Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
File:                     AmEbTqouCzf3LMCKySlhmB6rsh8.mft (raw, json)
Hash identifier:          f7HpLvVGSF7R6alozg0N9GaOqLXKo+ttie7nmVV7fKE=
Subject key identifier:   E4:3A:1E:F3:D6:50:67:ED:F9:8D:76:D7:D1:4F:1D:88:45:4F:C8:7D
Authority key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Certificate issuer:       /CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Certificate serial:       0199FFC8C3C92160F00DCEB134A4A84D4D22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
Manifest number:          1675
Signing time:             Mon 20 Oct 2025 04:02:51 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:51 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:51 +0000
Files and hashes:         1: AmEbTqouCzf3LMCKySlhmB6rsh8.crl (hash: dGTNznY7G8g279+pj/T7Cs/eKk599O63CncgqareV+0=)
                          2: ZYWLpZ35KZiRaWxSeFuEnh6lxl0.roa (hash: A+6pCmvRh21bff+k990m7MW26aQWM6C7J37zdRTRafw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:c3:c9:21:60:f0:0d:ce:b1:34:a4:a8:4d:4d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
        Validity
            Not Before: Oct 20 04:02:51 2025 GMT
            Not After : Oct 21 04:02:51 2025 GMT
        Subject: CN=e43a1ef3d65067edf98d76d7d14f1d88454fc87d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:e0:e3:12:e7:7a:b0:20:80:20:0f:68:ed:
                    e4:23:74:41:05:98:25:b9:0d:4f:ac:94:87:ff:1e:
                    f2:c0:46:91:54:2f:5f:a1:71:51:13:43:e1:56:ad:
                    b8:2c:7c:20:19:1e:dd:85:e2:b6:04:fd:89:ee:18:
                    b1:29:4f:99:ca:f7:71:2a:7c:2b:5a:6f:76:a8:04:
                    c4:39:38:04:c7:5b:7e:3e:2a:a0:8d:f5:0e:a0:44:
                    f1:bd:fa:91:fd:9d:90:5e:6b:3d:bf:e5:3f:3a:97:
                    bf:6b:2e:00:2b:3c:6a:03:97:41:69:89:c9:e1:00:
                    94:4f:6e:ea:ab:78:aa:92:5b:33:16:15:6a:55:e7:
                    38:45:51:10:a6:68:fb:13:88:3c:43:fb:89:67:86:
                    3a:af:80:1e:e4:5a:22:95:3b:f1:0d:a6:20:07:01:
                    8b:ab:71:45:94:d2:6c:de:34:dc:2d:a0:4e:70:eb:
                    29:82:03:77:b9:e3:55:22:6b:b2:dc:7a:4b:14:3e:
                    ec:e7:e3:bd:57:91:66:5c:d7:da:78:15:58:78:3b:
                    3f:a7:6a:a3:08:a4:d3:4b:46:c0:cc:40:ac:60:a7:
                    3b:ec:76:1b:71:a4:1a:85:2f:83:8e:7f:0a:cb:ba:
                    57:61:5e:d7:28:14:08:ee:36:6a:31:07:d5:39:b5:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:1E:F3:D6:50:67:ED:F9:8D:76:D7:D1:4F:1D:88:45:4F:C8:7D
            X509v3 Authority Key Identifier:
                keyid:02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:8b:86:ce:26:7c:cd:b6:90:a8:c9:21:eb:58:a8:4f:b3:
         fc:f1:ec:01:2f:e5:65:ae:9c:4d:7c:78:1a:26:14:d3:28:39:
         33:4d:08:4f:0d:c0:66:3a:38:67:1b:c5:0d:27:f6:80:f4:6e:
         5f:46:1b:bc:1a:24:fd:28:1a:e4:74:93:e5:78:3f:78:7e:35:
         41:28:02:90:70:fb:ec:5b:c7:3a:b5:db:7f:d4:82:ae:27:05:
         77:32:98:38:3e:0a:c8:a3:85:6a:77:66:2c:13:ad:78:56:46:
         08:7b:f7:0c:a9:e7:dd:21:94:92:ba:66:b3:e2:88:50:99:91:
         31:cc:42:1b:ca:f2:7f:8e:38:fa:d8:c9:57:cc:58:35:ca:1c:
         88:52:04:2a:6e:95:d1:05:f4:79:c1:76:11:59:f5:2a:7c:e8:
         4c:fe:7d:0c:b6:c3:57:ef:40:2a:29:b6:a8:f1:b2:86:9d:fb:
         ab:36:36:8d:89:b9:68:68:63:89:b1:5f:2c:28:d6:b4:70:d3:
         4f:f8:01:25:cf:ba:e8:b6:d9:7b:5a:f4:f3:a2:12:e9:99:b8:
         9f:d6:03:4c:d0:25:94:f4:fd:ff:5f:59:8d:4c:b8:6a:81:a3:
         7f:48:ed:74:e9:a1:6e:08:fe:ab:95:a4:3d:b9:31:c7:cc:bf:
         47:74:22:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:06 2025 by rpki-client