Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          650+fBlzMgG50wqhGLKzxaJ6GlXxV0m+XomN5u7q318=
Subject key identifier:   E3:59:72:55:3B:32:92:A7:38:51:BE:0C:34:1E:89:D9:BE:8B:F3:72
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       0199FC58E6E209E8045D3227CFD95F5C26CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1736
Signing time:             Sun 19 Oct 2025 12:01:48 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:48 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:48 +0000
Files and hashes:         1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
                          2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: T41wDbWUnRZs9wzfythlNPao7eKsBk7lFSjB0ZVBr6I=)
                          3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
                          4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
                          5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=)
                          6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=)
                          7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:e6:e2:09:e8:04:5d:32:27:cf:d9:5f:5c:26:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Oct 19 12:01:48 2025 GMT
            Not After : Oct 20 12:01:48 2025 GMT
        Subject: CN=e35972553b3292a73851be0c341e89d9be8bf372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:19:92:91:df:6a:ed:4f:6b:23:08:98:3f:
                    44:79:e3:6b:96:72:f1:d9:b5:69:d6:84:78:b1:ae:
                    a5:b3:38:1c:2e:34:8f:ee:dd:06:cc:60:9a:0b:04:
                    5f:84:c0:5e:2d:d8:68:7a:36:f5:77:79:1b:81:3e:
                    20:1a:b7:3f:2e:59:eb:1b:f4:e8:a5:90:9d:26:4b:
                    f2:44:d7:e6:cc:86:f8:cb:1b:df:86:39:c3:1f:f2:
                    71:60:3f:ce:5c:87:9c:58:38:0d:82:7f:a6:fe:bc:
                    47:70:b8:2c:d1:11:80:13:86:9e:9d:cb:bc:2c:6f:
                    8b:8e:d7:df:20:95:e9:f2:9b:32:f7:e5:40:4e:86:
                    78:6f:2a:e5:f3:cc:56:19:a0:dd:7b:ca:eb:b5:27:
                    e7:30:16:4e:32:64:00:19:a6:d5:53:3c:5c:92:29:
                    de:81:fd:f4:4f:97:85:31:95:f5:b6:4c:3f:43:88:
                    05:8a:cd:79:ec:cf:ca:3c:92:2d:2b:d6:18:8f:ce:
                    79:29:37:00:6b:c6:7c:41:c3:5b:40:d8:cc:74:c8:
                    fe:12:8d:55:48:b7:fe:0c:7a:90:bb:0f:b4:bc:8c:
                    0b:ae:66:85:3f:58:2b:25:7a:fd:69:63:50:2f:1f:
                    07:3c:25:03:0e:80:2e:80:4a:8b:a6:b2:d0:43:2c:
                    2e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:59:72:55:3B:32:92:A7:38:51:BE:0C:34:1E:89:D9:BE:8B:F3:72
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:37:d3:72:ae:fb:df:46:ef:ed:00:be:24:3c:85:e5:a3:f8:
         19:b4:e9:42:da:fa:4c:ca:8f:e0:8b:83:af:3d:3b:ca:3d:d1:
         24:35:59:5e:95:46:ca:42:f3:ca:64:be:b5:5e:3f:cc:b1:ae:
         36:4a:2f:2c:e0:ca:d9:3c:7e:86:2a:a4:fe:22:df:e5:24:66:
         a4:5a:36:32:06:0a:b9:31:99:b1:b5:22:98:fc:d5:a6:37:29:
         0a:69:18:f3:75:74:8e:d5:25:bb:56:8d:d6:32:42:a1:49:e3:
         c4:fc:a5:2a:ee:c6:91:7c:d1:17:a6:1b:47:68:8c:6c:bd:5b:
         a2:d0:ec:9c:68:ec:a9:3c:66:e3:ba:c7:b6:22:2f:2b:7d:e9:
         ab:99:60:26:8c:41:6e:85:42:f7:45:80:f0:c0:a0:c3:5a:fb:
         50:4f:ac:31:87:d1:d6:4c:a2:03:4e:aa:96:65:33:c4:88:8b:
         a0:21:8f:16:54:c1:7e:c5:ca:00:f7:4b:eb:4e:93:79:ee:10:
         a6:a5:34:ed:c7:f8:bd:ef:31:13:00:da:0d:3a:1f:1a:1b:ec:
         da:85:65:19:13:69:c3:9a:94:a6:44:b0:38:cf:5e:ca:23:66:
         1e:8e:99:1d:93:e0:85:c1:89:41:25:4f:3c:bc:fb:89:9c:b6:
         0d:53:58:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:36 2025 by rpki-client