Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          J2Q1weDSQlaz0eBNKkC+jZqwgvV5BdcUJNlnlHR4uA8=
Subject key identifier:   D0:E8:0A:DE:71:25:BA:42:AA:A2:A1:FA:C9:5D:DE:CB:1D:38:72:CA
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       0199FD6B242D22483A01E835A737AE77461B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          13D2
Signing time:             Sun 19 Oct 2025 17:01:21 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:21 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:21 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: Nh91f0Az3hb88Ax8psE7I++3paewvhhA5lamDwEERt8=)
                          2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
                          6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:24:2d:22:48:3a:01:e8:35:a7:37:ae:77:46:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Oct 19 17:01:21 2025 GMT
            Not After : Oct 20 17:01:21 2025 GMT
        Subject: CN=d0e80ade7125ba42aaa2a1fac95ddecb1d3872ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:cc:07:b1:98:13:53:b4:12:12:d3:6e:05:
                    73:0c:31:e5:58:79:aa:74:5c:b6:cc:4e:a1:52:3a:
                    2d:4a:3d:b6:af:42:24:0c:b8:7d:b8:a1:a7:cb:13:
                    9e:a0:44:da:e1:64:b6:92:0a:67:09:5f:33:83:80:
                    6b:1e:8f:a3:cd:30:60:6e:5a:ba:cb:f9:fc:58:a1:
                    d8:90:68:c2:a8:25:db:8c:3b:1c:69:a0:c8:1b:80:
                    21:0a:10:a0:eb:2f:73:f9:e2:02:26:5c:5d:e8:17:
                    c7:aa:80:25:15:41:47:2d:42:c1:6d:10:84:ca:15:
                    9a:f3:b3:5f:c8:2a:9e:2d:ff:e1:34:7c:31:14:59:
                    cd:da:13:da:92:ee:58:07:9c:7a:45:67:63:ff:34:
                    ab:4e:73:ef:f1:ac:cb:35:1b:8b:64:81:5e:ec:b2:
                    9b:cb:74:6c:fd:05:22:c1:42:f8:43:9d:82:77:85:
                    c1:da:f7:03:89:7c:3d:d9:84:9f:3a:d2:cb:d3:32:
                    37:ff:30:d1:43:0d:49:19:2a:63:21:8f:53:73:68:
                    54:6f:bd:1e:e4:1e:4d:7b:63:7e:90:3b:0c:ef:24:
                    08:d3:d1:66:61:b4:c3:fc:c5:54:6f:c7:c0:fd:88:
                    78:3b:70:ab:e9:fd:2f:fc:75:bd:38:f0:c4:3c:4d:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E8:0A:DE:71:25:BA:42:AA:A2:A1:FA:C9:5D:DE:CB:1D:38:72:CA
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:c1:4c:e3:5f:ae:ab:50:1d:f9:52:0c:1c:42:bd:9b:09:
         7b:35:88:7c:c6:b7:28:cd:1f:9f:f6:c0:6b:ae:ea:75:7f:5f:
         0a:cc:fb:eb:9b:49:87:4b:6a:8e:04:19:eb:0a:26:38:f8:10:
         47:8e:7d:b2:a9:ec:06:e6:60:bd:a2:08:d0:fb:b5:0c:a3:63:
         53:09:ff:fa:1f:cf:5a:07:6f:3c:fd:db:ff:ac:56:d7:45:5b:
         0d:5e:71:81:6e:2c:a2:1d:ff:be:48:1d:15:c0:de:25:0f:23:
         60:e7:42:84:08:74:7d:d5:be:cf:02:42:23:3a:c3:ba:ae:0a:
         e7:62:fb:c9:94:e5:90:8c:37:14:56:4f:84:b0:a9:eb:a6:f6:
         6d:8e:8e:e4:f0:6c:e3:26:f6:9c:46:13:c3:a8:f8:c0:8e:30:
         f6:d8:ee:73:a7:9c:a0:35:e5:f7:1b:e3:de:5b:a8:87:a3:9b:
         d2:fe:b8:ac:a2:cc:00:88:bd:d1:49:c4:ba:b0:c2:36:bd:6c:
         56:85:3b:97:a1:1a:60:d7:be:bd:14:08:d1:08:3f:20:4a:2f:
         6c:df:70:22:ed:50:a7:46:45:23:63:f3:f5:f3:1e:6d:9b:5b:
         79:54:1a:3a:7a:03:57:9c:44:0a:17:bb:14:c5:49:b6:05:14:
         c3:e2:08:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:50:00 2025 by rpki-client