Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
File:                     AdKI5UcwsQk69JmTgDQvhdgZjQo.mft (raw, json)
Hash identifier:          5UgkgjrO6scNPWpvDZ4reUoBI5H1b96d5tQ/OAiLf8I=
Subject key identifier:   93:59:A3:6D:34:51:8C:C1:37:91:06:EA:EC:CC:BC:FC:E7:20:F1:BB
Authority key identifier: 01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A
Certificate issuer:       /CN=01d288e54730b1093af4999380342f85d8198d0a
Certificate serial:       0199FC5869070242BC57E3B74E88EBD0C49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
Manifest number:          091C
Signing time:             Sun 19 Oct 2025 12:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:16 +0000
Files and hashes:         1: AdKI5UcwsQk69JmTgDQvhdgZjQo.crl (hash: KS19tAyGw/W11QPqowuD7Y3l8rtpVZX0sXsU6PCGKtM=)
                          2: ZAHBHHaAw7FsCrpLUbPA7Y_af1E.roa (hash: BHI7TthhK/CKdv2M5Vzp/LT9A37tVvweSFfs+BtDAtU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:69:07:02:42:bc:57:e3:b7:4e:88:eb:d0:c4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d288e54730b1093af4999380342f85d8198d0a
        Validity
            Not Before: Oct 19 12:01:16 2025 GMT
            Not After : Oct 20 12:01:16 2025 GMT
        Subject: CN=9359a36d34518cc1379106eaecccbcfce720f1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:4b:b5:1e:85:fc:ea:68:4a:ff:0d:2d:56:
                    b0:b4:ad:8a:11:5b:75:bf:4d:26:bd:1f:ba:f3:26:
                    3b:f7:88:f8:85:5f:73:11:0f:67:7b:7f:0b:61:0f:
                    68:e5:82:35:2d:e4:66:3e:e9:93:a4:e0:21:f2:25:
                    ab:62:21:de:3c:b1:f0:00:7c:e8:06:90:93:fc:0c:
                    cd:74:33:38:b6:0d:0d:ff:84:b1:de:03:c8:7c:87:
                    bb:cf:41:44:9f:84:56:71:63:6e:c8:36:7e:c9:e4:
                    ab:6c:a0:8a:dd:24:f0:98:a6:83:c8:b3:e5:20:62:
                    34:3b:c0:4a:2f:91:d0:31:30:09:c3:60:55:59:b9:
                    7e:9a:ea:e7:94:19:cb:57:e9:41:ef:f7:5e:41:4f:
                    2b:6e:66:fe:54:b9:05:4b:df:73:91:72:4d:a9:27:
                    ee:6c:55:01:18:ba:da:83:7e:7e:67:6e:60:d6:93:
                    2f:a7:54:99:f1:89:05:9c:da:af:73:3b:55:77:b8:
                    8d:9e:a8:9d:ef:54:1d:f0:0a:45:21:24:87:3b:80:
                    43:c4:a8:df:d1:e7:10:71:b7:d7:77:8e:9e:16:ee:
                    7a:d5:a1:73:67:6e:2a:08:78:0a:4a:3c:04:55:8f:
                    3f:2a:d1:7b:80:4b:56:12:c6:2f:73:13:48:e4:4a:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:A3:6D:34:51:8C:C1:37:91:06:EA:EC:CC:BC:FC:E7:20:F1:BB
            X509v3 Authority Key Identifier:
                keyid:01:D2:88:E5:47:30:B1:09:3A:F4:99:93:80:34:2F:85:D8:19:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdKI5UcwsQk69JmTgDQvhdgZjQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/92c0a7-2c00-4a0d-b0f9-bce3eb5775eb/1/AdKI5UcwsQk69JmTgDQvhdgZjQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:52:83:80:f9:7e:97:fd:b5:53:b7:d7:7a:76:f5:92:d1:8f:
         da:3e:48:fc:d9:cd:f0:7c:d1:a7:94:4c:c7:99:79:14:c5:28:
         f6:27:42:40:29:56:ae:5b:41:86:2a:e0:d7:c1:bd:f7:60:34:
         52:55:9b:78:52:7e:81:6e:80:a0:60:ea:47:5d:df:3e:7c:6e:
         a3:11:d2:59:45:c3:34:56:42:c5:52:ba:79:cd:58:67:ba:ec:
         24:df:fa:f5:f1:fe:36:0a:ae:95:dd:1e:0f:23:58:af:07:6a:
         19:9b:65:fc:26:a8:f4:2c:83:b4:4f:f2:25:66:93:4b:17:92:
         29:3a:26:cb:fd:6c:c6:93:b9:e6:39:33:20:5b:52:ab:1e:5e:
         bf:9d:81:cd:11:97:6d:c6:78:cb:5c:bd:02:6e:7a:19:99:7d:
         b8:23:e8:d4:01:f9:62:78:f2:e8:d7:81:53:10:b2:ec:71:5b:
         3c:17:77:98:78:d6:fd:3e:88:59:7e:06:24:e7:e5:15:6e:7c:
         6a:24:2f:e4:52:10:6e:99:87:67:70:1e:dd:82:7d:e6:7d:85:
         bc:65:43:be:e0:e9:00:be:3b:c3:b7:95:80:5f:29:b2:81:8a:
         87:b9:de:e0:62:3f:8d:cd:b1:69:60:59:5a:e0:a1:99:d2:cd:
         4e:7e:8d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:12 2025 by rpki-client