Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File:                     1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier:          /EcyksbX7TwV6kvjqVwBFxwVRknmdFMcsXDULaKKnL8=
Subject key identifier:   72:DE:9C:CE:F4:FF:4D:A8:6C:32:A4:28:99:C1:1B:6F:05:77:0B:AB
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer:       /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial:       0199FB0F43CC8C8AF60B3B4110D01DAB6444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number:          0749
Signing time:             Sun 19 Oct 2025 06:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:45 +0000
Files and hashes:         1: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: 8fPQkzRMl1gKyug8vVMRWkxbAoA3QrhkIKFskEJPWHk=)
                          2: A4__EnOrPLl7kNPioZRAoADCUG8.roa (hash: j1tmGfrA6af9fNUjjjOcwfDjish7mieiLkXoaO5wFfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:43:cc:8c:8a:f6:0b:3b:41:10:d0:1d:ab:64:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
        Validity
            Not Before: Oct 19 06:01:45 2025 GMT
            Not After : Oct 20 06:01:45 2025 GMT
        Subject: CN=72de9ccef4ff4da86c32a42899c11b6f05770bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1b:1b:b5:8d:c1:29:95:16:14:65:d0:40:fb:
                    ef:9d:50:41:db:0d:16:15:b8:22:a6:98:e8:a1:d9:
                    a2:04:8c:0f:b2:f7:6b:01:53:3f:da:c8:6b:67:00:
                    16:7b:b5:e6:e6:e3:18:0a:73:b4:47:7c:af:3c:28:
                    24:81:a2:fc:cb:4d:28:17:ba:b0:cd:61:46:27:7c:
                    8e:1c:d1:27:ac:c4:39:e2:0d:64:8f:35:5a:11:1e:
                    07:cd:a0:d2:e6:d1:a0:67:59:63:3e:e0:68:0d:1c:
                    74:1b:62:c4:4a:88:9c:1d:95:af:3b:6b:c8:53:77:
                    3f:47:c0:e3:a3:48:ab:c8:96:f4:20:39:4d:af:de:
                    64:83:c0:4c:67:a0:b4:1b:8c:b2:6b:52:7b:bd:0f:
                    dd:85:5a:16:14:e0:93:cc:91:98:6c:26:ed:d2:ed:
                    6e:63:ed:19:e9:25:1c:57:b4:31:55:a6:36:af:9e:
                    f8:1b:c4:c0:17:3c:53:7e:8c:44:c7:b4:88:27:9e:
                    46:4b:c0:b5:88:7e:7c:9d:60:3d:3b:2c:ee:31:78:
                    c7:20:9c:82:6b:be:b3:d9:77:a9:6a:1a:d8:9b:c7:
                    48:29:ad:e9:8d:34:4a:26:db:35:eb:92:88:a6:cc:
                    c1:a4:22:c2:69:db:ea:fe:93:c3:e3:90:bc:80:d5:
                    28:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:DE:9C:CE:F4:FF:4D:A8:6C:32:A4:28:99:C1:1B:6F:05:77:0B:AB
            X509v3 Authority Key Identifier:
                keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:66:36:bc:c3:04:c5:30:b4:1e:c2:fa:d4:0a:4d:ce:ea:79:
         76:a3:44:ff:55:3f:70:58:a2:27:24:ab:aa:6a:38:1a:f4:80:
         9e:9d:75:97:65:73:c8:97:cb:0b:00:f4:c8:d8:0f:7f:af:2b:
         f7:81:16:8a:ce:b3:cf:6c:ae:2f:03:03:06:60:15:6d:10:c6:
         2e:bb:ea:30:a4:6b:0f:69:96:2b:7b:92:97:18:98:cd:46:f8:
         3e:5f:6c:72:ef:a9:0f:b3:8f:29:42:b3:f0:d7:77:24:9b:71:
         23:3a:8f:2a:e7:7e:35:42:87:43:91:12:dc:31:38:90:61:04:
         37:30:96:48:57:31:4b:b9:ee:34:5b:04:62:84:9b:a9:e2:ff:
         7c:73:3c:0c:61:4c:46:93:96:6f:56:9c:3c:ed:f5:6e:34:ff:
         d9:52:a3:66:c7:a6:43:7b:c5:02:fe:b7:01:0c:b2:ee:bc:fc:
         3d:a0:d0:36:7d:b1:83:3c:f2:f7:9b:ec:34:12:4c:b2:54:a5:
         6f:39:d9:93:69:03:58:c8:b9:f3:71:40:14:03:4c:fe:d1:96:
         fd:7c:05:aa:71:64:17:d4:ee:c9:57:43:a7:6a:66:58:d1:dd:
         6d:55:01:7a:0f:1d:6a:a4:9d:0c:30:7c:e1:5b:9b:07:f6:77:
         8e:e4:56:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:28 2025 by rpki-client