Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File:                     1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier:          BamvDEYisPWyPdyEfviQnK4r3lNVf/zdPTJmk7u98sg=
Subject key identifier:   AC:EB:FD:A0:A1:5E:7D:A8:5A:58:93:67:68:20:61:AB:FA:35:F8:13
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer:       /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial:       019A4FD017FD51E26D1EECABD651AD2F48B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number:          1645
Signing time:             Tue 04 Nov 2025 17:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 17:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 17:00:28 +0000
Files and hashes:         1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: IYvaYpbNqIlnsRuSy6cYzMS0r35RvpOymSYiFn1/B2U=)
                          2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
                          3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 17:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:d0:17:fd:51:e2:6d:1e:ec:ab:d6:51:ad:2f:48:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
        Validity
            Not Before: Nov  4 17:00:28 2025 GMT
            Not After : Nov  5 17:00:28 2025 GMT
        Subject: CN=acebfda0a15e7da85a589367682061abfa35f813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b5:73:7a:9b:0a:2e:a3:8d:45:de:84:ab:a4:
                    f0:fe:ac:a6:8e:4b:69:2f:fd:91:64:d6:52:62:dc:
                    3a:20:2f:e5:11:86:2c:ef:58:38:49:55:d4:c2:81:
                    2e:4a:c7:41:74:84:98:be:dc:5c:23:9c:df:37:4e:
                    07:83:64:f7:70:2a:5c:da:6c:a7:35:f2:77:b2:47:
                    5a:6d:5a:31:b0:16:ea:7a:6b:82:07:43:e8:01:f1:
                    4f:d5:b1:df:95:d6:f9:4b:16:fe:a0:13:01:a7:d1:
                    a6:20:18:0a:1f:19:1a:29:e6:b7:00:0a:4b:dd:de:
                    5d:4f:c5:f4:da:f0:b6:04:39:80:41:bd:be:50:4c:
                    35:4d:ce:1c:f9:a0:cd:8e:1f:c5:63:dc:50:e5:fc:
                    ff:83:98:c7:d4:fd:2a:9e:07:16:74:58:4c:71:91:
                    1b:4d:36:cd:fd:c0:d8:c2:36:50:da:cf:04:0e:9c:
                    ee:40:d6:89:83:31:5a:d1:8f:5e:26:36:a6:d8:f7:
                    ef:42:f5:49:b8:11:71:25:97:fd:cc:06:32:d4:db:
                    6c:ea:6d:35:71:2e:8c:cc:2b:0e:c2:e8:59:da:88:
                    9e:ab:72:fa:71:97:40:90:60:54:6f:00:f3:ce:bb:
                    c0:53:8b:a8:26:11:31:ce:dc:34:8a:40:ce:68:be:
                    3c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:EB:FD:A0:A1:5E:7D:A8:5A:58:93:67:68:20:61:AB:FA:35:F8:13
            X509v3 Authority Key Identifier:
                keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:6d:48:86:2b:5c:f7:4b:3a:64:2b:7f:8b:fd:06:90:45:47:
         8d:76:27:18:d1:ad:9a:c8:4f:38:17:a4:d4:06:71:75:44:24:
         aa:5d:c6:e7:e1:a0:26:5e:dc:60:b8:c7:49:07:ee:29:5c:0a:
         f2:8a:2c:18:59:cd:0f:92:23:48:cc:eb:77:eb:fc:d4:06:4c:
         3c:6c:ed:f5:8b:81:d4:71:fb:c0:c4:6f:cd:46:5d:fc:1b:4b:
         20:4b:69:72:61:52:49:39:ec:5a:ec:c1:fc:2b:af:2e:d2:97:
         a7:07:25:e3:99:da:80:8f:6e:82:bc:e9:93:b0:f4:3e:4f:e2:
         d9:cd:63:b5:21:26:a8:75:ea:c9:7a:1b:1d:5c:19:ec:0a:c5:
         21:5d:97:7c:f7:ad:06:8f:b9:95:83:4c:62:ec:f5:bd:d8:c1:
         b1:b4:fb:96:29:e8:81:80:be:32:59:41:10:83:69:a5:8d:e0:
         65:cd:b9:db:76:5f:5c:81:08:c6:af:10:ca:15:ca:5d:d1:de:
         6c:ec:69:af:d6:fd:21:c1:a0:26:5f:5e:3b:58:19:07:e4:fc:
         a8:fe:1e:ce:20:08:d1:d2:0c:28:a7:dd:50:da:08:14:e6:2d:
         51:85:ef:ee:25:15:b2:90:7c:d8:fb:8b:a6:25:dd:db:44:97:
         8d:a3:e9:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:34 2025 by rpki-client