Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
File:                     Ane1_sq3Pj5N0YapraBl-uio3hw.mft (raw, json)
Hash identifier:          RLu4edAf10WYZh33sZsNhgl7WJPXQdhzeH9pBTi9Ffw=
Subject key identifier:   73:2A:46:15:58:EC:5E:AE:8E:36:16:DE:A8:2C:A9:BC:3A:07:D8:9C
Authority key identifier: 02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C
Certificate issuer:       /CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
Certificate serial:       019A50E38E41BDA01A6290A97B83C5645F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
Manifest number:          0109
Signing time:             Tue 04 Nov 2025 22:01:21 +0000
Manifest this update:     Tue 04 Nov 2025 22:01:21 +0000
Manifest next update:     Wed 05 Nov 2025 22:01:21 +0000
Files and hashes:         1: Ane1_sq3Pj5N0YapraBl-uio3hw.crl (hash: VcBuLFbSV1wiD1Ez7gjKmQEiylhdquVZFLiapBS1G2Y=)
                          2: IuEjicT0WSpWeXHw9hSCQ6sEmtU.roa (hash: t9o/QAcTRDQlfzjUzcjAJs1f83t2e8roxzyXaOe6NX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e3:8e:41:bd:a0:1a:62:90:a9:7b:83:c5:64:5f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277b5fecab73e3e4dd186a9ada065fae8a8de1c
        Validity
            Not Before: Nov  4 22:01:21 2025 GMT
            Not After : Nov  5 22:01:21 2025 GMT
        Subject: CN=732a461558ec5eae8e3616dea82ca9bc3a07d89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:af:fb:1d:f7:e8:8e:d7:6a:dc:db:b5:05:
                    84:b8:68:bb:ba:70:ab:11:6f:f1:76:28:80:38:09:
                    a2:05:e9:5c:c7:9f:a6:e4:8f:1d:fe:89:30:d7:68:
                    e4:c1:df:cd:33:5e:15:ea:39:d7:29:70:c6:00:18:
                    15:4b:4c:e1:9c:67:31:e3:a8:a8:5f:e9:1f:5b:cd:
                    d4:86:29:a8:3e:5c:16:01:37:17:2b:64:a3:f1:6f:
                    73:64:02:7b:40:e5:e5:2d:97:a2:75:a3:82:0e:53:
                    59:85:d8:ff:70:18:21:a5:7e:cf:6f:f9:21:c2:3c:
                    c0:60:0c:33:d4:90:14:6b:4d:10:9b:f1:d5:42:e3:
                    e8:f4:d3:b8:c2:b8:d0:5e:f6:63:3e:2e:52:8e:56:
                    ad:a9:ee:78:1c:54:7d:cc:c9:c0:1d:c4:b4:f0:9a:
                    a7:76:fe:04:28:27:14:a3:66:bf:83:fe:61:3a:98:
                    b8:e8:60:29:13:ce:57:84:44:91:73:81:30:d9:31:
                    48:a1:95:30:fd:60:5b:3a:09:bd:e9:04:f9:83:e8:
                    38:b2:db:fc:e2:27:c1:a3:9d:f7:c7:9c:fa:27:b8:
                    e7:49:89:bf:bb:e0:01:03:44:e3:3a:0c:8b:fb:35:
                    07:46:ef:d6:c0:e3:09:08:16:f3:3a:fd:1c:84:ea:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2A:46:15:58:EC:5E:AE:8E:36:16:DE:A8:2C:A9:BC:3A:07:D8:9C
            X509v3 Authority Key Identifier:
                keyid:02:77:B5:FE:CA:B7:3E:3E:4D:D1:86:A9:AD:A0:65:FA:E8:A8:DE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ane1_sq3Pj5N0YapraBl-uio3hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/61fa3a-2a8f-4350-a6f7-5178501e8735/1/Ane1_sq3Pj5N0YapraBl-uio3hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:10:da:9c:ee:97:2b:62:63:e6:b2:33:7c:fb:ea:13:e3:
         d6:7d:66:92:5c:d2:12:80:dd:00:de:04:2b:b1:12:c8:8d:e0:
         a1:68:1e:18:2b:a6:78:86:16:b1:87:66:63:d9:0f:ba:4d:f3:
         0d:26:9c:aa:67:26:94:03:cb:01:a6:d1:a9:e0:3b:31:da:4b:
         14:64:a0:84:f9:64:d1:ee:a6:04:3f:dc:35:5f:b1:ab:42:fc:
         9d:0a:be:cc:9a:6f:2b:54:75:f6:fc:d5:f4:5c:d2:5e:ff:a5:
         6b:b1:69:aa:e5:2f:f3:8a:59:ec:d7:40:66:a6:25:55:e7:06:
         e8:fe:fc:cf:f1:59:68:7f:35:5d:77:40:fd:2e:09:22:a9:11:
         4e:37:08:f9:73:a6:24:51:5a:20:8c:07:64:5f:d1:45:4e:00:
         a1:8c:26:98:cb:55:20:dc:ba:6e:13:99:90:76:f0:ab:8b:67:
         a8:0b:d9:a0:f7:2a:1e:a0:33:b0:4a:8e:7f:58:c8:6e:d3:85:
         e0:40:b4:11:0c:7e:c4:96:1e:4f:87:c0:3a:27:56:71:88:d5:
         89:98:d5:d1:b8:ed:b7:70:63:da:d0:da:4a:89:6e:52:24:a0:
         74:21:a8:d2:e2:8f:84:c9:b0:7f:ee:15:c2:fe:f9:52:6b:8f:
         0b:ab:c5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:48:08 2025 by rpki-client