Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File:                     Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier:          s33DYGczPuarwnY0fUn49wCFs7Eg6I4tQaHiSBrCMiI=
Subject key identifier:   18:A5:68:BC:4C:BE:C8:6C:56:C2:7C:88:84:5F:12:57:7B:D4:EA:AB
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer:       /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial:       0199FEB4E3F87854E736F7ECEF23FBE1DAB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number:          13A6
Signing time:             Sun 19 Oct 2025 23:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:31 +0000
Files and hashes:         1: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (hash: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=)
                          2: 86BJ0tf44AvFSPojuuBVHQjlnBU.roa (hash: a0d0fyTctB2pb4UQURZCBOpZA1JPgrlTVV7wSAI3T8Q=)
                          3: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: h/QVXT9h7X8JsxGi/d388F/+vlUZQiqQL9QhVikBC3Y=)
                          4: c6ZD9P3H30o78749ZEWyxOqABSU.roa (hash: cprASPGCBwZQZqsXiJOC/24dbl0p4JtT0bpDH9Sk/a4=)
                          5: idwzkQBauFhn5yVkIjeQVtz5mZE.roa (hash: 44TjgVB7J3xRAwnTMWxvN7AZUFhxeYggq97H4Mjz/Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:e3:f8:78:54:e7:36:f7:ec:ef:23:fb:e1:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
        Validity
            Not Before: Oct 19 23:01:31 2025 GMT
            Not After : Oct 20 23:01:31 2025 GMT
        Subject: CN=18a568bc4cbec86c56c27c88845f12577bd4eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:0e:55:cc:b0:f6:0c:5e:c0:03:cc:78:83:
                    d6:71:87:ce:6e:20:09:c3:5f:92:a6:59:ac:1c:f5:
                    56:7d:59:d6:db:3c:29:0f:7d:53:91:91:93:6b:2b:
                    c9:62:88:d3:b4:c0:82:12:76:24:71:8a:b5:ef:de:
                    a5:9c:19:dd:ac:fc:c6:bd:6f:f0:6f:85:82:47:ec:
                    fb:89:8d:a7:0b:96:f5:69:67:3e:a9:65:59:33:6e:
                    66:3b:6f:fd:c2:f6:ef:cb:7c:a1:f4:12:a7:60:03:
                    f7:c3:3b:5b:80:71:81:56:3b:fe:5c:5c:84:0a:94:
                    ef:60:27:5a:f4:73:9a:4b:9d:9b:fa:7a:68:68:03:
                    44:bd:ea:d8:09:85:13:67:d5:7b:9e:e3:9a:17:70:
                    a5:24:1f:b2:ff:26:9e:ab:43:af:ba:52:ca:c0:ff:
                    71:d7:69:95:7f:6e:41:3b:06:47:39:f4:1f:11:97:
                    79:68:72:ea:c0:1b:25:9c:eb:2a:19:9e:35:6e:f3:
                    12:dd:1a:3b:65:08:2c:c9:85:a9:50:55:6c:51:77:
                    6c:d7:e5:6f:cd:b3:5e:e0:09:0e:c1:53:8c:d6:92:
                    97:43:a1:dc:06:7d:ad:dd:53:cc:dc:1e:18:d1:60:
                    d7:d1:aa:b5:9e:8a:2d:97:5c:7d:c8:41:9c:9d:46:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A5:68:BC:4C:BE:C8:6C:56:C2:7C:88:84:5F:12:57:7B:D4:EA:AB
            X509v3 Authority Key Identifier:
                keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:15:c0:11:f5:36:be:31:c0:21:a0:87:ff:66:21:54:a7:32:
         e9:63:45:af:af:51:ed:c2:12:c4:44:80:4c:ad:09:51:ff:b7:
         df:c0:22:49:d4:f4:d1:8e:4c:5f:84:a3:24:e5:f5:ec:e3:19:
         a2:85:38:78:66:11:8a:7f:70:b5:71:3d:bc:c6:eb:9b:66:67:
         1d:93:6e:eb:48:13:be:4a:ff:6c:37:8e:10:15:f2:2e:a5:99:
         14:4b:22:65:4a:5d:ae:66:9d:af:26:48:59:ac:78:1e:99:fe:
         a8:8c:2c:03:cc:5d:1f:56:38:37:19:ff:67:5f:fe:7a:06:58:
         20:14:a5:9f:32:52:cb:17:3f:b7:4c:f4:90:ce:ff:35:17:2d:
         03:c9:3e:67:80:c8:9b:1d:6a:95:d1:57:aa:47:e2:4c:eb:c0:
         e1:c3:ca:ac:65:27:52:2b:ee:14:2a:73:b7:60:b9:15:0d:1e:
         71:26:d0:b0:22:88:5d:83:f5:42:90:e7:e7:42:2b:c9:c9:6f:
         58:73:a0:cf:c5:a1:eb:54:db:a2:9a:8c:c4:e6:6e:d4:22:15:
         ba:e1:7e:ad:7f:c9:8a:36:1a:c7:7c:6c:b1:3c:af:83:c0:8e:
         90:74:50:46:f6:2a:fd:8f:18:0c:21:2c:ed:d3:7b:5d:d0:c2:
         89:37:40:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:04 2025 by rpki-client