Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File:                     AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier:          YxqJ4PXgoSvbx4KPhxhlKGs71V7shhqgrO8d68JqoT0=
Subject key identifier:   90:9B:FD:42:14:0F:CF:E9:03:80:2B:7A:17:BC:2A:44:02:64:02:4D
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer:       /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial:       0199FB7CECA219E9B250E94E9B805FEE077F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number:          1074
Signing time:             Sun 19 Oct 2025 08:01:32 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:32 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:32 +0000
Files and hashes:         1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: QWPKDMwBj5db5keZW/c7EB4/a9HizIIqifSiXrVd8MQ=)
                          2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ec:a2:19:e9:b2:50:e9:4e:9b:80:5f:ee:07:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
        Validity
            Not Before: Oct 19 08:01:32 2025 GMT
            Not After : Oct 20 08:01:32 2025 GMT
        Subject: CN=909bfd42140fcfe903802b7a17bc2a440264024d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f7:29:da:6c:a7:6b:34:d4:01:50:f3:fe:b9:
                    1c:a6:da:2c:db:76:7b:0e:48:fd:03:c0:87:74:2a:
                    7d:3c:2e:04:ad:68:fc:46:76:05:21:5b:7e:56:58:
                    11:f5:17:f2:48:ab:f8:f9:d0:0e:01:3e:2e:a2:04:
                    b6:9c:c9:6f:da:1f:d8:d7:2c:17:e1:68:12:02:ac:
                    ab:d7:ef:77:58:63:e9:e8:a7:df:78:45:82:33:7a:
                    c4:78:df:a1:ff:ce:b8:8f:ae:e8:d9:ea:03:e9:2e:
                    5d:6b:be:c7:3f:44:15:05:b2:ee:b9:67:b7:c6:a1:
                    0f:d6:ad:5c:16:f9:6c:92:ec:ab:42:d2:05:45:05:
                    5f:0b:09:d3:13:ae:83:bc:51:28:24:2e:cd:59:cf:
                    dd:bf:22:d0:8c:39:e4:bb:28:3c:d9:35:87:de:63:
                    99:c5:d6:6c:87:43:88:d6:16:f7:c3:2d:26:e5:4a:
                    1a:26:76:5e:63:79:82:c8:1a:bd:b7:59:35:98:da:
                    56:47:5c:b8:25:51:87:a4:33:d8:39:3c:0e:5e:a1:
                    d5:79:f8:97:21:1f:2f:af:05:99:23:aa:82:b4:ba:
                    3b:5d:09:c5:fe:87:84:32:1a:9e:48:18:af:58:e6:
                    6c:b2:7e:01:fb:ee:a4:35:f4:29:f2:b3:66:60:51:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:9B:FD:42:14:0F:CF:E9:03:80:2B:7A:17:BC:2A:44:02:64:02:4D
            X509v3 Authority Key Identifier:
                keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:a1:6a:f5:a4:ad:a8:48:02:11:12:0c:cb:d5:28:d4:a9:
         f4:4e:f0:a4:34:a3:49:be:eb:b0:b8:5e:5a:bc:ed:8f:9a:45:
         a9:2c:a4:36:0e:21:d8:e7:11:06:3f:71:c7:f1:19:8e:0f:b5:
         dc:9d:f4:9f:de:26:1f:ad:4d:2d:9f:7b:56:e7:b3:db:85:52:
         92:4b:17:ab:6c:62:f5:6a:da:ed:1b:02:e5:05:46:54:f3:c6:
         f6:71:36:48:3e:47:5e:48:a4:7c:25:b0:81:e9:1e:a3:d9:64:
         28:1e:af:d3:c4:9f:49:b1:40:71:2c:48:d7:6f:4d:cf:73:66:
         bc:e1:55:a7:0f:c7:97:62:3a:5e:74:06:96:01:47:e4:16:4d:
         a5:01:da:f8:eb:f2:14:9c:1c:49:6d:90:af:0c:44:27:b9:7f:
         81:bc:95:5d:8d:08:7b:78:90:b1:9f:a9:fe:98:f0:9b:65:85:
         d7:ba:fa:bd:0b:08:7d:ba:da:8f:b4:be:2c:e0:78:1f:ea:a0:
         e3:a2:00:07:c8:10:fe:8f:2f:28:c6:e0:f1:f5:09:f4:9b:0b:
         2a:ea:91:6b:7d:84:46:67:04:b6:fe:00:49:49:2c:37:a7:17:
         95:b4:14:05:0d:3f:ef:e4:f7:9b:3c:27:b3:50:f8:92:3d:ca:
         65:fb:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:59 2025 by rpki-client