Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
File:                     9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json)
Hash identifier:          l7IzaoZqIx6qfnYOm5AQJ6yiHUYMzB+xc3lYXzOHpGw=
Subject key identifier:   B1:20:69:4B:C7:0F:68:F4:92:D6:AE:DC:04:0B:A6:60:02:EF:E7:B7
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Certificate issuer:       /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial:       0199FDA1CBC700D361F940DC0A550A595550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
Manifest number:          1592
Signing time:             Sun 19 Oct 2025 18:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:03 +0000
Files and hashes:         1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: Z2AGKeLyxRvHOpxvqfXe5ZbPbR7INnQAhUgTzFUj4r4=)
                          2: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (hash: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=)
                          3: rNfq-FdDmBkThN1vTMRNxR08DZE.roa (hash: W7X3TtRWNC36QWPCWtaayZ46NgLlqWMrgmB/Yk/phsc=)
                          4: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:cb:c7:00:d3:61:f9:40:dc:0a:55:0a:59:55:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
        Validity
            Not Before: Oct 19 18:01:03 2025 GMT
            Not After : Oct 20 18:01:03 2025 GMT
        Subject: CN=b120694bc70f68f492d6aedc040ba66002efe7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:89:76:89:91:79:31:2d:25:48:93:c8:6e:78:
                    99:42:24:ae:29:01:f1:3f:1a:ef:55:e9:b4:23:7d:
                    15:2a:f0:82:b9:35:3d:d5:86:1e:88:af:82:b8:cd:
                    0c:98:70:0d:bb:72:ac:eb:8e:bf:80:0c:0d:96:b6:
                    8c:df:a1:3e:6c:97:d2:ab:75:5c:02:4c:27:5e:37:
                    85:a0:70:87:ad:ef:94:fc:95:69:fc:de:3d:10:17:
                    b4:07:58:62:6b:7a:24:25:d2:9b:c1:52:f3:f7:a9:
                    29:e4:53:20:04:4b:23:37:36:72:0e:e0:33:26:ba:
                    57:d7:dd:1e:91:c1:8e:4f:47:09:17:2a:4a:4f:d9:
                    12:09:5d:7a:88:53:ca:ef:65:9b:48:60:b0:ff:13:
                    86:60:a3:96:22:c1:ce:c1:34:5b:71:45:16:2d:01:
                    97:7c:ea:54:c6:13:32:be:40:94:1b:9f:9a:ae:8f:
                    70:79:bf:17:34:01:8a:5d:ed:9f:e7:5f:d9:6c:59:
                    89:4f:f8:10:bc:92:d3:f3:9d:f8:45:0f:99:3f:e4:
                    01:df:03:0e:3f:1e:6f:12:a1:04:16:bc:24:a3:7b:
                    a8:b1:99:ca:77:d1:a5:cf:57:1e:12:ed:c3:b1:57:
                    c6:3e:b9:0f:cb:96:2b:26:44:b8:d2:52:b6:3e:2e:
                    2b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:20:69:4B:C7:0F:68:F4:92:D6:AE:DC:04:0B:A6:60:02:EF:E7:B7
            X509v3 Authority Key Identifier:
                keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e6:c3:2e:8b:9a:9c:f7:da:cb:b4:fb:5f:3e:f8:44:66:a5:
         09:be:8b:42:43:d7:80:dd:f1:f8:96:be:7c:4e:c6:18:84:38:
         2d:5f:1d:9a:bf:58:32:51:0c:03:51:e7:57:72:cc:16:15:f3:
         99:05:70:6f:6f:ba:c5:c1:d0:bd:26:98:f0:d9:dd:da:87:f8:
         fd:43:f4:44:7b:a5:11:cf:1e:6d:99:3e:1e:dd:7d:14:4d:8c:
         74:3d:5b:a8:e7:38:bd:13:bb:10:2e:f0:97:fd:ca:1c:d2:a9:
         0c:1b:9b:22:fe:ba:c4:1a:63:a2:e1:ff:07:b2:05:90:45:ea:
         78:b5:1b:d3:9f:06:24:1d:a1:e4:e9:0d:3f:c9:19:6c:ed:e3:
         34:99:3c:44:6f:ee:d9:63:23:b3:d5:44:cc:3a:7b:12:7c:e0:
         05:d2:fe:bc:c5:6b:96:8e:d4:3c:67:be:5c:9d:b5:26:d0:74:
         1e:c7:c9:e5:8f:9f:3a:9d:f6:41:32:90:ac:50:b0:8f:1e:4b:
         69:8f:9c:df:54:72:9f:28:74:1e:d2:0b:ee:93:6f:6c:c8:b0:
         06:a7:3d:b1:60:f5:d8:b8:a7:aa:7b:62:1c:4e:72:c2:a8:61:
         ec:f3:f1:d6:97:91:66:f3:17:bf:e4:84:10:8b:bd:37:11:29:
         81:f7:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:56 2025 by rpki-client