Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
File:                     i992xUueaTXDCptMm6kwmsRw7AI.mft (raw, json)
Hash identifier:          js9Sw8XqmmUWtqQUc6Z26Ddg10U+FpwqLmrYYJRFlYs=
Subject key identifier:   DF:4B:7D:49:0B:40:6D:B1:FA:1B:4B:C7:73:B4:62:45:E8:74:A2:CF
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Certificate issuer:       /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial:       0199FF5952132A0C0765A14C64AFB6C80349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
Manifest number:          1419
Signing time:             Mon 20 Oct 2025 02:01:07 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:07 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:07 +0000
Files and hashes:         1: TfyeRFd3VCbgM2FKibZFqgYPaDw.roa (hash: /rru2Z/Tk7Ps+KGw08oWifW+xfVigUyNIXVBHMyf3JY=)
                          2: VmLWF2kLf7eTv8bwMXbk9b_Me2E.roa (hash: 1ItZnIffXoYbRBfY7mSWO6cvW2p6OOPwlCKSIhvogDA=)
                          3: gvPQ1buZOOV3g-KOPTV-IGXyfZQ.roa (hash: ky4dJJO59R27oJhhtVDGC/53OumEgsx5hY4cQRzqpnY=)
                          4: i992xUueaTXDCptMm6kwmsRw7AI.crl (hash: RF+11LtEZM8C5CqqSucIhrcGZtsRtrThuLwSWqwyb28=)
                          5: rRATSuRPn1k0xdr0Pcevps3F_6c.roa (hash: uKtUTtOlOhfr3aV46xVMoqePsq5iGO7zwI0BAcwR7cw=)
                          6: tTK29H8qvp4tkJzIaGJhuBe1bIU.roa (hash: Tx3i8lMN9fW8zjFWTFnN1j1gzmJPtjiPz2Le6ewXcA0=)
                          7: y33SBpnij0Kjvfz-rw1jNAzGe9M.roa (hash: +G4n27KUzm1afB/8sada6nItov0UFlI98LmgnjjGQ5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:52:13:2a:0c:07:65:a1:4c:64:af:b6:c8:03:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
        Validity
            Not Before: Oct 20 02:01:07 2025 GMT
            Not After : Oct 21 02:01:07 2025 GMT
        Subject: CN=df4b7d490b406db1fa1b4bc773b46245e874a2cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d2:97:f2:ae:d4:d7:43:0b:a6:90:ed:20:04:
                    d4:84:96:56:04:be:b2:c0:cf:df:64:19:72:95:18:
                    1c:e0:f9:07:20:1b:9d:cd:80:dc:8f:d4:90:68:7c:
                    97:5d:af:3f:d2:9e:0e:f1:7e:10:41:27:fe:02:08:
                    bf:a8:d0:c2:ce:b7:37:b8:f8:97:cf:20:18:c3:48:
                    55:75:4e:22:a1:0d:63:83:a1:e2:94:46:53:21:3b:
                    83:7c:83:5b:3e:87:0a:27:51:24:b5:a2:bb:e8:26:
                    90:7e:57:7a:27:b3:13:39:7b:09:2f:b5:e8:03:1a:
                    f5:7c:8e:c0:1e:ae:85:9d:ab:6d:47:48:73:b6:5b:
                    dc:c4:39:43:cc:54:93:b5:0f:58:05:6a:42:4d:ad:
                    10:da:c7:f0:a0:a3:60:39:d0:b8:21:f9:b8:71:69:
                    e6:8c:2f:bc:49:25:f7:9b:0d:fc:cf:03:8b:39:90:
                    46:a2:f4:8e:be:3f:fa:a3:1d:11:b0:b0:b6:0b:72:
                    1e:48:64:df:b3:53:da:a7:5c:03:f2:c2:97:8c:92:
                    f1:06:4c:24:f7:7e:22:a7:9f:7c:ca:1d:9f:63:d5:
                    82:88:4e:c1:5f:14:72:41:8d:64:a5:ea:d2:3e:ba:
                    81:bf:1e:66:eb:5a:19:e0:19:25:a6:f7:e0:70:29:
                    c4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:7D:49:0B:40:6D:B1:FA:1B:4B:C7:73:B4:62:45:E8:74:A2:CF
            X509v3 Authority Key Identifier:
                keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:dd:60:6b:55:f6:f5:0d:ba:37:df:db:cf:5f:06:c6:2b:
         d1:ec:de:c1:be:25:f6:39:25:0c:f0:d0:83:13:f8:e5:1b:7f:
         5c:32:fd:69:d3:5d:49:4f:e4:23:6f:b9:58:d6:e8:8f:17:63:
         ea:ef:d9:bd:a2:4d:98:08:ac:2d:b2:05:39:68:0f:0b:0c:26:
         37:7d:39:47:8b:f3:7d:ac:cc:7e:12:94:17:5e:87:db:2f:64:
         63:c0:51:68:30:82:e9:0c:8e:3a:db:75:5b:ad:5d:78:d7:fd:
         cc:a5:a8:9c:b4:9b:2d:db:b0:1e:df:92:52:67:f8:c4:d2:3b:
         75:b5:b4:55:b1:83:1c:53:13:95:da:e2:ba:c8:8f:20:5a:c1:
         7a:31:58:86:d0:39:35:96:43:c0:28:b3:f9:b9:9a:72:0c:01:
         06:71:a4:d6:b0:fc:af:e3:05:9f:ef:6d:25:ce:ee:29:ef:bc:
         78:41:70:df:09:7b:52:3f:26:9e:be:f2:09:a7:f4:18:8e:47:
         c5:d6:19:88:74:d8:34:70:6d:6a:58:8e:51:17:c3:9d:68:21:
         2a:a2:b2:8a:2b:a6:28:f0:af:5e:9a:0a:64:93:3e:a2:62:2f:
         ca:52:74:20:96:b1:55:0c:ea:01:17:e8:2d:60:97:ad:c7:e9:
         f9:a4:9b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:14 2025 by rpki-client