Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          jp5PNvojZ6d49KxQqLffL3d/lOrjOkSrNz92Oin5EYE=
Subject key identifier:   92:3C:A8:B3:82:E7:0D:BE:2F:59:0F:B4:C9:4D:E2:02:2A:3C:08:C5
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       0199FB7C6C1D76E4A361119AB0C3387474F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          1419
Signing time:             Sun 19 Oct 2025 08:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 08:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 08:00:59 +0000
Files and hashes:         1: 40QNfW5uxL4jypZTwjAvEPXJ-ss.roa (hash: scLT9GShE++kyEVNQ4Xr6VT4pmzB0wfzNMHjViw3ltA=)
                          2: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: xLHLy8XnjUExWcbD1wRqVc8vnHGKUxcySriDqnxZQiM=)
                          3: to-C9o8M7rUM05HxGikjjRHVAbw.roa (hash: JaaGI9qnzexOYc7maJGwDizpvZfHfNfRXKpM/h4aHAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:6c:1d:76:e4:a3:61:11:9a:b0:c3:38:74:74:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Oct 19 08:00:59 2025 GMT
            Not After : Oct 20 08:00:59 2025 GMT
        Subject: CN=923ca8b382e70dbe2f590fb4c94de2022a3c08c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:db:63:5f:a9:37:58:bb:17:35:1e:80:25:42:
                    c5:c8:33:6a:48:f4:d7:8d:b5:95:2e:e4:aa:81:81:
                    e8:8b:0e:0f:29:e4:fe:a7:6d:78:c2:61:bb:e0:4c:
                    e0:1a:d4:48:a8:4b:d3:e5:8e:75:8d:cd:d7:dc:84:
                    fe:45:60:4c:72:4a:76:bd:67:11:65:8d:f8:37:40:
                    3d:17:32:cc:ba:02:50:74:be:f0:f7:8a:d7:be:fc:
                    b3:00:f8:84:50:e0:21:65:e8:9b:5d:f1:01:ab:7d:
                    e4:ad:33:46:93:72:76:36:bb:51:7d:27:7a:6d:90:
                    bb:04:00:2b:d5:fe:69:8e:92:14:52:d4:a7:dc:b2:
                    f9:ed:cd:72:b9:f6:81:2d:81:a9:a1:67:41:0d:0c:
                    c6:a2:c2:15:ed:2f:22:f2:f6:64:7e:ad:37:ad:26:
                    9e:71:06:48:7d:76:86:fe:34:72:25:06:4f:da:13:
                    85:de:fd:7b:42:92:f4:6e:33:e5:13:c5:66:28:2f:
                    0e:3e:2e:ae:af:6b:3a:88:6b:dc:a0:0c:8a:2c:3f:
                    00:b6:e8:b1:da:e2:ad:32:1a:7f:0f:5e:1f:1d:6f:
                    83:cb:02:03:81:21:ff:86:94:1b:87:21:99:2a:18:
                    70:ec:e3:4e:5c:fc:ef:6f:b1:f0:23:29:ee:09:94:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3C:A8:B3:82:E7:0D:BE:2F:59:0F:B4:C9:4D:E2:02:2A:3C:08:C5
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:44:98:3b:c7:e4:23:68:7a:cb:98:ab:c5:ad:58:bd:f7:a4:
         d1:d0:5f:26:73:a5:21:a7:13:b6:5a:1a:c3:c5:87:bb:60:2b:
         e4:87:13:5c:9d:b7:85:2c:da:45:4c:b9:c3:18:36:cb:a5:ad:
         90:0d:97:4d:4d:99:ae:2f:60:00:5b:f1:5a:e8:ac:d6:84:24:
         12:38:1a:b9:dd:8d:bd:49:ab:1b:6c:f0:7a:d3:e4:f0:48:50:
         e1:6a:cc:fd:52:d2:9a:e4:f5:9b:72:32:06:da:a1:fb:cd:29:
         1d:ee:10:a0:ee:27:2a:07:1d:0d:3f:9f:4a:8c:85:73:37:ab:
         76:83:52:96:9e:a8:b6:b3:0d:e2:bc:9a:d4:b8:52:be:77:aa:
         72:ca:f7:82:e4:57:65:72:7a:46:45:cd:62:69:dc:38:0e:c9:
         de:d5:28:b6:e5:25:26:fb:d2:36:9a:33:48:a3:65:48:1f:24:
         ea:8d:3a:38:f8:67:33:2a:93:e4:43:5b:cc:99:15:2c:11:e0:
         a2:e6:f4:d8:09:80:4a:70:07:87:a9:0d:3f:e1:5f:4a:15:8a:
         27:67:97:db:6f:23:05:e2:98:ce:e9:0f:51:39:24:09:2d:19:
         4b:55:dd:46:1c:d4:f5:3b:dc:4c:39:05:b8:c4:2b:60:24:c4:
         2e:c2:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:54 2025 by rpki-client