Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
File:                     9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json)
Hash identifier:          ZBt6JeBY2Zpsxd4VqvoMhcxNzc9ffxjQdFb4tAN+H70=
Subject key identifier:   CD:0B:D5:61:4F:CB:EF:FA:D8:E9:BA:FA:50:FF:6B:10:DB:D1:E6:1F
Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4
Certificate issuer:       /CN=f56769a42e44266f037ecb390d4115febe3861a4
Certificate serial:       0199FC21A1A0F4E2EDECBB7BCA4B7722ECBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 11:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:26 +0000
Files and hashes:         1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=)
                          2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: CBjSarKe4SDPu4pOjME8ddASlX+FiLtMrMBkyQEbuDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:a1:a0:f4:e2:ed:ec:bb:7b:ca:4b:77:22:ec:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4
        Validity
            Not Before: Oct 19 11:01:26 2025 GMT
            Not After : Oct 20 11:01:26 2025 GMT
        Subject: CN=cd0bd5614fcbeffad8e9bafa50ff6b10dbd1e61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:bb:31:02:9d:f4:f1:56:87:1c:36:bf:f7:
                    a7:73:72:04:93:5e:3b:6d:4f:fc:50:0e:ac:a6:0d:
                    a4:b8:0f:4e:b5:fa:0f:43:a5:6e:fb:6d:e0:c5:67:
                    df:27:b9:26:ed:4e:26:e0:0a:74:9e:f9:fe:53:aa:
                    55:e2:c0:d6:8c:23:6a:2e:a6:57:ec:82:c5:30:a2:
                    ad:b8:75:2f:81:cc:4b:36:09:a4:2c:75:7e:14:63:
                    55:f5:79:04:d6:97:76:f4:4f:61:02:97:f3:fd:e1:
                    f4:45:0b:59:89:c3:72:30:16:58:28:fe:b7:14:3a:
                    3d:f9:98:a9:73:78:f8:08:21:83:97:9f:23:26:99:
                    6e:8e:ad:f7:51:c5:61:57:2f:f9:71:60:4b:11:32:
                    6a:b3:6e:e1:81:c2:c0:08:d4:7b:46:2b:04:66:b9:
                    97:0a:6c:05:bd:43:e2:de:29:d0:2c:48:39:60:fb:
                    5e:fa:fe:d0:bc:0a:a6:bd:5e:fc:24:62:a7:60:d0:
                    21:52:03:32:72:9b:30:d0:e0:46:a8:29:35:81:7e:
                    04:6a:44:c2:1d:a8:22:a5:34:1c:b5:37:ee:03:22:
                    ec:66:f5:16:b1:77:35:82:2b:c9:26:c7:75:ad:b3:
                    bc:bb:3b:33:74:c5:d4:7b:9d:ad:06:1a:cb:01:f0:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0B:D5:61:4F:CB:EF:FA:D8:E9:BA:FA:50:FF:6B:10:DB:D1:E6:1F
            X509v3 Authority Key Identifier:
                keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:fa:13:0f:3c:ff:b0:7e:0e:e7:8d:b2:72:52:fe:52:9f:ad:
         63:84:8e:1d:25:ba:52:9b:25:38:fa:85:24:f9:1d:40:f8:72:
         4e:f1:df:26:e3:32:a8:c5:ef:fb:ca:c4:ef:96:88:b2:8a:5c:
         b2:d4:de:73:6a:1a:42:74:39:2d:7f:ca:03:6d:19:82:b9:b9:
         d6:ed:a5:eb:13:ec:d5:d4:0f:dd:96:d4:31:b2:21:b5:ba:a8:
         54:c0:d5:bf:49:59:d1:f1:02:a3:b4:ef:b5:9d:c9:77:bc:a0:
         e6:74:a8:07:79:db:65:07:da:f4:19:55:3e:e4:dc:85:b2:87:
         62:d1:f9:f2:7e:66:b0:c5:ae:13:d7:a3:09:69:6c:5b:fc:31:
         c2:32:d4:b3:c8:00:8a:3b:e3:95:bb:7f:1f:f6:36:98:c5:0e:
         33:fa:25:ad:8b:c5:1c:dd:a8:a0:dc:72:fe:5e:86:19:af:a7:
         11:ca:ab:8c:10:ad:07:a2:b4:0f:bb:a8:d2:a5:39:6f:da:cf:
         16:ff:b2:79:d8:b1:0c:f2:8f:6e:77:7d:3f:7f:09:4b:6c:8c:
         49:4d:9f:80:de:47:d2:b1:98:1a:dc:cf:ad:f0:84:6f:76:54:
         d0:8d:64:61:1f:64:7c:30:a1:fa:3f:4e:32:b4:02:95:75:b6:
         03:92:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:16 2025 by rpki-client