Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
File:                     0Dxztg8hA-47Kiw8vpIOISqS7mU.mft (raw, json)
Hash identifier:          4leauGzqsQkhTENwNWA0cwJ4KLOi1I3kd9tSKreLeF8=
Subject key identifier:   47:0E:B3:7B:78:AF:2B:AB:8D:EC:3C:26:9E:BA:F2:96:A4:60:AA:15
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Certificate issuer:       /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial:       0199FDD8FBCD399D52A8B5A9AEEF2706FF7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
Manifest number:          0650
Signing time:             Sun 19 Oct 2025 19:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:19 +0000
Files and hashes:         1: 0Dxztg8hA-47Kiw8vpIOISqS7mU.crl (hash: Ok1sd8nMpWWSVFWNvU2ZKzFtOjKuhMlnlfbdchf9QVY=)
                          2: tDVvrqtQQCwl2jE6yV_v8vBSPyI.roa (hash: qiENM6J31Gqa4rOEk4JnN/zBbLfxSy0s2Ydx5h5QGk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d8:fb:cd:39:9d:52:a8:b5:a9:ae:ef:27:06:ff:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
        Validity
            Not Before: Oct 19 19:01:19 2025 GMT
            Not After : Oct 20 19:01:19 2025 GMT
        Subject: CN=470eb37b78af2bab8dec3c269ebaf296a460aa15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c0:f0:47:b4:65:ce:19:ae:a5:94:b1:1c:e6:
                    02:85:ac:35:e1:be:58:f3:5b:ec:5a:69:cd:94:0d:
                    41:b9:7a:7e:b1:ad:41:26:7a:c8:1b:fb:78:e5:cb:
                    ed:fa:38:0a:93:ba:6e:b2:72:89:74:89:9a:5f:7a:
                    d0:30:10:13:92:1f:90:27:b1:7e:27:b3:eb:e6:4b:
                    c3:5f:be:0d:c6:02:a4:2b:94:32:02:2a:62:0f:8c:
                    07:3b:78:2b:f6:8a:8e:c9:d0:78:81:84:a3:6a:0b:
                    6e:6c:28:4d:fc:44:3b:41:40:57:d7:52:e2:95:7c:
                    7a:22:33:7a:52:c0:9a:38:86:58:e6:19:fb:9c:b4:
                    f6:b7:6e:1f:e8:5a:f4:9a:9d:77:c6:e3:6e:ee:f7:
                    58:65:2c:28:0f:f4:f2:54:ee:45:37:23:9f:eb:1a:
                    ef:ef:54:65:24:ab:c1:b3:4c:03:36:2d:6b:ec:61:
                    3d:80:37:96:06:81:8b:cb:a4:24:2e:e1:32:b7:04:
                    68:c2:94:20:79:bc:98:5e:03:ba:88:ff:32:c3:b9:
                    ec:32:9a:36:19:ef:67:ee:11:c9:51:f1:31:df:9d:
                    bc:d4:19:0e:2a:90:5a:1b:62:92:e9:b4:10:6e:2e:
                    db:38:cb:8f:ba:2d:99:ce:cc:4c:0b:02:0b:ea:3e:
                    1b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0E:B3:7B:78:AF:2B:AB:8D:EC:3C:26:9E:BA:F2:96:A4:60:AA:15
            X509v3 Authority Key Identifier:
                keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:ec:c1:48:78:12:80:6e:87:94:79:4f:e6:fc:8d:c1:49:
         38:f6:04:73:7f:ba:c8:1a:2e:5d:76:80:fc:d2:4a:71:5c:47:
         7f:ce:17:b3:3d:78:88:b7:af:b4:3c:30:1d:eb:f2:74:e1:9e:
         27:e6:15:05:7c:0c:5b:ee:8d:81:b5:12:f9:c4:b4:73:84:57:
         27:a3:67:63:62:08:9f:e0:cd:59:98:7c:2d:b2:dc:a0:cc:ee:
         8c:57:44:5f:6a:8e:ac:fd:4e:a9:b9:5a:1f:7e:c9:f0:d6:fb:
         65:8f:0b:29:8e:8b:46:3d:47:8f:90:44:3f:c1:dc:24:66:ab:
         51:37:39:df:43:ce:d5:30:e3:72:29:b4:98:ea:98:f9:58:b4:
         ee:15:ea:dc:19:e3:9a:22:e0:30:34:66:38:ae:99:b6:d3:93:
         51:a6:cb:3a:cd:bf:8b:b5:b6:30:29:c0:c7:05:7b:71:74:11:
         18:a7:9a:7d:bf:02:bb:6c:17:86:45:75:39:73:d5:da:6f:fe:
         aa:4e:c4:1b:e5:52:d6:f6:4f:67:58:20:d5:51:b9:b7:b6:1b:
         fe:73:70:42:ab:b1:35:51:40:c1:c9:12:db:89:9c:bf:f4:8f:
         22:3e:c2:25:02:43:a1:32:d0:a0:96:3b:ed:43:59:c2:74:a7:
         03:f7:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:12 2025 by rpki-client