Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          dqZ6rPsDjk0z4Ee4mAdGslr5GoLvFKpOaT3CKZlNnYY=
Subject key identifier:   C5:01:7F:C6:A0:7F:A5:20:52:15:2A:6C:5F:F7:81:3E:A3:F6:29:FD
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019A571B7ADDFE3D5CA75B0FA641130E89F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          1727
Signing time:             Thu 06 Nov 2025 03:00:09 +0000
Manifest this update:     Thu 06 Nov 2025 03:00:09 +0000
Manifest next update:     Fri 07 Nov 2025 03:00:09 +0000
Files and hashes:         1: RZK0b0ovThhwOspu5E-ursP21fk.roa (hash: QD9vKhIKNC6G+l7AznXUzzLsXomMDZljRclFB7nn2HQ=)
                          2: fiISLcTtszje5XVI9V1A5UtzzeY.roa (hash: eVRxObYN5WO+IJLUe7vH/MdccTrSwqFAfOP7RIW37BY=)
                          3: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: tYNS3UqAd3NXBnyDhQQMN1dvLACSaCL5xrb57fy9ekk=)
                          4: jI6BNQdThJo2MEdSZOm1_susYMk.roa (hash: rpQAWWU68zMZ9YE0YNIh6QHC51Xor5PQY1DDvCq8+m8=)
                          5: uqvRjoImP67-V2pzEWGA2vqwBPY.roa (hash: yGPp5s4cB95t+0hM/KR3osWVzparRNQvZpkZjxE6wzs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 21:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:57:1b:7a:dd:fe:3d:5c:a7:5b:0f:a6:41:13:0e:89:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Nov  6 03:00:09 2025 GMT
            Not After : Nov  7 03:00:09 2025 GMT
        Subject: CN=c5017fc6a07fa52052152a6c5ff7813ea3f629fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7c:01:d6:96:f9:5e:f0:2e:58:6b:62:de:c7:
                    6c:67:c0:aa:4c:a4:67:75:24:44:4e:61:87:96:94:
                    60:ae:28:c7:2c:8c:0b:db:52:3a:44:7c:66:00:3c:
                    d8:81:01:c5:5c:d2:9d:90:6e:63:ae:33:bc:11:7b:
                    d4:4a:a0:d1:27:66:de:7d:b2:62:c9:9e:12:35:88:
                    fe:e8:83:8e:0b:97:c4:2b:23:61:a9:f1:3d:a8:76:
                    09:68:6e:69:a6:a6:7d:af:61:c1:bc:d4:0d:5f:73:
                    42:20:da:80:d7:af:18:e7:52:66:3d:82:57:ce:4e:
                    1a:cd:65:65:3c:49:e2:57:79:46:6e:0a:06:1f:55:
                    bf:b6:b4:24:7f:e1:fe:6a:b7:61:8a:14:d4:30:d4:
                    a0:ae:4c:df:e7:80:76:ab:71:20:c9:56:e9:15:c1:
                    be:01:91:95:a9:3c:b9:0d:9f:75:ca:24:af:c7:29:
                    3e:1b:c5:1c:77:78:0e:11:04:68:f7:42:01:d7:39:
                    f4:36:d4:53:a5:b4:87:c4:af:60:0f:d6:b4:bc:02:
                    f4:6c:77:a8:dd:6a:2a:53:a4:75:5b:8a:97:5e:7f:
                    96:20:e2:63:fc:93:55:3a:d5:ad:a1:30:c6:72:a5:
                    52:a6:ac:9e:f3:23:a7:27:75:e9:6b:64:4c:91:59:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:7F:C6:A0:7F:A5:20:52:15:2A:6C:5F:F7:81:3E:A3:F6:29:FD
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:07:ba:ff:b6:74:7e:d8:1d:0b:d2:17:c9:02:53:0b:84:44:
         2e:f2:02:51:3c:0d:27:ee:3f:22:4f:b5:da:a1:41:a9:ba:c6:
         ff:5b:c4:33:bd:db:1c:a8:48:9b:ba:28:ae:a5:97:d2:1a:df:
         7c:a1:23:5e:d8:35:dd:98:0a:29:17:d7:ce:d9:94:4e:2d:9e:
         90:78:81:9c:34:03:03:22:86:9f:c4:19:e3:45:71:60:20:c2:
         16:5b:23:41:d5:31:54:4a:44:8b:94:21:b6:0d:2e:5c:80:ef:
         6e:9f:50:97:6b:3c:c1:12:6c:9a:0b:54:3f:f7:57:d9:cd:d3:
         b4:32:42:92:e7:31:b0:8a:b3:c0:4f:f4:0d:48:b1:6b:58:2f:
         9a:d7:c1:76:a2:68:fe:d9:0e:84:bb:bd:e1:ec:e2:60:de:91:
         8e:7a:de:6a:03:14:18:d7:d1:10:28:29:9b:ef:cd:f4:27:09:
         15:b3:69:de:a5:bd:d0:12:f5:2e:5f:e9:1b:48:8e:bc:d2:1d:
         91:f4:59:b1:32:bf:18:fc:a7:f1:70:8a:fe:a3:6c:51:a2:51:
         4a:cb:a5:61:e9:79:69:ef:4c:f2:0f:68:81:63:9a:31:5d:d0:
         cb:99:c9:48:11:2b:d6:af:bf:56:d2:15:6a:46:f7:94:d5:13:
         5f:55:6e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:43 2025 by rpki-client