Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
File:                     G2RtQs6J1Ak-Ssknp_I283pRq-I.mft (raw, json)
Hash identifier:          Y2w1y717iEODS9NHcf2rhRmlEg+S2SMu6oGBEkqFMyQ=
Subject key identifier:   40:68:11:7C:03:E4:03:64:6E:3E:77:D7:A6:D2:9F:83:94:8B:C6:0E
Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2
Certificate issuer:       /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
Certificate serial:       0199FC21995E881609BB59B7C52ACF4A8C22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
Manifest number:          0F09
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: G2RtQs6J1Ak-Ssknp_I283pRq-I.crl (hash: MnvZxsHKcu+io3afJz9aPSNkaRQVJk8j/MVY3qQCAD8=)
                          2: fCpGf801cfDHze74QhXzgzMLUwE.roa (hash: BwtWyFu9Dt2iFCFGI4JjDsN2ooEJ/qDRF3vXF+9EsfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:99:5e:88:16:09:bb:59:b7:c5:2a:cf:4a:8c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=4068117c03e403646e3e77d7a6d29f83948bc60e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:1c:c8:1f:85:ae:d6:f3:ae:8d:b1:e2:dd:
                    99:12:c2:ae:07:7d:fa:ab:ce:b8:bc:c8:c6:23:09:
                    95:9c:22:6f:e3:9c:e4:92:53:fb:4e:6e:94:19:32:
                    4e:da:a8:03:84:41:5e:d5:31:37:84:e5:d2:be:eb:
                    f1:9b:fd:5b:f5:cc:b5:0c:70:99:15:c2:b7:97:1a:
                    69:af:65:d7:4a:22:88:97:5d:14:74:6b:2f:21:da:
                    f6:c8:dd:73:76:94:62:7b:9a:5b:e0:9e:4a:6f:26:
                    1c:05:8b:61:77:1d:64:58:d6:61:f2:45:3b:b6:b4:
                    6c:eb:a0:96:d1:3f:be:8a:1a:d5:d4:f5:53:0d:37:
                    27:bb:26:8e:e3:c0:f7:c0:ef:1f:a4:28:9c:3e:cc:
                    37:d6:b2:db:74:18:d2:3f:bb:80:ab:7d:4b:ba:c3:
                    c0:dc:7f:d1:b3:ff:4d:6f:98:b9:00:51:4c:63:27:
                    f4:1a:85:8a:4f:e2:06:05:82:16:23:dc:a4:08:47:
                    07:26:45:aa:2e:aa:2a:76:2d:fa:f1:8e:ca:6f:f6:
                    f5:5c:db:7c:a7:c1:15:3b:cf:bb:92:ad:58:81:a9:
                    fb:5c:6d:8b:4c:b9:24:99:fe:04:af:5a:da:e3:f1:
                    e2:30:30:cd:03:54:45:1e:d7:79:52:75:a7:ca:fa:
                    1c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:68:11:7C:03:E4:03:64:6E:3E:77:D7:A6:D2:9F:83:94:8B:C6:0E
            X509v3 Authority Key Identifier:
                keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:42:dc:ef:bd:c6:45:5b:fb:e9:23:34:73:1d:ce:87:55:94:
         12:9f:26:ec:49:1d:72:6b:13:c9:c8:b0:23:2c:46:99:6d:e9:
         be:91:76:04:aa:e0:00:a6:7d:30:6c:e5:45:d6:ec:8d:1b:19:
         fe:70:a2:8b:44:ae:f3:4d:9c:a9:f2:5a:34:85:4e:74:1e:99:
         26:20:c1:8b:2a:8c:42:77:15:1f:6a:6a:a8:97:c5:87:19:59:
         58:b7:59:c8:83:e3:be:dd:41:0e:1c:8c:90:1b:a8:25:32:d0:
         46:8a:91:2e:50:84:42:07:f5:ad:51:e5:7f:7c:f5:9f:b8:88:
         fb:59:5d:6b:da:68:89:c2:fd:18:5b:60:fc:8c:9c:34:3c:7b:
         aa:09:67:59:47:85:01:83:6e:ab:77:cc:b7:22:d8:f1:66:90:
         67:07:1b:bf:53:4f:44:d6:35:3f:c9:05:b3:d6:d2:ff:e6:da:
         ed:5a:7b:e4:f0:2b:10:17:f1:af:96:39:6f:5a:69:e1:53:20:
         2e:5f:c4:2f:36:f9:35:0b:d3:4b:82:55:5c:6a:7b:5c:e9:3b:
         ce:6e:55:9d:e1:48:90:8d:99:63:f3:8d:94:73:17:1d:9b:ab:
         b4:5a:6e:57:f9:e8:92:b1:e1:62:9b:0b:dc:35:7a:6d:45:ab:
         a4:ee:09:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:35 2025 by rpki-client