Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File:                     1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier:          0bkB8ak66CmU0XAmEY3yTkLzc2EpfsprIB+m0gJSWS4=
Subject key identifier:   7C:12:03:34:09:2D:7C:56:44:B2:45:47:EA:11:79:AB:36:F0:81:94
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer:       /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial:       0199FEB5190932D4839FD570295BAEE2A10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number:          1707
Signing time:             Sun 19 Oct 2025 23:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:45 +0000
Files and hashes:         1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
                          2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: FOhyF4QKA1lTJtATO3C0YGxZWOXY5RR1BI/QnfyCZ80=)
                          3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
                          4: BG1cqZ9YVyNJo6yn7aRCRKFwi1E.roa (hash: iWMwZkGfB/SrRzVNIRiDbpY7F5RfXCU+vPN0FbVq8Zo=)
                          5: UhdjQtj-FfDyuU6V5WnFSOKYjmk.roa (hash: QbBqfb3nWseUxtS3InHqu29EzpheC2v8vhkaoLoZ0FY=)
                          6: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
                          7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
                          8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:19:09:32:d4:83:9f:d5:70:29:5b:ae:e2:a1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
        Validity
            Not Before: Oct 19 23:01:45 2025 GMT
            Not After : Oct 20 23:01:45 2025 GMT
        Subject: CN=7c120334092d7c5644b24547ea1179ab36f08194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:39:e7:f0:93:d4:76:3f:95:33:f7:df:59:8a:
                    0e:7d:4b:f9:e0:56:70:50:4d:69:43:4b:07:54:c6:
                    90:98:62:8a:7f:d3:2f:4d:09:d5:b1:2d:f7:77:3b:
                    f7:a6:39:53:77:25:1e:42:60:ff:8d:d1:23:ac:dd:
                    17:b1:0c:b0:3b:f4:5a:74:b1:d6:e8:29:58:eb:49:
                    dd:8e:69:f2:1d:21:b9:5b:dd:b7:0b:3f:26:61:40:
                    e8:b6:10:98:3e:61:8c:15:00:7c:37:14:f6:a1:dd:
                    0e:89:91:1d:d9:1b:8b:9e:9e:dd:fd:bf:ef:94:27:
                    f3:20:e4:d1:31:d7:95:b6:7b:22:0e:d4:e1:88:37:
                    c5:c2:2d:8b:16:16:cd:59:b0:b9:ca:0e:1c:aa:80:
                    5c:c1:09:17:f9:59:81:8d:09:ad:ce:a1:6a:30:c8:
                    f9:06:a2:45:83:f0:00:9e:e5:b6:db:e0:88:0a:3b:
                    c8:2b:53:28:11:8b:7f:e2:1f:9f:59:1b:76:80:d0:
                    21:61:48:57:6c:a9:c4:b4:cc:3e:ee:20:3d:a1:50:
                    7e:7d:c0:1f:9d:07:a9:c4:87:01:4a:59:d9:88:89:
                    b0:b8:91:59:ab:31:6d:20:d5:1e:b3:f0:09:3c:c3:
                    9f:0f:97:eb:34:36:4f:c4:b3:9d:db:b7:20:7c:64:
                    b6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:12:03:34:09:2D:7C:56:44:B2:45:47:EA:11:79:AB:36:F0:81:94
            X509v3 Authority Key Identifier:
                keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:79:bd:1d:83:14:96:15:d2:b4:a6:b3:00:45:e4:6d:df:
         90:fc:4a:d3:b8:80:2b:91:99:5f:b8:6e:5a:62:31:f4:54:cc:
         0e:00:74:f9:54:8e:0a:28:85:26:78:61:c2:1c:1d:5f:e4:8f:
         e3:f9:90:b6:a2:be:8b:11:78:99:41:e6:74:38:fa:aa:12:6d:
         16:24:3c:74:c2:a1:34:c4:9b:35:21:21:19:d7:c8:1c:93:42:
         fc:4b:8b:03:38:63:46:02:18:c4:28:52:62:7c:09:78:4d:3c:
         4a:42:bd:8a:0d:c2:05:6f:d0:36:0a:a7:a1:20:32:a3:c7:ab:
         99:6a:18:99:21:01:07:e0:75:d5:5d:e2:4f:e5:9a:b0:b0:6f:
         e0:6d:c0:07:02:a0:a6:63:dc:b1:fb:16:c3:6e:77:7a:82:68:
         83:bd:61:90:21:71:0d:05:08:d9:dd:4f:55:5d:08:06:1f:d0:
         25:12:54:67:0f:3b:ae:f4:60:5f:a0:13:69:42:df:92:8d:5b:
         38:d1:54:c0:a8:b8:1a:3a:3a:54:5c:50:f3:45:a4:78:49:e3:
         66:61:53:9f:bf:09:a2:fd:68:d9:e3:65:c6:5b:16:38:6f:8f:
         fc:6a:d0:2a:2f:61:58:31:66:20:ea:3d:bf:b9:13:3e:78:56:
         b5:c5:91:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:36 2025 by rpki-client