Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          g29EXt9EzsxJHdw5GNBx4ypJMHX1fc6iXUFwyJCm5vk=
Subject key identifier:   B0:8E:88:AC:7A:B2:0B:5E:CF:63:33:A8:D5:0A:78:38:6A:E4:B1:6B
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       0199FFC83BC88858DC7A9231DDC331E10971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          1705
Signing time:             Mon 20 Oct 2025 04:02:16 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:16 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:16 +0000
Files and hashes:         1: GQRzcbGzWvSj3FBVjoQIeOqNNGk.roa (hash: 9iREodFCIhImvgis0W2BigBjZMAhENAEnDzq98vhkcw=)
                          2: H0P6Uhc2PQuAj9mI5JuLmXDsE-E.roa (hash: lFsz70YXVH8oaNr7AK6yGfw7Y8IvCmN3m4Wget06GNk=)
                          3: Rwa55-aiWzleQi1HsBZSagHTLqo.roa (hash: 0rSyRYL0K47FYUV+DhbsOlxazMDwyVqW5IEzSPcxljc=)
                          4: ZDeqr4bzVJZzwb_UfOlQJbn9JTw.roa (hash: 3Blt9qc0qNOTbyRJx5iL7tY6336Yd2GQWHTIQYOz0WA=)
                          5: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: GC1+xkRVJAO9iyMx2ZIOVLBDfB88mtZTXAftRpTTVE8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:3b:c8:88:58:dc:7a:92:31:dd:c3:31:e1:09:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Oct 20 04:02:16 2025 GMT
            Not After : Oct 21 04:02:16 2025 GMT
        Subject: CN=b08e88ac7ab20b5ecf6333a8d50a78386ae4b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:78:13:1f:b9:af:fe:ed:dd:dd:6d:93:44:
                    f8:73:28:f5:22:63:d8:74:29:0b:0f:6f:67:88:bd:
                    94:79:cf:dd:4c:de:8a:72:5e:d9:66:21:10:7d:ec:
                    c6:1c:6e:d1:8e:fd:e7:8f:22:4c:c2:d3:11:c2:ed:
                    7e:8d:cf:f0:30:6d:37:79:49:59:09:b4:80:dd:2c:
                    c6:1e:71:57:62:4f:9c:74:e3:a3:fd:79:30:8c:ec:
                    b7:eb:e2:88:e1:3e:7a:5c:f4:a7:9a:4e:0f:78:0e:
                    64:96:6b:70:ff:1d:96:bc:81:e3:ea:73:c1:18:3d:
                    ab:db:e5:8d:93:52:d8:29:1a:6d:ce:21:f4:eb:d0:
                    eb:f7:83:76:49:9e:a9:08:e1:9b:df:a5:2c:93:da:
                    e0:0e:1d:b4:72:19:95:af:0e:ee:43:3e:86:eb:fb:
                    22:95:6c:93:4f:d6:20:0c:94:6d:8e:0f:96:7e:6d:
                    0e:c4:d9:98:11:96:71:e7:82:f7:8d:bf:62:0b:d3:
                    9c:fd:39:66:22:ea:a4:e0:06:06:31:b0:4c:a2:b6:
                    24:8f:6a:9e:cb:80:c6:58:a8:e4:a6:b9:98:b3:56:
                    9e:48:a8:9c:3d:8c:5a:d7:41:72:de:18:66:e4:2e:
                    41:ec:65:10:f2:a3:fb:35:eb:88:e5:19:18:f4:4b:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8E:88:AC:7A:B2:0B:5E:CF:63:33:A8:D5:0A:78:38:6A:E4:B1:6B
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:77:d8:df:86:15:c7:f9:be:e9:68:9c:62:7d:95:be:f6:13:
         c0:11:11:9c:8c:96:53:fe:67:67:18:0b:eb:11:5f:38:7f:25:
         2a:4e:a0:41:4a:cc:49:ad:90:b7:d6:45:a8:aa:15:cd:ab:f2:
         cb:b9:4d:e4:fe:9f:60:4c:d7:8b:9c:9e:7b:17:8c:00:8b:28:
         75:62:2a:39:3c:57:8f:11:b0:20:ed:cd:fa:d9:f0:7e:3b:6e:
         65:7e:f8:55:a4:e0:d7:0a:41:1e:e0:b7:51:7d:52:91:0e:a8:
         1f:b9:ee:49:ef:4c:b6:af:14:71:0d:82:d8:41:0b:bc:c4:52:
         f0:56:a0:93:00:ee:88:bb:73:b1:83:06:9a:c7:aa:4c:c0:3b:
         52:6a:94:cc:2d:20:bb:98:00:70:3c:ab:43:68:1d:f2:b2:43:
         77:59:69:2d:97:d4:b7:1f:56:69:ae:47:77:06:e2:9a:99:7b:
         58:98:b9:c0:4c:86:5d:9d:96:aa:a1:5a:bf:b3:71:f8:4d:ca:
         27:b4:bb:34:ab:bd:ef:40:2a:01:b9:0c:01:70:c8:4b:f2:79:
         1f:8d:ed:cb:a8:1d:8f:27:61:9a:d7:d7:ba:3c:63:67:c4:65:
         0f:f7:d8:97:98:2d:ab:5d:51:88:16:57:d8:dc:38:b2:8e:6f:
         1d:f4:65:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:23:36 2025 by rpki-client