Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File:                     1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier:          nV0K2GGtL7BqJdhXg5b1qGUS+43paZYNJpOYKYXhVVI=
Subject key identifier:   8B:25:0A:E1:09:20:B8:9B:03:EB:E8:12:67:90:17:FC:34:3D:05:72
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer:       /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial:       0199FCFD6D2FAED9681EA04F1B2C47A70B7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number:          0483
Signing time:             Sun 19 Oct 2025 15:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:30 +0000
Files and hashes:         1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: 2OsSaV3tUFQtLYjeegeyFEToUvN/7LDBdEfjGcMBros=)
                          2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6d:2f:ae:d9:68:1e:a0:4f:1b:2c:47:a7:0b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Validity
            Not Before: Oct 19 15:01:30 2025 GMT
            Not After : Oct 20 15:01:30 2025 GMT
        Subject: CN=8b250ae10920b89b03ebe812679017fc343d0572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:85:17:10:20:ef:a0:96:ce:63:99:2e:59:d1:
                    d7:08:8b:a3:f7:e3:b9:b4:5c:c5:b9:58:3a:ac:df:
                    aa:73:23:e4:97:95:37:b0:c9:9e:d3:21:24:d3:65:
                    d2:d8:b4:c3:08:a9:51:11:16:03:fe:f4:e8:6d:a5:
                    79:34:0c:dd:f8:8c:e6:c6:cb:34:9a:06:42:82:5a:
                    cc:21:e2:3f:14:43:9b:7e:9e:f4:c5:e1:30:cc:cd:
                    f5:7c:16:b9:1d:49:fa:4b:3a:75:52:f8:be:3c:0a:
                    cb:77:c2:46:84:74:9f:6a:65:a6:3a:bd:f1:df:de:
                    c4:ec:ba:fb:07:db:5a:b2:cf:39:15:bd:25:cf:cb:
                    a8:2f:5a:b0:02:2e:ef:ae:83:dd:8e:48:5d:db:34:
                    a1:4c:cd:cb:de:85:4e:d0:ed:56:fd:bf:1e:91:1c:
                    86:d3:63:a4:4b:52:25:be:fc:41:23:c0:36:fe:df:
                    eb:c6:e1:d2:12:e7:16:ed:83:ab:3c:15:ce:aa:bc:
                    21:1c:78:af:7f:13:92:58:70:ee:24:f3:fb:07:b1:
                    71:9f:75:35:7c:e5:5d:f0:87:d0:c1:a8:e6:43:7c:
                    1c:67:9e:69:5d:4e:c6:0d:61:23:ba:a9:8e:24:e3:
                    5c:5e:40:21:66:55:d0:98:24:6c:73:38:92:14:bf:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:25:0A:E1:09:20:B8:9B:03:EB:E8:12:67:90:17:FC:34:3D:05:72
            X509v3 Authority Key Identifier:
                keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:40:a0:d7:43:f9:4c:1a:d8:86:fe:dd:9a:d6:fb:34:6b:cb:
         30:33:df:0f:78:06:3e:d8:7a:0f:4f:1d:5c:1d:39:cf:30:25:
         1d:aa:42:a9:20:b5:85:e2:b2:b4:70:17:67:b6:12:1d:1a:ac:
         b0:d8:64:bb:35:35:04:b5:33:b1:72:2a:9c:76:cf:43:5f:47:
         67:a2:6f:d5:98:6b:12:85:07:92:67:6e:7b:e3:aa:b1:c7:c5:
         4a:61:08:9f:04:54:e3:b1:ca:ef:89:c3:8e:22:f1:12:40:44:
         6c:ba:d4:fb:cc:15:43:71:b7:0b:ba:b4:10:58:4d:84:14:8d:
         67:27:32:36:a7:2f:ba:d6:22:8f:4b:e9:c8:87:31:e1:4a:57:
         3c:39:ba:ad:97:8c:61:30:97:7a:26:78:79:be:99:f6:fb:79:
         92:70:64:09:44:e1:b6:77:85:0c:c1:20:b8:26:e0:b7:ce:5f:
         49:76:57:73:d2:bd:d4:b2:37:84:21:d2:05:f0:8b:ca:4f:f1:
         bc:b8:be:ee:54:41:d4:84:bf:1d:f2:07:17:72:80:aa:c0:7b:
         35:de:69:86:df:bd:93:9a:51:14:c0:ce:4e:ea:80:a7:d8:41:
         48:53:da:3c:46:aa:18:14:ca:01:58:a9:aa:91:58:ef:99:2b:
         27:65:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:34 2025 by rpki-client