Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File:                     1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier:          r8Rb7z+eMOa5wQJJbZ+D4EkfOP8WhQhUJARR/We1j8A=
Subject key identifier:   47:50:EB:45:26:67:89:E9:0B:98:02:03:01:87:06:00:AB:E4:15:89
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer:       /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial:       0199FD6B1E3D855E1137B3548955865EC65D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number:          0F60
Signing time:             Sun 19 Oct 2025 17:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:19 +0000
Files and hashes:         1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: QZnlf6ILEVGIxs1b1MjfHwZHTFWXuEFGdj8WXJBDaf0=)
                          2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:1e:3d:85:5e:11:37:b3:54:89:55:86:5e:c6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
        Validity
            Not Before: Oct 19 17:01:19 2025 GMT
            Not After : Oct 20 17:01:19 2025 GMT
        Subject: CN=4750eb45266789e90b98020301870600abe41589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c5:49:65:ed:37:ed:79:96:9b:a6:98:aa:97:
                    3c:30:04:d5:d2:d6:bb:6c:b1:da:92:d8:3e:3f:b6:
                    48:18:d6:af:e3:30:7f:e2:d8:cd:a8:01:c8:6a:36:
                    9f:e9:23:70:15:e5:20:b4:38:40:29:89:72:f5:1f:
                    25:3a:ba:35:7d:ba:19:59:ed:cf:df:3f:a3:80:37:
                    2f:3f:7d:b6:db:17:c0:2d:c4:b5:4b:d4:56:a8:78:
                    7f:bd:f6:66:48:14:73:6a:92:08:24:9a:21:de:f7:
                    b6:cc:30:f0:07:26:4e:c2:24:ba:95:2a:6f:23:8c:
                    14:9a:29:e9:7b:9d:b3:2e:b5:f4:8d:81:04:13:3d:
                    c8:98:e6:7c:69:b3:ba:df:70:cc:c4:1a:7a:b5:55:
                    3e:13:f7:c2:4c:d2:5e:5a:79:1a:0f:9c:0e:dc:5f:
                    ca:c6:75:1f:a5:f8:e7:3e:41:9f:75:9b:6b:e3:57:
                    bf:74:9d:e9:a6:89:d3:d6:2a:63:3d:53:ec:77:da:
                    88:47:5c:b7:25:9b:0b:2d:5c:f2:c5:ed:91:4a:ef:
                    63:0b:59:10:29:bd:4c:d5:e7:66:1c:06:e4:a2:7d:
                    0a:19:ba:54:bd:e1:26:fc:41:26:66:c5:54:a7:5c:
                    5c:4a:79:0c:92:be:fe:ac:11:19:92:8a:29:31:df:
                    9e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:50:EB:45:26:67:89:E9:0B:98:02:03:01:87:06:00:AB:E4:15:89
            X509v3 Authority Key Identifier:
                keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:34:7f:8a:24:56:36:fc:4e:78:89:77:cc:18:03:b3:e2:66:
         58:12:56:a9:3a:2a:0c:30:3d:2c:79:1d:b8:17:78:a7:f7:5a:
         12:fc:c4:ba:53:4e:06:c9:e8:c8:29:fb:4b:f6:92:c1:f7:d1:
         33:b5:c6:2a:cb:de:8b:63:3c:43:d7:f2:44:00:41:68:a6:07:
         4f:a6:32:86:cd:bb:25:82:c0:a5:36:e9:fe:f4:95:97:04:fb:
         03:67:9a:10:99:dc:f4:27:44:52:a4:a6:50:99:4c:3a:0d:56:
         ae:16:32:02:8d:92:69:31:24:ff:9c:76:d3:ed:0a:56:24:4e:
         1e:a3:15:9c:a3:2e:6d:dc:ef:16:be:4e:7a:e8:77:66:e2:25:
         88:41:b9:8d:c4:51:90:6f:38:68:12:b0:1e:70:91:4e:3a:05:
         05:47:ad:55:f5:f5:4c:e1:77:fe:56:65:0b:a2:f3:d3:c8:4a:
         88:20:e2:47:18:98:1e:a1:9a:17:19:14:09:a2:99:88:0b:62:
         33:bb:86:c3:99:62:e3:0a:5f:77:a3:37:f5:d0:d4:cb:24:7e:
         37:ca:4a:9f:ef:60:49:4f:c7:39:d6:4d:2d:f3:5a:59:c1:ab:
         75:4d:d2:76:21:d6:4f:cf:48:2b:e3:64:8a:4f:70:92:79:e8:
         f2:b6:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:09 2025 by rpki-client