Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
File:                     IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft (raw, json)
Hash identifier:          sXzUjoQ85cLIgC0ZU581araVjhyd04Mmlnyi5Uo76A8=
Subject key identifier:   92:FE:B4:64:55:FB:FD:9F:19:AE:11:57:1C:E0:51:DC:9D:D5:60:47
Authority key identifier: 21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5
Certificate issuer:       /CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
Certificate serial:       019A4D73F2FF4A02C2AB126AC98AC5247DAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
Manifest number:          1760
Signing time:             Tue 04 Nov 2025 06:00:35 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:35 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:35 +0000
Files and hashes:         1: B6aGxUDSSan1LbYvufjyd3IQLUs.roa (hash: dwUg5aBoWkQufw+jFxFp1hxo39/3rnNdCzkl0XPMgUM=)
                          2: IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl (hash: CRVVz5Xhg5Rk8gCZw/AORsp11Q886XDjLog8zpqPRmU=)
                          3: P2j-hUrnI_G8_z_xhTDbKbOjagw.roa (hash: KXKpMQn72rg2fYHpKvlZTFcp58U/Tju8WHXUSLpo2kU=)
                          4: RC7wgRAs2o4H2l1TLqn8NZUndUY.roa (hash: SCrWR5DUqk0ILJy6T4Si10/+i7OXDOm/wTyU6YmTVRU=)
                          5: bt-PMEtT1IwN0eDJCO5vE7NIDdQ.roa (hash: sPgTyfptj00zzq62H1SqHfdWzrVXbflq204bOJGhoUw=)
                          6: knF5z7M4UIvC6eeoTXUGhnRxT0k.roa (hash: XFbD7w0kWLSfVZ1roO0o5/UKd6EksNenbK+US1bpOhU=)
                          7: l4DOOxa4eRxF2dAtmUe0kSPP8oA.roa (hash: qHA/WOgfb5PSClEW7ipNBpljR8hRqs+26OIpJqnzQCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:f2:ff:4a:02:c2:ab:12:6a:c9:8a:c5:24:7d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2160b2b1c829d88936b1adaeec97fdd1b40d41e5
        Validity
            Not Before: Nov  4 06:00:35 2025 GMT
            Not After : Nov  5 06:00:35 2025 GMT
        Subject: CN=92feb46455fbfd9f19ae11571ce051dc9dd56047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:fa:3f:d3:77:14:01:e8:b6:8d:c5:19:44:
                    88:3e:28:73:4f:9e:76:a2:8c:4c:9e:79:85:dd:ab:
                    9e:b0:6b:c8:bd:6f:26:aa:aa:d3:b9:be:73:f7:7f:
                    4f:f0:37:f5:7d:35:d2:03:e0:d7:68:1d:ea:b7:bc:
                    21:99:34:f3:64:68:ef:66:7e:2a:6b:41:a5:29:5d:
                    24:1f:5b:79:45:3f:50:10:cd:b9:7c:bc:e7:bd:f1:
                    49:d6:0f:78:02:a9:1d:13:19:1c:e7:f8:55:bc:96:
                    53:da:4b:da:3b:2a:bc:28:0a:d3:6c:e2:7e:01:be:
                    a2:b1:20:74:45:c1:60:e9:e7:6c:9c:dd:7f:63:c9:
                    fb:cc:3e:f5:81:05:e4:88:93:96:d8:d2:4c:f8:cd:
                    be:2b:dd:7c:3c:cc:43:f8:5f:d6:c8:49:01:d5:15:
                    56:ed:19:48:25:4f:8a:f2:f8:08:87:73:ec:4e:34:
                    d0:e5:85:52:35:0c:e1:48:17:cd:70:39:fa:f3:97:
                    10:64:74:e0:97:55:59:c2:aa:fe:84:3c:19:49:3e:
                    a8:0e:30:35:55:42:0b:08:e7:f5:ab:2a:b8:25:0b:
                    89:bb:74:bd:82:cf:fa:9a:9a:e2:b0:3d:59:91:ea:
                    0a:49:65:81:04:68:03:7c:5e:89:f3:a5:ec:41:2c:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FE:B4:64:55:FB:FD:9F:19:AE:11:57:1C:E0:51:DC:9D:D5:60:47
            X509v3 Authority Key Identifier:
                keyid:21:60:B2:B1:C8:29:D8:89:36:B1:AD:AE:EC:97:FD:D1:B4:0D:41:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWCyscgp2Ik2sa2u7Jf90bQNQeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/db1e20-dc36-488d-91a1-3df7faf3535d/1/IWCyscgp2Ik2sa2u7Jf90bQNQeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:3d:a3:f1:33:3d:36:d6:74:6a:7d:17:3a:37:70:43:13:bd:
         83:69:44:9a:94:ab:20:28:c3:a6:4b:79:05:09:bb:0a:35:d3:
         58:20:15:ed:74:b8:0c:6b:ac:54:ac:23:a2:7b:e7:64:77:25:
         ae:a5:f9:8f:60:62:c5:5b:28:41:b0:58:1a:f1:38:2a:bc:47:
         a6:fb:7d:06:d9:20:86:8e:c2:7c:07:14:05:93:8e:7c:e1:f5:
         24:82:58:4e:2c:bd:f0:2b:e3:4f:3a:d2:cd:e0:98:c9:e5:f0:
         57:ce:6f:06:a8:15:4f:ae:46:36:c3:73:9c:ea:28:2b:8b:86:
         aa:89:fd:b4:62:87:cd:60:50:29:22:9f:02:8c:6d:b1:c5:9a:
         8a:35:58:69:93:ce:af:0e:8b:c6:d4:c5:d6:ff:35:bf:59:16:
         fd:01:23:7a:2a:1b:c2:f8:55:3d:bd:c7:ce:0a:69:d2:27:77:
         2f:f0:d9:24:c4:10:f2:a4:c0:0b:10:14:b6:d0:78:95:9c:3c:
         35:86:f7:44:0c:48:06:c8:06:f6:dc:3c:f7:5d:47:86:ca:99:
         42:f4:b4:f4:43:bc:b3:a3:25:84:8e:54:17:eb:3e:7b:64:1e:
         60:b2:4e:15:9c:06:cd:c2:59:6c:29:7b:34:11:a4:e1:03:50:
         59:54:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:10 2025 by rpki-client