Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          btkom2RN6elknlhatAB3Rft9jmmrPyr76NRNR0vPGso=
Subject key identifier:   89:D5:8A:11:FA:DE:0F:71:45:50:C8:68:7D:63:FD:60:94:4A:C1:56
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       019A4F992CF13CBB036FE48E7F7963E24FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          1439
Signing time:             Tue 04 Nov 2025 16:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 16:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 16:00:29 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: LA5EuDpn/bkMBcvjhdfCh+UMUhlIYBj5FyFB2IcXziI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:99:2c:f1:3c:bb:03:6f:e4:8e:7f:79:63:e2:4f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Nov  4 16:00:29 2025 GMT
            Not After : Nov  5 16:00:29 2025 GMT
        Subject: CN=89d58a11fade0f714550c8687d63fd60944ac156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:b8:a7:a7:7c:a4:2b:cf:6b:a1:0f:eb:70:
                    87:db:f9:c9:33:7f:fe:ae:7b:13:19:f5:dd:7e:e1:
                    a5:e9:20:2a:db:48:a9:06:ba:9b:e0:77:6e:40:de:
                    80:39:a0:d6:25:1e:1d:10:7f:93:30:3d:7c:8a:d8:
                    29:53:1a:9b:3c:d8:6e:e8:3e:13:94:25:8e:8a:3f:
                    a9:32:cd:7a:37:10:95:d6:ef:82:9f:60:ba:ee:4d:
                    16:1f:75:55:a5:78:bc:ac:ab:bd:84:44:b9:e5:0b:
                    3d:2e:8e:35:dd:b4:dc:0f:13:be:c2:12:45:ab:0d:
                    5f:24:44:07:15:3f:1a:af:22:c5:cb:8a:ca:13:94:
                    5f:9a:a0:95:15:2d:4b:30:e8:81:83:45:0f:08:e5:
                    5d:1c:f0:21:15:61:b8:43:f9:a9:a2:81:28:36:30:
                    8c:3d:9d:46:25:c9:c6:1f:f6:32:7d:bf:75:b3:49:
                    23:fc:8e:e9:10:a9:81:8a:6e:9f:82:8e:32:dc:a7:
                    b2:82:15:11:1a:13:52:5b:b1:66:cd:22:0e:38:dc:
                    69:77:63:bb:04:5f:0d:85:9e:37:0b:5f:01:d3:23:
                    58:85:25:df:51:be:cb:d4:54:99:82:09:e2:12:69:
                    01:f9:8b:38:b8:ff:54:0e:7b:af:e3:73:c3:c4:3d:
                    6d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:8A:11:FA:DE:0F:71:45:50:C8:68:7D:63:FD:60:94:4A:C1:56
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:e2:ca:41:af:89:8b:ac:a8:22:91:82:53:fa:73:1e:12:70:
         cc:42:45:8f:78:ca:28:92:e3:96:fe:ce:ca:9b:84:8d:55:5e:
         bd:d8:6d:e1:42:d9:de:95:88:ed:c7:ea:1b:c2:2a:bb:d0:3b:
         d2:41:fe:08:a8:52:f1:80:27:c9:4b:d8:e5:d3:b6:97:9e:eb:
         50:fa:19:74:4e:bf:91:1f:e1:6e:10:2e:e6:ed:4a:ee:da:b3:
         ef:ff:14:e5:f7:55:af:87:a2:22:f3:69:e5:da:54:6e:16:fa:
         6d:c4:f2:23:03:dd:e0:f1:37:79:bc:f9:83:2d:d1:84:0a:be:
         54:de:a7:a1:4f:aa:3f:67:40:b3:03:f7:fa:cf:31:23:e5:58:
         a3:7a:a7:ab:52:9d:ef:f4:e4:3a:4e:fd:9d:d1:69:66:0f:94:
         c6:86:55:95:07:4d:9d:5a:c4:ea:2c:da:ee:ee:a9:74:06:5f:
         fa:66:65:86:e0:56:c6:50:c8:69:c2:1b:c4:b4:46:9c:df:4c:
         cc:80:9c:0f:77:a2:e1:5e:89:f6:b7:83:7e:bf:aa:a9:88:f4:
         8b:45:55:d1:84:3e:81:4e:c2:63:dd:91:96:50:f6:71:ee:49:
         b6:cc:96:cb:2d:35:be:7d:cc:fa:f5:21:4f:96:65:b4:28:cf:
         79:06:ad:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:28 2025 by rpki-client