Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          6R2NBKVnpgO4voTsyO7PspRlSip9c7W7aWjBjtoO9ik=
Subject key identifier:   9E:30:FD:A4:7A:0E:49:F4:06:1C:F6:B6:EB:1C:82:5E:06:0E:AF:56
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       0199FB7C849952B67E12553592D9890469C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          1265
Signing time:             Sun 19 Oct 2025 08:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:05 +0000
Files and hashes:         1: 6jo1mW4jr6vxQFyb8Lr2xYFki74.roa (hash: I0t7VLBXEu80++dNJuv+glJrgnKcO3XEc9lYhQefY9A=)
                          2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: f4ILKEfCbsIE7ZtVAeXCn3KpWn8TAJebEWtAU8qM3QI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:84:99:52:b6:7e:12:55:35:92:d9:89:04:69:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: Oct 19 08:01:05 2025 GMT
            Not After : Oct 20 08:01:05 2025 GMT
        Subject: CN=9e30fda47a0e49f4061cf6b6eb1c825e060eaf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2f:39:1d:09:0d:02:d9:ab:09:0a:64:87:c4:
                    1d:c9:73:cd:28:a8:36:2a:27:af:74:02:36:c8:76:
                    c7:28:24:e0:c9:fb:2f:ca:7f:a2:04:d3:b8:fe:8f:
                    34:10:ab:a1:e2:55:f4:33:54:80:1e:05:fc:36:15:
                    f7:ee:3e:c0:d6:c6:dd:3c:8f:95:e0:7d:d4:89:c1:
                    3d:25:7c:5c:73:19:b3:4e:52:91:40:98:17:42:9a:
                    2f:5b:63:a9:c5:95:f1:5a:12:5a:f7:e5:ff:5f:8b:
                    ea:d5:a5:78:6d:82:e7:c8:d7:cf:d1:e4:15:dc:27:
                    70:b5:66:db:3d:b4:01:4a:20:4c:e7:4b:8c:2e:e5:
                    e2:39:ae:95:f2:01:b2:fe:d7:8b:08:d4:11:d7:64:
                    84:57:02:11:86:ec:21:a9:12:64:9f:47:40:e3:01:
                    4e:aa:62:5c:73:ab:d4:48:91:e1:d4:a9:a0:9a:d5:
                    e3:8e:6c:d3:be:1b:6a:8f:f9:e2:65:61:7e:14:51:
                    9d:fc:c2:be:98:ef:5d:8b:cc:ec:f8:81:4f:22:1c:
                    0c:a1:06:b8:a7:61:1e:e0:65:bd:ab:04:c7:ad:73:
                    74:13:79:93:28:b7:35:5e:aa:a5:eb:e3:60:ad:36:
                    dd:c5:b7:a5:86:3c:8d:ea:c3:96:10:8e:82:b4:38:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:30:FD:A4:7A:0E:49:F4:06:1C:F6:B6:EB:1C:82:5E:06:0E:AF:56
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:b9:3e:c6:cd:49:4c:de:4e:45:f7:80:a4:3a:85:23:94:
         3e:67:72:12:aa:d2:af:c4:9e:43:da:45:94:c3:02:a6:d1:0a:
         87:2c:da:34:1c:be:d9:96:07:68:ed:ea:9e:64:9f:eb:86:8c:
         62:e8:31:13:83:94:60:1a:8c:6d:50:24:bf:ae:9f:07:8f:c8:
         c8:52:ae:aa:db:dd:27:85:d5:95:90:33:0c:f6:13:2a:43:53:
         7b:32:31:a0:81:32:63:e7:98:c5:ba:12:3d:44:06:e5:f4:73:
         2d:03:14:64:66:24:26:74:e5:42:5d:15:89:5a:6c:6a:9b:eb:
         30:bb:e2:11:90:d2:ab:13:33:ba:d3:72:66:ff:b6:60:7e:7a:
         dd:37:14:89:94:d1:14:28:69:74:82:a3:a0:4f:04:c8:80:f2:
         cd:7c:18:10:3d:36:a6:23:e3:a5:36:5d:18:d2:18:78:96:f1:
         e4:a8:f6:6e:5b:c0:94:92:46:f4:82:d1:09:2d:4d:4f:58:5c:
         d0:32:aa:c0:41:5d:39:02:4e:84:03:90:07:13:8f:2d:af:6b:
         92:0b:45:3d:4d:97:f4:64:20:84:46:b6:e4:7e:ef:1a:5a:89:
         2f:e3:3c:52:80:f0:f3:cc:41:44:e7:1a:13:da:da:a9:a2:15:
         64:18:c8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:07 2025 by rpki-client