Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
File:                     iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft (raw, json)
Hash identifier:          m0GUEy+q36/2BZfcO+OqKmqeqfJOzXfFxWjbO/GAQ6I=
Subject key identifier:   54:07:1F:A1:39:C1:76:D3:42:37:0D:AC:AB:C1:BB:98:CC:87:07:E8
Authority key identifier: 88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE
Certificate issuer:       /CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
Certificate serial:       0199FA6A9228CCB9DF3E0EF0A7FBE4502E38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
Manifest number:          064F
Signing time:             Sun 19 Oct 2025 03:01:52 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:52 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:52 +0000
Files and hashes:         1: NOTlqU2dG5SZUtFWrRvKPCIYT_I.roa (hash: fMBaaIac4pSZ5FYQhcUdq0rjdRPBorC9IDyKulvOrp0=)
                          2: iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl (hash: R3BKl8T6xHq8EFNwPLGhis3KbvrPcErlZep0vNfMwak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:92:28:cc:b9:df:3e:0e:f0:a7:fb:e4:50:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d5c80b358732cf1eceecf2f5bdc8ab3dc181ae
        Validity
            Not Before: Oct 19 03:01:52 2025 GMT
            Not After : Oct 20 03:01:52 2025 GMT
        Subject: CN=54071fa139c176d342370dacabc1bb98cc8707e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:71:56:bf:e2:b0:1f:eb:43:8d:f5:00:cd:
                    04:62:62:f0:bb:f6:37:e0:5e:31:e2:94:78:7b:3b:
                    bd:ef:70:4e:85:f3:42:da:ba:f3:d9:c8:87:d1:7c:
                    46:6b:f4:12:cc:13:9b:40:aa:67:da:e5:6f:a7:60:
                    1d:32:b3:44:b4:f9:d5:5b:38:e2:16:85:11:4c:ea:
                    f5:31:4d:5a:bc:39:8b:29:64:a4:e0:3d:f4:1e:ab:
                    98:a0:6e:92:0c:63:70:2c:a4:00:27:4d:96:70:35:
                    85:f6:ae:cc:09:a7:07:f5:05:7b:17:6a:fd:6f:43:
                    f6:4f:74:aa:0a:7a:83:a0:13:e1:2c:0e:92:fd:d9:
                    79:ec:42:c2:99:37:2a:5b:3e:69:f3:71:5e:c0:30:
                    e0:be:8d:60:76:c2:b5:f7:e6:44:fd:1a:50:4f:82:
                    f0:aa:50:25:14:fc:0c:48:ea:29:65:1b:f4:92:8d:
                    0c:00:02:a4:ef:3e:fd:6b:0a:19:19:b2:8b:8c:55:
                    10:b5:da:9a:e9:bd:a3:9d:36:8d:23:26:5a:11:35:
                    ca:26:65:58:1c:f0:c8:e7:a8:50:10:dd:51:f4:a2:
                    61:95:80:43:fd:67:c5:be:4e:05:e2:df:bc:55:5b:
                    92:65:03:cc:bc:8b:2d:e1:c4:76:93:91:69:26:5e:
                    b5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:1F:A1:39:C1:76:D3:42:37:0D:AC:AB:C1:BB:98:CC:87:07:E8
            X509v3 Authority Key Identifier:
                keyid:88:D5:C8:0B:35:87:32:CF:1E:CE:EC:F2:F5:BD:C8:AB:3D:C1:81:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNXICzWHMs8ezuzy9b3Iqz3Bga4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/b75b92-f1c7-4b56-9a9f-9a2f796c9477/1/iNXICzWHMs8ezuzy9b3Iqz3Bga4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c1:b8:90:3c:3e:e4:a6:bf:01:dc:a7:a9:c4:b6:92:3c:6c:
         2a:14:71:16:9b:bf:65:30:b1:b7:49:7a:7c:b4:61:00:77:83:
         8e:b0:cb:12:6a:4e:3d:3f:3a:03:a1:0a:79:3d:cc:26:68:3f:
         1f:c5:1c:39:50:ea:e8:de:45:f6:43:34:62:a0:26:bc:5a:91:
         d3:9b:28:3d:ab:74:fd:cb:18:c8:a2:be:af:38:06:4c:ad:75:
         3b:33:94:f7:32:4e:96:80:e1:2b:5f:5d:dc:17:bb:3a:08:c8:
         14:ba:94:d9:51:5f:51:48:d8:70:70:7c:cc:8e:20:0b:38:87:
         06:de:d9:22:9e:3e:8e:17:bc:dd:4b:39:97:27:a0:df:1c:67:
         2b:ac:34:fb:d7:e1:91:24:d8:a9:9d:58:f4:6b:55:d7:d8:b7:
         1f:47:91:fb:80:62:9b:cb:cd:11:85:3f:84:f3:40:aa:5e:8f:
         f7:3d:a6:a9:d5:fe:9d:1b:6b:12:7d:28:7b:af:5d:d8:a2:c8:
         18:50:4a:9c:c1:0d:3b:4b:70:d2:90:f3:60:9d:4f:86:18:8c:
         e9:e6:18:d3:25:c9:27:75:49:ee:74:c5:cf:b5:66:49:af:49:
         e5:a6:a3:e2:75:bb:16:88:ab:8a:8b:08:5e:10:be:7a:72:6b:
         cc:56:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:18 2025 by rpki-client