Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          epXl3uD/kp0pTxGT6uAJvygHNnz/J3CxkCS2i4qm1bU=
Subject key identifier:   EC:A8:8B:24:87:97:38:2C:B3:BB:8B:29:79:E1:13:F3:9B:92:95:6C
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       0199FCC6A9EE35FBD751D7086D8F4D595CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          1677
Signing time:             Sun 19 Oct 2025 14:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:42 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: QqZRTXb+Dw4Hd7gZ9HwWqGfhfBSci46jYBDVZ7uDLLA=)
                          2: 86fKM31DBBSwZ8M6qcIf6r_iQR4.roa (hash: EWjBxOajWLT9vZOY8gky8VpcjsYK4HfbzBG5oTI1lvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:a9:ee:35:fb:d7:51:d7:08:6d:8f:4d:59:5c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Oct 19 14:01:42 2025 GMT
            Not After : Oct 20 14:01:42 2025 GMT
        Subject: CN=eca88b248797382cb3bb8b2979e113f39b92956c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:87:82:ce:7b:10:55:ac:44:e3:ce:78:bd:
                    4d:0a:b4:81:b4:93:88:b3:17:01:c9:5a:89:58:7a:
                    ba:49:88:98:f4:1e:d7:61:7d:51:dc:25:96:f3:aa:
                    d9:8d:c5:f8:dc:f5:ad:39:eb:b3:3b:21:eb:c7:ff:
                    f6:7d:1d:37:cd:41:f2:de:15:be:05:ac:1e:55:ed:
                    c7:22:11:18:ff:62:ff:87:83:dc:b5:15:df:8a:70:
                    31:fe:41:49:97:a5:50:02:78:62:e6:45:6c:93:c2:
                    45:35:cd:47:c4:88:ac:4d:91:45:03:74:d0:ef:cd:
                    8f:60:55:55:0b:e4:aa:07:0d:9a:b7:1d:9a:cd:dc:
                    fb:bb:3e:bb:c8:7a:dc:0c:ca:79:96:9c:4d:a9:11:
                    fd:7e:80:48:2e:0e:26:07:d2:bc:0d:ac:bf:87:4a:
                    65:f6:04:74:e8:78:e8:c6:90:dd:13:1e:1c:94:9f:
                    42:28:15:04:9d:2c:9f:dc:20:ae:1d:46:98:a2:1f:
                    5b:54:44:82:f6:7f:d2:a9:7d:12:7c:ea:68:f6:f6:
                    1c:6d:53:cd:a3:d1:96:75:5d:53:bb:cb:a1:73:d3:
                    aa:f6:80:c7:87:11:d6:e3:cf:79:b3:ce:7b:15:ca:
                    e7:8c:78:d9:65:8a:4e:39:a9:31:ec:16:5e:89:5f:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:8B:24:87:97:38:2C:B3:BB:8B:29:79:E1:13:F3:9B:92:95:6C
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:fb:f3:90:7c:ee:ba:93:43:76:5a:bc:1f:bf:b8:9b:bb:
         ea:00:8d:f2:25:30:8c:bd:b3:e6:5c:23:ac:aa:8a:48:ee:03:
         27:40:b3:2a:a2:b1:cb:d5:9a:bc:5f:bd:d1:3d:44:34:0b:25:
         a4:36:0f:70:e2:1b:93:82:8f:86:ad:ce:aa:b1:19:70:ea:63:
         a0:98:2b:b8:7c:ba:27:ac:bb:96:84:95:90:e4:ad:a7:e7:ec:
         f8:a6:8b:7d:41:03:6c:83:d2:f5:e7:60:dd:70:22:b4:00:fe:
         75:88:8f:2f:da:66:2e:f5:06:5d:4d:4c:6c:64:11:dd:7d:e2:
         01:b4:0a:df:98:0b:af:0a:bd:3e:91:ca:ff:ee:c9:b3:eb:c1:
         19:06:da:ba:48:2b:41:fa:c0:33:20:60:5f:d1:75:53:b5:36:
         94:85:81:b9:58:01:65:83:d9:6c:5e:76:1e:32:1f:00:23:ca:
         12:7e:64:f3:f9:05:7c:1a:fb:9c:64:0b:ee:fa:c8:a5:a3:f8:
         75:7c:12:0b:fc:49:ff:17:a2:27:11:80:ad:b3:ad:cc:d3:c2:
         9d:a3:1f:a6:a7:8b:d2:11:1f:f9:19:22:59:44:af:2e:38:cd:
         63:36:da:4a:eb:ed:da:41:7d:ed:3e:8a:e4:3d:82:2a:fc:5b:
         6a:2e:ba:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:31 2025 by rpki-client