Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          Nkl0YdwfzXZ6eaiFDisv2jQxp9p9ZVhCLRLB+VSYJEg=
Subject key identifier:   CC:B1:B6:53:7D:F6:88:4B:0E:84:9E:CE:D3:5C:F4:77:E6:6A:12:B6
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       0199FC8F2E26B9B95CC4B4B889A0F3E5F5C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          098F
Signing time:             Sun 19 Oct 2025 13:01:05 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:05 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:05 +0000
Files and hashes:         1: RbCZ4FuBiM5bQVW3sP5PrxSE_ic.roa (hash: heyjJE1M941WJSvHrhTQkBoLwbj5RIQs9kFiPjSVnUw=)
                          2: VgQVNXTLznzmHsP79v3Zsr2IWwU.roa (hash: V8Zv8ak7cEH62i1TGjfWmCMowy8kun9bTSlwi87+E9s=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: o5gpMA9zEVo4AiwPaLLs5oF3Jm2DITXQU+EY2Bm3vV4=)
                          4: rgad5_QrqjzIqPuzW_IRWvVFFb4.roa (hash: CW37KfuVvlCtejt5YGCTadY3jiqhfL5iQfoIqu008Bo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:2e:26:b9:b9:5c:c4:b4:b8:89:a0:f3:e5:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Oct 19 13:01:05 2025 GMT
            Not After : Oct 20 13:01:05 2025 GMT
        Subject: CN=ccb1b6537df6884b0e849eced35cf477e66a12b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6d:2b:c9:ba:20:82:ea:97:b9:10:5f:e8:42:
                    7b:b8:7b:99:d6:eb:b9:12:9c:ed:13:50:ca:85:3b:
                    57:04:94:c7:d7:20:3a:3e:96:8e:ac:97:a8:f1:32:
                    e9:dd:0c:0c:e2:cf:9b:b7:c3:81:07:7c:46:6c:28:
                    41:7b:da:79:b8:4b:19:87:38:d7:79:40:4f:57:8b:
                    2f:be:84:f1:a5:a0:09:e6:a4:57:b0:fc:42:c6:f9:
                    3b:e6:ff:63:d3:4c:be:a7:ce:32:99:6d:d0:56:d0:
                    df:b5:95:53:4b:f0:7f:e3:58:55:74:ef:b3:1c:a1:
                    ae:4d:61:a3:96:92:33:11:6c:73:e7:ef:e7:d9:39:
                    8d:81:f0:06:80:d4:d6:5e:45:0c:e9:64:e6:a4:9f:
                    83:8d:9d:97:f2:80:c0:58:ea:ad:7b:ae:74:01:28:
                    f7:17:56:95:70:0b:4c:da:11:e7:35:61:33:87:d3:
                    be:f5:86:64:9f:08:05:8a:be:fe:3d:6d:8c:72:36:
                    2c:27:a9:01:81:29:16:43:34:75:bc:fc:14:6f:9d:
                    18:d3:31:a6:82:78:76:ac:b3:bd:14:f4:73:56:0d:
                    c3:9f:fb:04:ae:9e:d7:0e:46:3c:bb:89:6b:c4:fd:
                    83:1e:2e:27:51:1d:5f:8c:73:81:7b:c1:8a:a3:e5:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B1:B6:53:7D:F6:88:4B:0E:84:9E:CE:D3:5C:F4:77:E6:6A:12:B6
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:67:c3:fd:c7:b7:71:3c:c5:4b:b1:5f:5c:f2:9a:2a:79:
         1b:06:81:25:e3:ff:64:6c:9e:12:f3:b2:ac:f5:e9:ba:37:bb:
         bb:0e:e9:ae:68:b7:46:e5:79:fd:d5:af:90:05:58:2e:7c:c7:
         e7:e2:bb:ea:74:e0:7a:41:54:f5:23:15:04:c8:6c:6c:17:47:
         aa:0e:e9:3d:16:b8:e5:72:88:c3:42:bb:1a:30:16:ed:6d:d8:
         5f:c6:40:ac:40:d0:c5:7f:6a:db:cc:0a:ee:85:08:c5:45:9b:
         81:ed:51:5b:b9:d3:30:25:4a:39:a2:49:e5:69:46:d6:5e:b3:
         d2:2a:41:62:0c:0e:b7:21:e1:8f:dc:f4:7c:51:26:71:04:a5:
         35:07:18:bf:3e:e9:43:e0:24:5f:27:9b:59:1c:23:91:f5:a6:
         f4:dd:5a:f3:91:32:08:09:e3:1f:7c:af:29:09:d9:08:ce:8c:
         28:ce:8d:da:e5:04:a3:15:62:21:25:e6:3a:c9:53:d8:c8:43:
         4c:9b:79:22:77:65:60:47:73:92:e0:d5:8a:f6:31:c8:fa:ce:
         86:e3:e9:ad:85:e5:a3:35:d7:cf:89:d0:f5:5b:9d:8a:ca:56:
         2b:33:d5:a1:85:b8:f8:ee:04:4d:fc:53:c8:b0:26:18:89:c9:
         6b:8f:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:24 2025 by rpki-client