Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
File:                     P_xBJyHAxuekxXZ66YxFId71FQE.mft (raw, json)
Hash identifier:          NAAP2ChTASkU/4Kn3s8OyWxrp6ZP9Kn0esfJHthHrxo=
Subject key identifier:   02:DA:51:8C:5D:DB:D6:9A:AF:E1:D1:4A:5C:A0:67:05:FC:43:A1:90
Authority key identifier: 3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01
Certificate issuer:       /CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
Certificate serial:       0199FE46B87422FD419FFAFCBEC04385C0DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
Manifest number:          15EF
Signing time:             Sun 19 Oct 2025 21:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:11 +0000
Files and hashes:         1: P_xBJyHAxuekxXZ66YxFId71FQE.crl (hash: 7puIbLFiPdrYKBYZL3ryyV2ZLappeNUEsusYJmvzR+o=)
                          2: nmitwXvuuY6MKgCsxEX1cJcowok.roa (hash: oh69tebd8y4Ws34XumPPpVkiRFbzbzoksJJOP2JTe+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:b8:74:22:fd:41:9f:fa:fc:be:c0:43:85:c0:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ffc412721c0c6e7a4c5767ae98c4521def51501
        Validity
            Not Before: Oct 19 21:01:11 2025 GMT
            Not After : Oct 20 21:01:11 2025 GMT
        Subject: CN=02da518c5ddbd69aafe1d14a5ca06705fc43a190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f6:05:9f:20:d0:99:4a:c6:36:d3:1d:39:fb:
                    34:33:3c:ac:4c:62:34:40:52:e8:f3:2f:da:e0:35:
                    14:48:03:33:95:c9:4d:24:f1:9d:c8:5e:66:44:92:
                    96:39:a8:8f:9e:fa:91:87:a3:88:dc:51:26:94:10:
                    d2:42:72:b7:80:fa:c8:5c:b4:7e:16:fd:07:00:6b:
                    6c:f5:89:88:6e:7d:0e:2e:ee:e5:2a:c9:fe:45:d2:
                    c6:3e:f9:d9:15:00:17:e0:fe:40:5c:2d:1b:56:9f:
                    3f:26:a0:fd:e1:64:fb:b8:d0:02:d6:49:ef:e9:b3:
                    02:c3:c5:bc:ee:77:4a:3c:47:e1:95:51:89:9e:ba:
                    dd:56:15:e1:22:45:77:f0:e9:07:80:99:d1:ce:96:
                    fd:48:3c:79:81:aa:44:3d:7d:e1:0d:dd:91:b9:fd:
                    6b:4f:57:c7:ea:b6:6b:da:1e:04:95:bb:e6:b7:eb:
                    31:81:d8:7e:92:5f:2b:59:36:73:8b:2c:0d:c0:f4:
                    03:0c:c9:47:84:75:82:f0:9e:c5:e7:fa:1e:d9:3b:
                    ef:2f:dc:62:9d:24:9e:d2:c0:3b:e8:7a:91:86:c1:
                    b4:fe:b2:65:ba:88:d2:0a:26:75:64:02:1e:16:9a:
                    ef:14:5b:40:ba:71:e1:e4:d4:79:cf:ba:9f:df:e4:
                    01:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DA:51:8C:5D:DB:D6:9A:AF:E1:D1:4A:5C:A0:67:05:FC:43:A1:90
            X509v3 Authority Key Identifier:
                keyid:3F:FC:41:27:21:C0:C6:E7:A4:C5:76:7A:E9:8C:45:21:DE:F5:15:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xBJyHAxuekxXZ66YxFId71FQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cd90b9-fa88-4bd9-a7d5-22118b361490/1/P_xBJyHAxuekxXZ66YxFId71FQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:5c:cd:1a:9b:c3:4e:35:d6:dd:b7:90:56:23:38:66:a4:
         85:c8:2a:d4:4c:27:d8:c2:48:9a:df:db:48:6b:45:86:13:c4:
         e9:e9:66:04:a1:d7:3f:a5:af:f8:57:c8:82:a1:30:2a:58:14:
         24:7d:50:0c:9f:d0:da:10:8f:23:58:fc:25:ee:33:be:0f:26:
         ea:18:39:ef:65:48:41:64:50:76:77:6d:f9:96:8e:3f:11:b9:
         7a:49:94:fc:d4:f7:ed:c1:fa:09:4d:92:de:6e:f3:67:95:36:
         09:3d:c6:6f:74:6e:bb:3c:9b:08:4e:be:b1:56:b7:dc:48:63:
         a4:19:8b:0b:8e:a9:4a:d5:73:20:83:de:85:4e:e8:63:8b:ea:
         5d:23:75:a9:93:2c:d8:65:20:4c:02:66:38:b3:b9:67:be:0a:
         f4:6f:fb:d3:04:30:be:2e:79:8b:c0:fe:7c:d0:45:52:60:77:
         f1:de:31:7d:06:e1:2c:5c:0a:1b:e6:cc:13:89:aa:e4:98:2d:
         80:15:c1:95:73:81:84:14:68:98:5c:7a:b1:30:42:a0:42:32:
         dd:ee:3c:94:22:e8:75:67:5c:70:2d:aa:fa:33:73:c6:78:8f:
         70:dc:cc:11:f7:32:56:1b:ca:c1:c2:fa:60:cf:81:15:4e:cf:
         8e:08:a9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:26 2025 by rpki-client