Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File:                     _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier:          mIQRs/jJ9glILuPh1nV4bpbC/Y5k8c7rwwYBF0fEqZE=
Subject key identifier:   27:EA:81:DF:72:8B:BB:C2:EA:6B:78:DF:6B:68:86:C3:79:7A:CC:AB
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer:       /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial:       0199FBEB5DFC13DA949B2ACD6E726EA42B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number:          073B
Signing time:             Sun 19 Oct 2025 10:02:10 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:10 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:10 +0000
Files and hashes:         1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: 7Mtbvth2bvVMsx8wVatEWqGoIdmIETokN957KQ664+A=)
                          2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:5d:fc:13:da:94:9b:2a:cd:6e:72:6e:a4:2b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
        Validity
            Not Before: Oct 19 10:02:10 2025 GMT
            Not After : Oct 20 10:02:10 2025 GMT
        Subject: CN=27ea81df728bbbc2ea6b78df6b6886c3797accab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ae:6e:c8:64:9b:e8:0d:08:29:bf:26:ff:a6:
                    2d:39:51:cb:df:e5:48:39:d7:c0:d4:29:90:fc:15:
                    65:d3:78:04:cd:a9:cd:2f:8d:22:36:76:5a:ad:40:
                    25:5d:db:ce:07:a2:a2:c8:9c:cf:97:9b:d5:79:13:
                    05:12:c4:3a:e5:52:84:b4:5a:3d:a7:d6:58:f3:b1:
                    02:76:c4:1b:d6:ac:92:4c:45:12:34:11:5d:b8:f1:
                    0b:b2:a1:81:3b:ca:c2:4b:b5:cc:6d:08:0a:3e:df:
                    68:d0:4a:10:2e:6c:78:be:3b:c8:3d:63:9f:0f:38:
                    be:47:58:4f:4a:de:c8:3a:2d:95:f8:a5:5b:7a:cb:
                    be:4a:85:20:8d:23:b6:a2:91:7b:72:5e:8d:a8:26:
                    03:08:46:ae:54:8d:03:e1:7a:e7:50:05:89:6c:03:
                    5a:3d:a6:77:03:06:35:59:4e:a1:5f:74:e3:48:5f:
                    40:44:6c:07:4b:58:bd:23:4d:2d:fa:d4:56:89:ac:
                    37:a5:2d:67:0f:fb:e1:d7:07:93:92:49:ba:03:e7:
                    c7:e4:3c:8f:36:72:ee:41:98:0c:73:44:65:92:17:
                    80:46:48:0c:b3:00:73:8c:26:d8:c3:cf:d0:9f:33:
                    43:2e:17:90:01:6e:7d:e5:b6:49:67:1b:79:a5:a9:
                    41:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EA:81:DF:72:8B:BB:C2:EA:6B:78:DF:6B:68:86:C3:79:7A:CC:AB
            X509v3 Authority Key Identifier:
                keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fd:25:47:01:46:49:75:83:6f:f7:3e:24:33:f6:64:c1:40:
         c3:27:26:f8:7f:04:fb:af:31:50:71:34:5b:11:f1:30:ce:fb:
         90:e4:b4:8f:df:67:f8:8d:88:cb:ee:87:b5:95:ab:a6:0f:bf:
         b2:14:d9:50:eb:ab:52:4f:5f:bb:92:e1:cb:88:da:27:ca:78:
         37:ab:e7:50:0a:7d:57:5c:66:67:68:c6:7f:b7:1c:b1:aa:87:
         07:c0:10:e8:ea:36:b7:6b:11:61:fb:46:55:ec:32:0a:de:0b:
         c3:05:3c:83:cf:a1:b1:d2:14:6e:cd:ea:29:30:69:75:e1:e0:
         d1:b0:2e:f6:7f:03:ad:eb:7a:ec:b0:65:4e:11:cb:32:77:d6:
         4e:c6:06:e3:0c:05:8f:38:66:b7:a3:f9:da:95:52:1c:96:f2:
         a9:1b:9f:75:77:9e:f0:96:b8:75:30:cb:cf:08:18:52:ff:78:
         ce:07:65:3f:67:48:26:8a:8c:10:cc:e2:69:4d:11:b7:7b:b6:
         24:71:67:40:de:aa:89:ec:f0:09:0d:bd:d4:82:78:4d:43:59:
         cf:31:4d:02:4e:f3:a9:5f:d2:98:db:88:dd:92:9a:23:d5:53:
         c0:1b:8c:45:1b:e5:df:c8:f6:c9:9d:65:a5:f6:fa:25:ea:7c:
         c8:97:d6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:36 2025 by rpki-client