Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File:                     1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier:          VlVN5jXY84R83gJujK2FA1T7MqQ0b2HlMnh3omk1fIE=
Subject key identifier:   CD:97:1E:E6:D2:24:BE:C6:30:50:0A:08:D2:EE:7C:61:96:A0:4D:87
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer:       /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial:       0199FBB3625169A87664AFE2605BBF33F1B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number:          EC
Signing time:             Sun 19 Oct 2025 09:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 09:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 09:01:01 +0000
Files and hashes:         1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: bRJawnnPeS4ZQ5qBH2JuGpXMLCe8/F7Y6+JovVjK9i0=)
                          2: i9PMkFjZgddcdQkvP1yxnZzZAzQ.roa (hash: AH1/HP90I2Jx2/ajhEGYd7uNt41g8Pva2Gq/dNXs1dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:b3:62:51:69:a8:76:64:af:e2:60:5b:bf:33:f1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
        Validity
            Not Before: Oct 19 09:01:01 2025 GMT
            Not After : Oct 20 09:01:01 2025 GMT
        Subject: CN=cd971ee6d224bec630500a08d2ee7c6196a04d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:30:4a:e6:82:c0:d6:aa:ec:3c:05:0b:83:f1:
                    e9:b8:34:a2:44:a6:3b:08:c1:19:fc:01:7e:ed:3f:
                    41:03:c2:37:f5:b8:af:1a:74:cc:eb:f2:cc:83:44:
                    49:75:e5:37:43:b5:37:f8:15:fc:0e:af:f7:f8:86:
                    2e:de:0d:23:4a:df:87:80:33:44:13:da:ed:88:2e:
                    41:82:66:e5:97:31:14:21:80:a0:de:a1:4f:ef:2b:
                    65:14:b0:fd:8b:83:17:46:d5:12:97:42:33:0a:f7:
                    49:c6:d5:d9:e3:19:4f:7e:39:5d:c1:20:86:0c:5f:
                    94:9f:f8:55:b3:00:53:ff:91:e0:fe:c6:bf:eb:10:
                    0b:3a:d2:89:5c:15:83:0a:0c:7b:a0:97:3c:8b:3b:
                    0a:db:a2:7a:00:2e:b5:2d:c9:e0:8c:6d:91:a1:2a:
                    93:9e:15:bb:06:84:80:6b:30:3d:5b:06:ad:11:c7:
                    b3:49:3e:ff:1e:ce:42:0f:86:f0:00:6e:e2:f2:1d:
                    20:58:32:11:bf:cd:4a:57:6e:3e:23:9a:3a:70:df:
                    91:73:91:42:64:50:72:bd:7b:f6:57:99:ca:39:a2:
                    bc:ae:24:fd:00:af:40:48:4b:35:45:54:4e:92:78:
                    58:0f:ee:14:ca:b3:aa:26:36:df:9e:6a:d2:b4:48:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:97:1E:E6:D2:24:BE:C6:30:50:0A:08:D2:EE:7C:61:96:A0:4D:87
            X509v3 Authority Key Identifier:
                keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:59:a4:f4:aa:b6:02:10:87:7a:3a:01:a1:be:2d:54:9c:a3:
         7b:55:d5:3b:1b:3f:d8:57:07:3b:dc:96:bd:6b:4d:f4:e4:5a:
         68:a4:fd:39:3b:3e:38:0e:f4:42:c7:d4:96:43:0b:99:d4:e3:
         0e:66:4c:56:6e:05:8b:b1:05:cd:f9:c8:50:34:12:23:13:14:
         fc:c7:73:e2:c7:6f:25:6e:9b:58:fc:74:53:a5:4a:44:47:f0:
         e9:55:9f:6c:78:bc:a7:14:c7:00:a4:fd:db:68:ac:2c:b4:e6:
         34:6d:ea:2f:2a:32:25:87:d4:df:f3:a4:63:75:5e:86:c1:2d:
         f1:ef:0c:08:d4:44:ba:b0:40:bb:01:c2:92:b0:f3:a5:69:e7:
         a8:e3:83:b0:bf:87:9e:b7:d8:6f:7e:d4:2b:1a:1d:81:75:a4:
         f9:b1:cd:cd:4b:7c:8f:9c:50:12:d0:74:7b:5a:79:63:9d:e9:
         30:2e:e9:a3:4c:45:1a:6a:07:ce:2d:9c:29:6a:a2:17:b7:9c:
         f7:c9:4a:00:53:ab:5f:79:42:a0:62:78:40:6b:08:dd:ab:5c:
         22:07:35:09:2e:d1:a3:3a:55:73:cf:7b:3e:26:3c:e0:ea:79:
         c1:c6:c8:18:0b:9a:94:c6:de:20:ce:37:ac:d6:13:79:31:cb:
         9d:82:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:33 2025 by rpki-client