Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          PBP2nhBkZk8Uc5JMOvjezZTq8RcVQ3KqVOik5LX40/E=
Subject key identifier:   3D:99:D7:CD:87:58:6C:01:3E:B1:28:DC:AA:9D:ED:AC:AF:E5:9C:8E
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       0199FB7CCD8E4AD3B5E6E8A210DF8A308998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 08:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:24 +0000
Files and hashes:         1: 1-eDQG0lW6qJaqnPl-W2D7USsJOU.roa (hash: o6geDpXzRfzq+KqGmBjgU8yJ/MMEJhEhk7nT0703UAQ=)
                          2: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: l9yFPBxx4FehYVkpB9s/6qu+TBPYXLAu76wHa7eG4PE=)
                          3: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          4: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          5: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:cd:8e:4a:d3:b5:e6:e8:a2:10:df:8a:30:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Oct 19 08:01:24 2025 GMT
            Not After : Oct 20 08:01:24 2025 GMT
        Subject: CN=3d99d7cd87586c013eb128dcaa9dedacafe59c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:da:3b:6c:39:b6:25:da:9e:c7:6f:f3:59:de:
                    43:26:dd:10:5d:d0:56:5c:9d:2d:b3:f7:26:27:c2:
                    a0:46:1a:40:9a:f9:f8:89:03:7e:ec:d8:9a:d2:bc:
                    87:1f:ee:3f:09:dd:f8:ec:ce:c9:cd:3b:1c:03:cc:
                    45:ee:8d:86:49:0b:e6:5f:c0:7d:c6:98:85:07:17:
                    13:21:3b:10:ec:e2:93:da:c1:c9:f5:f6:9a:b5:97:
                    62:4b:a1:c6:7b:aa:8a:65:71:94:13:4a:30:92:8f:
                    fc:40:03:73:49:a0:f5:3c:c8:21:56:27:5e:86:00:
                    d3:fd:fa:fc:9c:8d:16:1a:30:9a:ab:59:de:27:92:
                    8c:3a:ee:70:97:2d:ae:6d:f2:b1:8d:7f:e3:24:50:
                    5e:68:61:74:22:0c:a9:4d:d3:a0:f1:6d:46:2b:8c:
                    12:11:a0:38:54:92:9c:1d:af:40:96:e7:e8:05:84:
                    c1:fc:26:7d:b7:41:90:24:10:80:5f:52:25:97:d3:
                    e1:ad:86:07:63:00:90:3a:cb:fb:62:86:2f:dc:08:
                    0f:b3:ce:20:c7:ef:9f:8c:fb:2e:b5:d6:84:94:15:
                    2d:b8:6c:04:bd:8c:27:01:bd:37:52:22:8d:14:9e:
                    60:1a:13:d2:65:07:c5:fe:7c:99:a6:29:8d:7f:48:
                    f7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:99:D7:CD:87:58:6C:01:3E:B1:28:DC:AA:9D:ED:AC:AF:E5:9C:8E
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0d:a0:2e:f5:77:9c:1d:b2:cd:ce:11:0f:b2:99:af:6f:d1:
         6e:84:50:bd:a1:f6:0f:4a:95:48:b3:e4:d3:bd:40:3b:79:9d:
         51:40:cc:76:d6:9e:1c:72:07:df:88:6c:93:1f:bc:99:85:59:
         91:bc:a3:a6:e6:7c:d4:14:74:d5:bc:99:1e:b8:33:93:d4:81:
         9d:c3:d2:30:dd:84:7e:cf:49:5c:c7:c7:04:39:b2:cb:b7:17:
         71:4a:05:84:60:82:ab:b7:13:69:34:e4:64:27:e5:36:0b:07:
         ca:1d:aa:74:7d:aa:5f:b6:b9:18:2f:d9:8f:72:8f:8c:b3:67:
         f3:61:a4:e1:0e:b3:9f:cc:33:20:ae:ea:ce:ad:cf:4a:bb:1b:
         ba:01:41:76:94:d1:bd:28:98:76:96:7a:70:eb:55:47:aa:ba:
         83:f8:68:9e:05:99:bb:fd:e7:06:5a:6a:3b:a8:a2:c7:a1:97:
         93:82:c5:de:a5:2c:c6:a3:a7:2d:8a:46:4b:18:35:b4:42:5f:
         78:e3:1d:9b:a5:3d:01:80:5f:8b:de:0e:ab:81:aa:b9:05:40:
         20:65:f8:72:4c:c4:96:70:61:93:92:ef:d4:d0:36:7e:44:e0:
         98:0e:97:c4:2a:8a:8b:45:25:c4:ec:14:95:37:ce:92:c9:fd:
         77:0a:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:45 2025 by rpki-client