Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File:                     1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier:          yeIKO6NsToe8KAm4QfmqJyVT29G7OxYKbLIysm7h4M0=
Subject key identifier:   E1:F3:C2:1B:AE:24:CD:76:2E:98:8F:A2:C4:41:DB:E3:B4:D3:48:09
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer:       /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial:       019A4DE1BD2698A1E419CC0D4176E534E8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number:          0E53
Signing time:             Tue 04 Nov 2025 08:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:30 +0000
Files and hashes:         1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: uLpkVBhbewoVnSj1W9QSzKxmCt8mMU/ZFM2msW/xenM=)
                          2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:bd:26:98:a1:e4:19:cc:0d:41:76:e5:34:e8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
        Validity
            Not Before: Nov  4 08:00:30 2025 GMT
            Not After : Nov  5 08:00:30 2025 GMT
        Subject: CN=e1f3c21bae24cd762e988fa2c441dbe3b4d34809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0e:6b:33:cc:f9:f4:9c:a0:ad:19:36:2b:06:
                    47:b8:6e:98:dc:79:7a:39:68:40:86:1c:2a:e5:5d:
                    6d:6f:0c:3e:69:16:3e:f9:de:af:b8:ef:7b:d0:bf:
                    e1:25:4e:5e:5a:18:bc:d2:ee:3f:c8:f5:eb:86:07:
                    67:7b:2a:19:6e:9a:70:fe:7f:50:e9:67:9c:ce:88:
                    1b:4f:d9:d0:61:b3:6f:82:e3:d4:25:20:7c:19:a7:
                    b0:ac:fd:ec:1a:dd:92:c6:1d:42:99:65:1e:af:4b:
                    85:17:2c:2e:90:a9:d2:e1:42:b6:18:c6:c2:a3:08:
                    b6:19:ba:a6:0e:df:56:af:40:f5:de:6b:3e:08:51:
                    90:1c:dd:91:1e:27:dc:0f:c0:c5:55:42:42:48:93:
                    ca:b7:66:89:5a:00:54:f9:e8:7a:74:04:5f:c7:71:
                    43:52:d5:cd:ee:91:a5:18:ed:71:54:c5:de:3d:e4:
                    19:35:7b:bd:eb:eb:39:de:9a:39:18:fe:d3:b4:c4:
                    45:5f:26:b5:db:39:70:41:78:8a:4b:8a:da:c4:34:
                    73:62:dd:31:8c:fb:a2:9c:46:6c:44:1b:22:af:97:
                    cc:26:dc:a7:e3:7a:44:a8:22:6f:77:e1:cd:00:2a:
                    82:34:72:96:88:92:85:d0:28:1f:da:40:98:1e:10:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F3:C2:1B:AE:24:CD:76:2E:98:8F:A2:C4:41:DB:E3:B4:D3:48:09
            X509v3 Authority Key Identifier:
                keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:53:cd:3e:fd:18:8b:bf:c5:9e:1c:1f:63:1b:e1:6f:82:bf:
         a3:7e:84:ef:b5:2f:eb:21:81:90:4d:48:a9:03:09:57:f2:42:
         91:7b:fb:39:a4:08:32:85:b1:79:9d:64:aa:44:ff:35:1c:2c:
         79:53:dd:72:59:48:e5:ba:e1:63:6d:ea:01:78:ad:0d:3b:23:
         bb:7d:11:78:8f:7b:ae:25:da:21:d2:04:41:ac:10:be:b0:c9:
         16:65:89:69:68:bd:22:c1:ac:c4:4c:04:cf:47:fd:31:18:e9:
         19:55:8c:6f:50:3a:37:77:21:f2:5a:40:9d:34:4a:a5:05:a0:
         b0:d7:58:74:cd:3e:3b:9f:c1:6b:27:89:55:49:2f:e4:b8:f4:
         1f:2b:44:e9:47:2e:08:3e:64:0b:1d:36:0b:ad:45:3f:c7:0a:
         96:0c:fa:e3:c9:f2:0d:3b:5d:bf:9f:e8:a8:e2:25:4e:b6:e1:
         73:e0:69:6d:cd:7f:d2:50:3f:b1:0d:e4:fa:92:b3:e4:1b:62:
         e9:11:2d:c1:ea:5e:b9:a6:0f:3b:2e:d8:0f:cc:06:b2:45:a1:
         ec:f0:c7:3b:a5:80:f1:c3:ee:30:16:9e:66:55:ff:3a:ff:01:
         80:13:ae:30:30:66:58:d9:7e:2b:51:0a:c8:5f:05:28:2d:7b:
         ba:ae:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:04 2025 by rpki-client