Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File:                     t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier:          SONjU4SBimTCbP/NJCqYBlZemVV8EWxBDGdWggnwtao=
Subject key identifier:   5D:DE:53:65:73:B3:7F:52:2A:A9:81:FC:D6:79:6E:BD:AE:DF:F8:55
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer:       /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial:       0199FBEBE07ECF74C8BBE020D04EDFC13D93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number:          0175
Signing time:             Sun 19 Oct 2025 10:02:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:43 +0000
Files and hashes:         1: 5Dk0AIyQ8366dMD1Y4_Uei8F_xA.roa (hash: zRbpvOB6g3fcUQ2lDKrBbTaTLHRrCOPhGnLFNdn6z9I=)
                          2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: oVFVqBwlX+J5BCUVb4djVwqPnHO9QXxI+5YIyA/RRIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e0:7e:cf:74:c8:bb:e0:20:d0:4e:df:c1:3d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
        Validity
            Not Before: Oct 19 10:02:43 2025 GMT
            Not After : Oct 20 10:02:43 2025 GMT
        Subject: CN=5dde536573b37f522aa981fcd6796ebdaedff855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:9e:fe:c8:ad:98:ca:b0:34:00:00:02:5f:
                    f1:e3:5e:78:07:78:f5:9f:fb:ca:c0:96:8b:23:5e:
                    34:7d:b1:1f:14:9a:5f:a8:d0:de:9c:63:54:97:3c:
                    93:b6:80:23:9e:27:3e:f7:14:5d:f5:9a:e9:6c:39:
                    8b:60:d4:50:1e:d7:f9:ad:16:7c:6d:71:ac:17:b5:
                    12:e7:d9:9a:8b:cf:30:33:78:a0:c5:19:f6:87:d0:
                    45:c8:0b:fb:89:14:ee:03:35:a6:6a:38:e3:c4:c7:
                    94:ac:c4:e4:d6:ce:a6:e3:78:d9:81:8f:d5:60:96:
                    cb:0c:d3:72:ee:6f:ee:09:2c:a2:a0:b5:d5:7f:8b:
                    7b:7c:ce:8b:ba:cf:eb:12:ef:bc:49:7a:1b:10:c8:
                    af:19:af:0c:e9:b9:9b:76:d5:78:f7:60:f3:8b:4c:
                    ca:fc:4b:00:0b:dd:03:0f:02:04:40:64:63:50:5a:
                    3b:79:7f:bb:95:84:52:7a:ab:7c:e2:af:d2:be:be:
                    d2:aa:2d:b2:37:2c:6d:dd:9a:29:4a:8b:fb:af:03:
                    ee:28:c8:91:91:b5:2f:39:a4:cf:a4:b8:86:87:5c:
                    6b:14:36:5d:5b:4c:33:9c:16:62:ac:75:3a:88:73:
                    be:a9:79:d0:b4:81:2c:12:41:77:49:ff:f6:c5:c8:
                    7c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:53:65:73:B3:7F:52:2A:A9:81:FC:D6:79:6E:BD:AE:DF:F8:55
            X509v3 Authority Key Identifier:
                keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:a5:de:21:09:cc:25:1b:cd:da:86:6d:8d:23:41:2f:ce:
         70:27:c4:be:2c:6e:8c:fa:a9:e9:02:de:93:01:a1:b4:e7:b2:
         49:54:23:66:c4:25:fe:06:eb:05:07:42:1f:71:11:13:5e:4b:
         51:b1:f3:26:a9:67:67:fb:32:ef:4b:1e:16:97:cb:8b:b6:dc:
         7b:44:72:58:57:f3:96:ae:56:40:0d:73:d2:fd:2c:c3:ed:4c:
         1e:34:c3:f1:af:e1:fb:c7:a6:07:15:46:57:d7:ce:57:41:01:
         5c:5f:34:9e:d1:11:c5:69:9a:b3:10:9a:61:92:fc:3c:02:50:
         01:6b:d1:a8:89:13:54:ac:ac:7b:54:39:d6:02:ae:57:e1:5f:
         af:cb:53:e8:15:0b:f2:4a:0b:19:27:82:36:ef:49:df:9c:6a:
         4a:cb:bd:e5:b6:3e:ad:6b:02:84:60:53:f2:83:08:46:98:b8:
         b4:05:ff:09:54:5c:7c:98:03:c7:ef:cf:a0:35:12:89:77:02:
         27:0f:e4:92:9e:77:f6:14:64:ae:59:68:c4:a1:60:93:f7:7f:
         14:57:17:97:4f:b8:b1:52:d1:89:07:96:cc:ec:2f:d6:38:79:
         3d:49:0e:65:e5:bf:07:81:6f:45:bf:bb:24:33:79:e2:42:11:
         1a:6a:72:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:42 2025 by rpki-client