Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          V4H6yC2Xp3D01CVKbMtiGx9VOmGBsJFNXIL0E14mVlA=
Subject key identifier:   06:85:29:ED:F8:0F:D2:5B:05:82:0E:C1:5E:41:5F:E7:DB:90:21:4B
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       0199FF59988569923A5F42151BBB81622D9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          062E
Signing time:             Mon 20 Oct 2025 02:01:25 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:25 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:25 +0000
Files and hashes:         1: jruZxZ6v3fQQDOP1XhyiLrCoyWo.roa (hash: JwmXnt+QW5OLkAvlfiLvs8bXFlLMvqHA2E9khKbsWec=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: zNWpEiOyYtzzXeIUgi/Y+lVS3gb3ddUlKm/bPKJRgEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:98:85:69:92:3a:5f:42:15:1b:bb:81:62:2d:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Oct 20 02:01:25 2025 GMT
            Not After : Oct 21 02:01:25 2025 GMT
        Subject: CN=068529edf80fd25b05820ec15e415fe7db90214b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:1c:5e:ce:c8:52:23:e2:ee:ce:03:c6:6b:
                    17:85:7a:da:53:b8:85:76:28:5e:29:fe:26:1a:c3:
                    8d:3c:51:f5:d0:c9:d5:5f:b8:f9:11:22:56:9e:7e:
                    e8:6e:1c:a5:e0:d8:23:1d:b0:20:cd:4f:0f:0d:b3:
                    97:20:5d:95:83:ba:d4:86:25:3a:70:27:d7:58:46:
                    7f:7d:d5:6b:a1:23:e5:d1:70:60:ef:49:16:62:a3:
                    9f:4d:32:61:6d:d5:d5:79:07:61:ef:a9:2d:da:60:
                    45:1d:fc:05:0c:e5:87:00:db:4a:ab:28:97:f6:bb:
                    01:61:c3:9c:95:73:e5:79:49:d1:4d:4d:a5:14:58:
                    d1:77:29:a0:64:2f:eb:71:2f:12:86:5e:da:59:04:
                    2e:d1:32:c3:e1:e6:28:18:f3:31:f6:66:1a:f5:3c:
                    57:7a:6d:2e:68:a1:89:43:2f:46:ec:4d:0e:c2:df:
                    e1:79:62:35:69:2c:5b:fd:02:9b:da:1e:33:26:0e:
                    3e:2e:b4:2b:40:21:e1:3d:db:7b:90:6e:c7:60:4e:
                    3e:36:08:ad:36:77:98:9e:a5:a8:1e:6a:95:9f:4b:
                    be:55:be:0f:84:0e:f6:9e:cb:c5:83:c6:59:b1:10:
                    24:05:60:b6:af:73:df:64:09:f3:26:d4:bb:6b:e8:
                    3b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:29:ED:F8:0F:D2:5B:05:82:0E:C1:5E:41:5F:E7:DB:90:21:4B
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b6:50:98:0a:69:84:93:9f:6c:a1:89:8e:3a:d9:e4:03:81:
         6b:2e:48:fc:6b:f8:47:7f:50:42:7a:8b:96:b7:b7:52:92:ee:
         ad:35:51:6e:0d:43:4e:db:8e:7d:b3:95:9b:08:24:09:d2:5e:
         34:23:93:a2:ee:db:f9:a9:47:b7:ec:42:75:37:80:d7:09:76:
         f2:5e:e3:5b:a6:e0:16:4b:fe:9f:cc:04:b1:80:0c:07:86:ae:
         60:de:a2:00:06:d4:09:07:d7:f0:a7:9c:d1:1f:08:ce:6b:f0:
         ff:e0:ef:f0:f6:42:d4:c8:6f:78:87:0a:7f:bc:b4:ed:d3:af:
         e4:d8:15:be:fd:aa:d0:bb:9e:c1:08:57:14:b9:96:1d:6f:91:
         2e:81:6a:e0:82:18:5d:d6:84:18:b3:08:05:41:98:4f:83:2a:
         09:70:6f:2b:cd:64:5a:8c:11:b3:83:25:51:21:bb:0f:90:ab:
         8b:57:83:de:29:2a:72:5b:ce:13:0a:40:f7:5a:2d:cd:2d:d4:
         66:47:59:c8:28:de:80:c8:54:2b:4b:42:2d:a1:8e:e7:23:22:
         9c:74:98:83:a0:9a:4b:63:1e:16:c4:b3:bf:19:60:9f:cb:e0:
         7e:e6:46:32:53:15:c4:fe:79:35:3e:29:af:64:14:e1:96:b2:
         66:7b:f4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:27:46 2025 by rpki-client