9:57:19:2c:0a:66:ad:f2:d4:c2:
         0c:b3:b8:4f:34:e8:06:bb:2a:89:95:8d:c3:22:c2:4b:b7:6a:
         09:7f:31:ff:c5:a0:df:c7:18:82:da:74:09:40:98:5b:3a:04:
         49:41:c6:d5:48:a4:57:e6:01:69:b1:76:1d:c1:34:91:cd:28:
         b5:53:5d:ca:b3:62:fa:0f:df:e5:4c:bf:55:86:04:23:d3:52:
         45:71:1f:a0:e9:7a:14:0a:8c:3d:4d:6d:ca:0a:cd:ae:ce:1b:
         5c:7f:cc:5d:48:50:b3:e9:31:c2:f7:c7:34:6e:14:b2:f1:d8:
         b0:75:79:61:82:a7:41:87:7f:15:0b:9e:cf:9b:c3:d1:da:b3:
         58:9a:db:62:30:0a:8d:ed:95:42:30:af:45:65:5a:cf:c7:5a:
         13:40:9a:34:2d:45:fe:ec:f5:15:e5:a1:04:2f:76:92:40:c7:
         dd:2a:81:c0:35:f6:d2:e8:5c:07:7f:d8:d2:87:5f:c5:93:b3:
         6a:d6:e1:0b:9b:2a:6a:10:18:b0:be:cc:da:fa:9d:fc:93:c6:
         3f:ba:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:50:05 2025 by rpki-client