Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          Pz4KWhnz+qUzfq7DWbrNUeT4hmPUQJRsKf1jl7YL6kg=
Subject key identifier:   46:F9:64:62:AB:31:40:60:86:74:32:D4:DF:95:23:17:B1:35:6D:79
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       019A01EBD6AE2B9360AD3DC524D75C48BEC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          03C9
Signing time:             Mon 20 Oct 2025 14:00:24 +0000
Manifest this update:     Mon 20 Oct 2025 14:00:24 +0000
Manifest next update:     Tue 21 Oct 2025 14:00:24 +0000
Files and hashes:         1: 08Xj6P3LiBkWV-XyPE1sfuebHwg.roa (hash: GOb53BquANot8lO8WUgTLWPiXo2ewEYSLTJKkoVM5kk=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: iLPxqTVl9Slbklq7AtUUf2XF4Z+dtkVj/HMQ/i+cIX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:eb:d6:ae:2b:93:60:ad:3d:c5:24:d7:5c:48:be:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Oct 20 14:00:24 2025 GMT
            Not After : Oct 21 14:00:24 2025 GMT
        Subject: CN=46f96462ab314060867432d4df952317b1356d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:92:3c:29:e3:e1:b9:68:b7:77:f4:7a:1e:8b:
                    54:eb:cf:fb:06:3a:13:0e:bf:cc:74:69:cc:42:31:
                    13:d5:33:82:ea:ab:83:9f:13:cf:3a:29:9a:4b:50:
                    e8:e5:75:81:ad:0a:6c:c8:76:2b:de:fb:15:18:a8:
                    85:84:5a:f4:61:4d:fe:14:18:9d:b4:4f:a8:36:e4:
                    01:f6:4b:98:20:cd:bc:00:f0:0d:33:00:1f:f2:52:
                    4b:ca:78:e5:51:75:7c:5c:6e:68:7e:78:46:43:c0:
                    a6:75:5d:c3:86:3e:83:08:af:6f:fa:57:42:df:6c:
                    96:d3:69:b0:e4:3a:b2:70:98:69:b9:85:ae:39:bb:
                    ff:21:2d:f8:dc:54:ce:85:1c:40:23:c8:da:01:98:
                    f6:aa:01:4d:2b:44:04:cc:0f:c3:30:5b:e6:93:f9:
                    0d:a8:83:97:19:8f:5c:ef:ba:40:7e:82:1d:f1:d4:
                    fe:86:81:c0:cc:86:c4:c8:13:95:46:41:b9:20:63:
                    00:8a:18:7d:23:cb:e5:66:03:05:31:13:9e:3d:24:
                    ff:1b:b0:90:53:fb:1e:fb:7d:38:a6:7a:fa:6a:56:
                    de:2c:13:5c:2c:5c:59:e9:fa:ed:c6:86:10:77:7d:
                    d9:b8:2b:98:3d:fd:8f:d6:12:16:9f:e8:b0:ce:71:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F9:64:62:AB:31:40:60:86:74:32:D4:DF:95:23:17:B1:35:6D:79
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:96:a0:78:37:88:da:65:05:0a:c9:af:b2:df:d7:fd:36:
         0e:2e:58:d5:5f:63:c8:ae:40:3d:15:e2:43:34:17:df:c5:72:
         e9:96:80:ba:4c:20:4f:37:c0:05:b7:9a:e4:be:36:3d:1f:bb:
         16:ce:97:9e:6f:86:71:fa:a2:f2:a9:94:76:5b:60:58:6d:37:
         d6:c6:d9:a6:43:77:8b:90:78:5c:7b:ab:0f:ae:05:56:fa:ef:
         08:f4:fb:eb:08:62:87:09:31:d9:42:94:24:e5:3d:95:53:98:
         77:57:48:d7:25:aa:4c:f5:26:35:64:88:c1:84:ef:9c:59:50:
         be:fe:4f:dd:15:97:37:4b:2c:ff:fd:a2:cf:19:21:8e:cd:e0:
         ce:7f:15:e5:a0:be:00:e0:3a:8d:dc:1c:7b:c3:5b:66:ee:03:
         7d:e4:e0:a7:22:9e:99:a7:55:c4:89:86:e7:fb:a8:4e:fc:6d:
         fe:12:3a:cb:94:47:ec:8c:d3:a8:2d:c8:a3:7f:db:da:c8:5a:
         09:91:f9:d8:eb:46:d4:15:9e:b1:a3:f3:ef:05:2d:c9:dd:1a:
         69:95:da:e5:d3:0f:48:9d:99:2b:e9:35:c3:b6:00:47:82:49:
         a3:09:69:a5:21:ce:45:6a:0f:8f:c1:6a:59:cf:1c:08:ba:94:
         db:ce:2f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:34 2025 by rpki-client