Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
File:                     SlyG9c47cLXbUxXWqp1XoAG81oY.mft (raw, json)
Hash identifier:          0b2m1zbOFCEjiab8vOyLXhK5ahX9+lpyYtxmhYn3CB0=
Subject key identifier:   1F:CF:9A:15:F0:30:9F:4E:6A:08:4E:23:F9:59:29:24:B2:DF:84:A1
Authority key identifier: 4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86
Certificate issuer:       /CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
Certificate serial:       019A0110E9846EFD83F8EC9FB3CB2A133D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
Manifest number:          07EA
Signing time:             Mon 20 Oct 2025 10:01:16 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:16 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:16 +0000
Files and hashes:         1: SlyG9c47cLXbUxXWqp1XoAG81oY.crl (hash: zvl4Ibx2ITmQGB/rJ4BxM0IVqEAjh54UO7JiR9Gh8s0=)
                          2: npLLh9RrcQH8xkykt9enwrNvhXQ.roa (hash: +AU9dB6ggcPcc7d+ifQcSn4cZAw7WXAjX0hF7llZTBc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:e9:84:6e:fd:83:f8:ec:9f:b3:cb:2a:13:3d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a5c86f5ce3b70b5db5315d6aa9d57a001bcd686
        Validity
            Not Before: Oct 20 10:01:16 2025 GMT
            Not After : Oct 21 10:01:16 2025 GMT
        Subject: CN=1fcf9a15f0309f4e6a084e23f9592924b2df84a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:54:f8:93:29:2d:74:31:99:68:4e:33:41:0b:
                    60:63:45:8d:d0:9d:12:75:20:e2:7a:1d:39:57:d4:
                    f0:d6:d4:3a:6c:b2:27:8d:6a:65:09:c7:2e:f0:5d:
                    41:68:9f:a8:ba:42:b1:56:68:7e:9d:50:da:68:14:
                    7e:1f:00:0c:87:78:2c:39:14:85:27:54:3b:9b:f4:
                    d4:09:a4:be:ad:ea:6c:99:5a:d3:91:76:a4:0c:55:
                    c7:9e:af:dd:31:ac:0a:c4:54:b4:42:5e:9b:40:2e:
                    cf:03:d6:0b:cd:14:e8:16:cb:26:bc:85:c2:4c:8c:
                    73:56:6d:71:c1:de:b9:ca:d3:23:b2:e3:3f:84:99:
                    56:00:fb:bc:cc:a7:ae:ec:b6:68:3e:66:39:f8:f8:
                    c0:cf:1d:ae:2b:0d:62:6b:4a:21:fa:a2:64:ae:52:
                    a7:69:c0:c8:c4:6e:97:b6:8f:c1:aa:23:dc:d4:c3:
                    1b:b6:83:fb:19:79:c3:b0:54:54:fb:27:e1:e3:98:
                    a3:ab:25:66:a7:79:cb:ce:bc:f0:57:d9:da:0d:7d:
                    44:e0:c1:03:c8:46:4c:41:f5:4f:7f:59:ce:38:3d:
                    24:65:ce:e9:40:32:be:a3:e7:29:44:7a:0a:a3:ff:
                    b1:5e:28:5b:23:ca:a8:1b:a0:d3:cd:71:b6:b9:6f:
                    2b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CF:9A:15:F0:30:9F:4E:6A:08:4E:23:F9:59:29:24:B2:DF:84:A1
            X509v3 Authority Key Identifier:
                keyid:4A:5C:86:F5:CE:3B:70:B5:DB:53:15:D6:AA:9D:57:A0:01:BC:D6:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SlyG9c47cLXbUxXWqp1XoAG81oY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9e2bc2-5bc2-4b6f-81a7-47783e23fb59/1/SlyG9c47cLXbUxXWqp1XoAG81oY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:0c:47:31:fa:3f:f7:24:38:f7:b6:e2:0a:87:a7:2f:11:1d:
         eb:36:e4:69:60:7a:ce:ea:22:ce:68:2a:40:64:71:68:2d:fc:
         44:19:90:3f:43:2a:45:a8:9f:41:c3:09:cf:37:4c:e5:1b:a6:
         89:51:30:26:c6:b3:c4:eb:0d:32:10:6c:af:32:e2:8a:df:3f:
         1b:0f:4c:96:f9:4b:4c:b6:dc:ac:c3:2e:1b:2e:09:64:c8:c7:
         90:d1:9a:ac:46:b3:f0:20:12:a0:3f:4f:76:99:08:b6:d2:b3:
         92:53:6b:55:6a:3b:8d:2c:3d:8d:32:09:dc:80:89:9f:11:26:
         36:42:99:04:38:06:ec:02:f0:6e:8a:76:ab:04:72:09:d9:3e:
         4c:1c:d3:11:b6:72:91:7d:c6:a5:ec:1e:73:31:52:4d:6f:ed:
         2a:cd:e1:b6:4b:61:de:d4:ba:8b:b1:4a:40:22:8c:46:78:67:
         38:d6:28:29:c8:7e:8c:7f:e3:2f:e3:be:4e:89:94:ce:f6:32:
         ca:1c:24:b7:fb:de:ef:40:2f:2e:5a:fb:b3:23:9e:ed:b9:28:
         bf:a3:46:c9:e2:04:aa:db:56:7d:d0:1f:92:68:a0:bf:61:86:
         06:42:66:44:91:a2:44:f1:b2:6a:01:29:30:22:fa:cf:98:2b:
         65:8b:9d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:23 2025 by rpki-client