Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          MgmJ03q/yhnwH34wbS3xAWP2W3y+n+kAnFEkegaTEok=
Subject key identifier:   75:13:4F:CC:CF:D0:93:82:B9:5B:0E:92:29:41:92:B3:51:8D:97:87
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       0199FD342D52D65C936448C9E4D308B4469F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          1673
Signing time:             Sun 19 Oct 2025 16:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:19 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: TiN8N3JcWAa7C8jk8RDY1jWqItQb9CcHbMQrI6q7bko=)
                          2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:2d:52:d6:5c:93:64:48:c9:e4:d3:08:b4:46:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Oct 19 16:01:19 2025 GMT
            Not After : Oct 20 16:01:19 2025 GMT
        Subject: CN=75134fcccfd09382b95b0e92294192b3518d9787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:52:50:e9:92:74:e6:21:16:85:bf:b7:08:
                    db:96:55:97:7f:73:c4:bc:ff:79:93:10:6c:13:be:
                    a7:f2:07:2d:85:86:6f:d6:5e:7a:8e:c8:98:09:48:
                    f8:79:dd:0e:44:43:d4:c9:1a:71:c8:eb:81:f9:91:
                    38:84:88:58:f8:6c:34:ed:7d:ca:8f:2e:04:8c:3b:
                    8f:6e:21:3c:30:09:0c:e0:aa:4f:34:b1:8d:00:90:
                    77:74:cf:54:a2:e0:8f:df:3b:a9:69:31:4d:d4:e4:
                    cb:dd:ed:40:6a:e8:69:83:56:bc:45:94:68:2b:2c:
                    28:22:b6:cb:65:ee:a0:26:a3:1a:67:b3:bb:82:f3:
                    f9:ea:08:5b:14:12:9a:5f:ac:5b:c5:f8:a3:1c:d2:
                    1e:05:c8:a2:db:ee:f7:bf:38:2a:f8:c7:f7:da:fc:
                    6c:fe:a4:88:ac:e4:e0:e8:c3:f9:bf:7a:d3:06:d4:
                    de:60:ed:28:73:ed:56:ed:50:76:f3:d7:6a:f3:f9:
                    45:78:63:0c:a3:42:3d:7c:80:d5:5c:b8:46:a3:3f:
                    fa:5e:18:d0:70:1e:a3:ad:a6:41:c8:07:03:65:3d:
                    a1:09:dc:0d:24:4b:f0:fb:00:ac:c0:aa:ab:15:fd:
                    5b:5b:af:7e:22:8c:8a:75:5e:88:d1:cf:24:14:50:
                    3c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:4F:CC:CF:D0:93:82:B9:5B:0E:92:29:41:92:B3:51:8D:97:87
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f2:a4:ac:4a:dd:54:85:ee:5c:2b:be:09:ca:7e:3b:2e:4f:
         86:80:a5:03:5a:35:3f:c7:9e:37:de:87:d1:74:b5:3b:ed:7a:
         fc:88:92:3d:ef:ba:bf:18:80:53:1c:2f:83:a5:f1:7e:6d:22:
         0f:e7:12:e4:ca:7c:17:e8:06:f4:32:b9:6b:48:6a:e1:9d:f9:
         16:3e:0d:9c:f1:a1:ea:e1:85:37:c2:53:a5:ef:3e:5e:3c:04:
         1a:70:69:64:e3:ad:84:a9:03:0e:79:c2:cd:0b:da:0a:66:a6:
         f0:89:0c:26:50:9b:0f:f6:72:af:f8:d3:1c:b2:fa:ee:a3:db:
         bd:e8:92:60:80:fd:f2:54:96:28:a3:e6:d7:f8:a6:73:c8:79:
         2b:4e:e9:29:dc:76:82:cb:27:1d:5e:b5:34:04:fa:39:6c:5a:
         78:7f:56:b1:65:b9:68:2a:89:d6:2e:04:9c:c3:a3:0f:20:34:
         61:a1:15:45:b3:16:92:10:ad:9b:a4:47:9a:87:50:c8:90:5d:
         7e:23:a7:d6:82:ee:01:9d:e6:5a:cf:28:7c:36:3b:1f:31:4d:
         ad:23:b2:0a:1a:95:c3:39:c8:18:07:1f:93:4d:89:27:d1:b3:
         4b:98:90:40:c4:51:2e:13:f7:ef:ee:1d:7f:c8:9c:55:cf:a3:
         1b:6e:c9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:07 2025 by rpki-client