Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          xXVzrQ1LDNOVxrWlIJu7+Ubc+OYin3pgv78EafY58jw=
Subject key identifier:   58:43:B0:BC:B7:46:06:7A:FB:00:29:D3:B4:7B:D4:B2:25:79:56:8D
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       019A503E00AAA9EB0D019DB7AD4A4E980890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1832
Signing time:             Tue 04 Nov 2025 19:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:31 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: +4tk7ugvJTIW1NvrhGF0ozosN3MvNnmSVOrjZTk953g=)
                          2: KjLlUbsy5OhkLv0qFbrgPhCDVXc.roa (hash: Y7RFJziGNZvZmqC0fcM/IrDDZFezUSlFPJ8Z47Y2wSc=)
                          3: ir7-RH8I6LOM7faVYPUvWtPtBkc.roa (hash: c3S12HvLqchLUsT4f7tqk56b2aJYvGDiRT3Sw4rhzw0=)
                          4: sioOqEQgSdt-Z2nuvjH-ipYeJ0U.roa (hash: e/yGVe5B1VqGg3IGxSr7CYJ11tiQj+M1xaKJk8xaUwo=)
                          5: wBll80eEVRcCiVNLyafIlwBJOvY.roa (hash: Vrtbp5BA+79ihdsDatt4sH3YRMZYNvpy4CEr3U+1Q18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:00:aa:a9:eb:0d:01:9d:b7:ad:4a:4e:98:08:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Nov  4 19:00:31 2025 GMT
            Not After : Nov  5 19:00:31 2025 GMT
        Subject: CN=5843b0bcb746067afb0029d3b47bd4b22579568d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:9b:f4:b9:a6:81:e8:89:73:6e:ff:3e:d3:
                    82:fc:0b:41:aa:44:20:bf:e5:2d:44:ba:90:bf:93:
                    af:f4:97:e9:de:d0:d7:76:4d:69:1b:dc:b4:4a:3b:
                    a2:ff:e8:3a:7c:33:2d:48:fd:2c:d3:8f:c0:01:25:
                    43:72:72:82:e0:5e:7c:43:57:73:a5:76:4e:9f:cf:
                    11:06:e6:df:8e:36:47:e5:09:1b:38:36:fa:fe:0a:
                    2f:7d:b0:9e:b7:db:bb:af:4e:91:18:3d:f1:a7:8c:
                    8e:7d:fc:71:93:ad:94:1d:29:48:65:4e:cd:fe:6c:
                    e6:b7:fb:1d:c7:81:25:3e:43:33:e8:68:fa:ac:9f:
                    9f:a0:f0:ff:4a:4c:dc:a8:86:6b:c3:9d:a8:48:c8:
                    8e:07:59:86:a8:23:6d:4b:5c:2b:a4:dd:6d:41:46:
                    b9:e3:64:d3:45:11:dd:d3:46:bf:9b:b5:5e:5b:e0:
                    9a:59:14:95:33:53:6a:2c:a6:f1:50:e5:9c:db:ea:
                    ad:73:66:0e:fa:2a:07:48:93:a5:bc:6d:4a:d4:a6:
                    e7:36:8b:61:70:53:ff:1e:20:6e:1c:7c:1c:8d:cf:
                    02:ab:fb:d9:13:73:23:01:e2:19:b8:1d:7d:9a:aa:
                    c0:7a:58:67:58:ef:d3:24:6f:21:d6:f1:d4:54:dd:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:43:B0:BC:B7:46:06:7A:FB:00:29:D3:B4:7B:D4:B2:25:79:56:8D
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:a0:78:4b:f7:f6:39:2d:50:61:49:f8:2c:66:b7:c4:cc:15:
         65:dc:90:ad:73:9a:46:02:ed:0c:f3:2f:81:ef:bf:31:9b:8c:
         6c:a2:f5:3f:98:41:ea:e6:a7:14:8f:21:0f:3d:81:af:52:fd:
         b8:2b:d7:9d:ae:fe:14:e2:b8:ed:c3:9f:89:7c:60:10:8c:83:
         21:34:83:0a:ce:bf:94:e6:a5:8d:ad:b7:17:3c:09:10:bf:5d:
         8f:e4:d3:99:ef:93:5f:4d:62:f7:78:48:68:b3:5e:56:eb:be:
         4c:b9:c6:61:85:87:37:9e:f9:44:05:2e:57:3d:fc:c1:a6:d4:
         62:b0:29:38:03:05:70:ca:85:46:a4:df:68:d0:ca:0e:98:4b:
         17:38:58:ac:79:9b:96:53:ba:3a:c6:a6:0e:e2:20:7b:19:22:
         d5:bd:b5:0a:28:81:59:33:14:62:95:e1:3e:6b:19:6f:9b:fa:
         51:f3:c8:d5:9b:75:dc:0b:67:51:7f:c3:f1:63:3a:3e:bd:f8:
         c9:f0:26:96:cf:16:fb:b7:e2:3b:ac:e7:8b:f2:90:0b:4c:58:
         e9:58:b6:e2:87:b6:6a:00:c5:52:50:c8:0d:87:46:04:64:48:
         20:2c:18:49:b7:59:ae:23:b5:1a:c4:a8:d2:af:a6:51:9c:af:
         28:14:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:51 2025 by rpki-client