Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
File:                     U4Vcjs6b1vjjlAICISzgmwX1-KA.mft (raw, json)
Hash identifier:          m1dU25x7aGdXlnK0EBUGCQzmEdNUkDv5tN0YEjThba8=
Subject key identifier:   53:B3:DB:0D:E3:FA:20:C0:90:01:99:AA:C9:61:8C:C3:6D:D7:07:35
Authority key identifier: 53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0
Certificate issuer:       /CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
Certificate serial:       019A006BF691E7355E2CF64258403237E126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
Manifest number:          1377
Signing time:             Mon 20 Oct 2025 07:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:06 +0000
Files and hashes:         1: F1LbGv2MkXWWefxkT_CtpriNBr4.roa (hash: RRHmy9X/CGJW+TnFMQF3NirLVJyyI3P64OOzvqQr238=)
                          2: U4Vcjs6b1vjjlAICISzgmwX1-KA.crl (hash: HJuhWphjyWGo0IyQELVOMFUrJhNtC2UoHy5dsPMR+RA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6b:f6:91:e7:35:5e:2c:f6:42:58:40:32:37:e1:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53855c8ece9bd6f8e3940202212ce09b05f5f8a0
        Validity
            Not Before: Oct 20 07:01:06 2025 GMT
            Not After : Oct 21 07:01:06 2025 GMT
        Subject: CN=53b3db0de3fa20c0900199aac9618cc36dd70735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:63:f3:0d:ce:16:f3:0a:d1:c7:89:d6:04:5d:
                    b1:7a:31:59:eb:4b:2d:a7:14:cf:96:46:45:06:b2:
                    8f:43:39:64:e6:3e:85:8e:f3:68:ef:74:b3:67:fb:
                    7b:55:1c:61:62:b8:68:16:3f:13:92:c6:48:1c:a2:
                    1f:eb:f8:48:00:a7:b4:ef:4b:98:36:66:e0:37:81:
                    93:cf:4f:83:60:5b:14:24:61:b6:f9:cb:e9:6c:58:
                    0d:75:10:b3:7f:d5:59:0c:d5:be:52:54:c4:64:7f:
                    bb:eb:81:7f:fc:53:00:fd:eb:1f:93:27:5d:92:27:
                    16:c8:eb:9e:1c:f6:64:f5:7a:5d:69:97:e0:6c:e5:
                    ee:63:66:b5:0e:87:73:a6:15:2b:33:8d:64:3e:60:
                    01:00:21:15:77:74:e6:0f:b9:bd:e0:58:b0:d5:1f:
                    fc:47:83:09:7a:00:b3:db:d4:bc:70:5a:37:4e:4d:
                    d3:c4:45:4a:9c:a4:56:bc:2b:9f:ec:c8:c4:86:ea:
                    d0:e7:32:bb:51:ad:e2:13:c4:db:20:c6:05:8b:f7:
                    f5:f0:7e:44:dc:b4:2d:d6:09:e8:84:af:27:47:50:
                    2e:d9:f9:ca:27:de:5b:79:2c:2b:4d:51:d0:33:3b:
                    ef:0e:94:be:ac:73:cd:30:27:2a:87:f3:0f:ee:fe:
                    de:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B3:DB:0D:E3:FA:20:C0:90:01:99:AA:C9:61:8C:C3:6D:D7:07:35
            X509v3 Authority Key Identifier:
                keyid:53:85:5C:8E:CE:9B:D6:F8:E3:94:02:02:21:2C:E0:9B:05:F5:F8:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4Vcjs6b1vjjlAICISzgmwX1-KA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/8336b0-cbe4-4da2-841b-1cefd1fa10a6/1/U4Vcjs6b1vjjlAICISzgmwX1-KA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:eb:03:71:56:0e:ea:86:0b:39:69:4c:15:11:3a:8d:6d:39:
         ee:c2:79:32:bb:15:de:67:74:b9:d1:fc:a5:c1:a4:28:c4:cb:
         50:ff:f2:14:9f:02:25:06:ce:d6:52:6e:84:54:6c:b5:d3:6f:
         0d:77:27:8c:4f:0e:e8:4c:9a:dd:bc:78:48:a5:c5:51:0d:32:
         0c:ee:1c:43:02:35:da:8d:f1:5e:7b:01:f7:44:e9:6a:cb:f8:
         a2:6e:27:f6:a6:6f:03:73:08:9b:f5:12:05:48:bb:5f:e3:59:
         c3:51:e8:f5:7a:93:3c:a1:7e:aa:c1:33:3f:96:86:0f:54:3d:
         dc:64:b7:f7:b6:8a:7e:0c:9b:e8:b5:30:97:44:4f:49:db:63:
         44:0f:b3:c8:21:5a:54:f2:71:bf:10:c1:fe:7c:46:d5:88:1e:
         2b:81:34:82:d9:60:ad:95:c9:69:0c:55:46:ce:35:88:cf:6b:
         10:3a:1c:86:87:8c:3e:e1:e3:5a:6a:9c:c4:34:0e:62:72:31:
         4e:4a:e8:c4:62:18:1b:0f:7e:27:8b:0b:4a:45:87:55:f0:19:
         c7:cd:68:54:01:8f:12:9d:49:bb:c5:ac:ef:eb:0a:b8:15:e8:
         b6:bd:77:d9:8d:bb:b1:54:b2:ec:0b:3b:4b:c7:43:5d:b9:fc:
         a3:12:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:11 2025 by rpki-client