Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File:                     1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier:          oEdRfXRU4CoMsr//SX358vPrlY1aZhOT1ie1X+IyVG4=
Subject key identifier:   C0:42:CE:5D:EE:1D:9B:99:AC:F6:17:A9:B0:9E:B9:F8:90:FE:F1:66
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer:       /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial:       0199FDD8C898FC7848EA351E9688DBDD47DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number:          0198
Signing time:             Sun 19 Oct 2025 19:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:06 +0000
Files and hashes:         1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: tyir/dvFGrDR+oz/lxph/GZ05IRoYjHo08io7bcgVVo=)
                          2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:c8:98:fc:78:48:ea:35:1e:96:88:db:dd:47:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
        Validity
            Not Before: Oct 19 19:01:06 2025 GMT
            Not After : Oct 20 19:01:06 2025 GMT
        Subject: CN=c042ce5dee1d9b99acf617a9b09eb9f890fef166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:b9:ed:a9:bb:7a:6a:5f:1b:33:01:ff:e0:
                    8c:07:50:67:56:5f:fd:ca:bf:12:ba:ec:02:04:3a:
                    12:f1:c4:9d:31:22:f2:aa:72:07:bb:fa:86:05:38:
                    2a:72:f8:df:a0:7d:90:d9:67:e4:76:6e:f3:3e:00:
                    86:2c:b8:8b:58:db:4e:c8:5c:99:29:77:f4:d8:13:
                    47:b7:28:71:b3:9e:32:ed:99:3c:a3:e7:25:ac:20:
                    7e:1c:84:64:a9:c3:a8:9e:42:1e:5f:ba:ce:83:4e:
                    4c:32:c5:a8:6e:6a:1e:ef:b2:63:cf:f3:f5:ae:58:
                    f7:70:50:2e:53:49:d6:f4:36:16:40:4f:53:c0:32:
                    7f:71:23:b1:a8:29:95:e6:54:a1:67:9e:dc:64:04:
                    0c:88:57:0d:74:a4:f8:e2:2c:76:e8:ca:d0:e3:39:
                    08:a6:4f:18:80:3f:8c:40:b6:e7:45:86:3f:b3:91:
                    1a:81:da:a1:fb:f2:8f:d7:a5:31:8a:c9:8b:cb:d2:
                    f0:66:d0:e9:83:17:1b:83:f7:dd:54:05:91:0d:e4:
                    d7:4e:1d:d4:17:c9:9c:9b:87:60:fe:91:09:fc:68:
                    19:a3:87:5f:85:c7:c2:cd:de:3a:18:b8:ab:31:9f:
                    82:8a:7e:3d:4d:6d:76:33:85:d9:b5:da:44:69:4d:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:42:CE:5D:EE:1D:9B:99:AC:F6:17:A9:B0:9E:B9:F8:90:FE:F1:66
            X509v3 Authority Key Identifier:
                keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e4:cd:30:9a:05:6c:6e:8a:ca:7d:50:c9:78:a7:04:90:47:
         ce:e6:77:ad:1d:a4:f3:03:bb:bd:3f:86:85:d1:79:ca:4c:4b:
         62:fd:90:ba:04:5a:47:89:d4:8f:3d:98:db:ab:58:77:0c:a1:
         b5:9f:23:d0:83:d5:e8:df:09:54:77:34:d2:0f:91:fa:f2:9f:
         c3:77:d9:58:11:4a:0d:f2:08:cf:2e:cb:e8:da:93:1a:e8:4c:
         2f:ff:08:38:70:1c:00:df:b6:60:0d:6c:98:42:d3:e4:30:8c:
         4c:aa:0c:7e:41:a5:02:64:76:91:97:42:2b:a5:b4:a4:44:f2:
         fa:25:26:b0:ff:6a:12:fc:da:e1:f6:86:9c:a6:5a:99:60:e1:
         ac:74:72:a0:2e:f9:12:62:7c:fa:31:5a:97:f0:96:a2:fd:80:
         68:e7:83:8c:dc:6e:65:43:fc:b1:90:bc:8a:26:f6:0a:5b:7f:
         1d:ae:d9:d9:ee:39:68:d6:95:46:eb:b3:f4:a2:f8:fc:41:a5:
         83:52:d4:25:e2:cb:f4:60:97:a3:44:fb:33:40:e3:cf:3d:5f:
         a9:98:72:8e:4b:a2:e8:3c:01:59:f4:26:29:66:cb:0c:9e:29:
         c1:8f:46:c6:5e:45:bd:fe:ef:04:39:26:45:1c:ce:69:d9:64:
         cc:99:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:40 2025 by rpki-client