Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
File:                     zxNuAf-vhT27Klz8_l0bZ9IMILU.mft (raw, json)
Hash identifier:          yYJt+HOV/yGkhtq1+y/yD3nLrz6411Tumx6nqUVcRSo=
Subject key identifier:   DC:60:C0:F6:0D:DF:B4:EF:2A:0E:C9:C0:2B:32:73:1A:E2:1A:FF:22
Authority key identifier: CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5
Certificate issuer:       /CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
Certificate serial:       0199FC8F9C11E3B67A3D510879F20240C018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
Manifest number:          116C
Signing time:             Sun 19 Oct 2025 13:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:33 +0000
Files and hashes:         1: OmwRoJ3JPu5X08Xp_X1_3qE1I7k.roa (hash: Adg8t51EAwBbzjl4kDJAi92mlZw1Om+k918pc8UAy2M=)
                          2: zxNuAf-vhT27Klz8_l0bZ9IMILU.crl (hash: bhkyNq19OqwNDqelKA5e2t9B4vddy4OVs6wtTvkKO9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:9c:11:e3:b6:7a:3d:51:08:79:f2:02:40:c0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf136e01ffaf853dbb2a5cfcfe5d1b67d20c20b5
        Validity
            Not Before: Oct 19 13:01:33 2025 GMT
            Not After : Oct 20 13:01:33 2025 GMT
        Subject: CN=dc60c0f60ddfb4ef2a0ec9c02b32731ae21aff22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a4:38:29:49:a1:0e:db:6f:08:ca:66:51:b1:
                    56:31:cf:0d:c4:f5:9d:e4:07:a8:8a:64:bb:e4:fb:
                    d2:2b:40:0f:7c:43:0f:7b:59:60:0f:f2:a9:73:fb:
                    69:30:49:d9:bb:fc:0e:0a:d1:d9:12:44:11:b9:e9:
                    29:dc:be:d0:d0:52:c1:de:d0:e4:f4:32:08:ae:30:
                    80:58:31:27:f4:3b:7c:ff:86:2c:5a:2c:98:ac:d7:
                    d4:54:f0:b3:76:aa:2d:1c:55:29:b9:a2:65:44:36:
                    0e:af:aa:0f:7f:fd:ee:6d:9d:49:41:b8:62:1b:8f:
                    09:8e:9a:70:8e:14:3d:83:56:2d:e9:13:34:a5:4a:
                    c1:f0:0f:b6:9c:f3:23:c2:a7:b7:20:bb:70:66:90:
                    a4:00:f5:58:49:c9:4b:6e:64:d6:39:8c:bf:3d:f3:
                    c5:a8:ac:83:5a:10:fc:d3:78:41:3e:9f:cf:8e:77:
                    7e:76:56:64:52:1d:02:20:3f:e8:6c:d2:54:ef:6e:
                    7c:fb:c6:f0:a7:06:1b:6f:a6:c0:53:19:e4:6f:c4:
                    3c:45:bf:e5:39:21:c9:e3:82:46:f9:1a:f5:b5:a1:
                    f3:ad:48:2c:cc:05:2d:90:3d:88:b2:9f:22:50:ff:
                    05:11:36:6a:f9:b6:e5:c6:26:21:dd:63:e3:92:5b:
                    59:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:60:C0:F6:0D:DF:B4:EF:2A:0E:C9:C0:2B:32:73:1A:E2:1A:FF:22
            X509v3 Authority Key Identifier:
                keyid:CF:13:6E:01:FF:AF:85:3D:BB:2A:5C:FC:FE:5D:1B:67:D2:0C:20:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxNuAf-vhT27Klz8_l0bZ9IMILU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/702564-50a5-4fad-a12f-65dba63b1a82/1/zxNuAf-vhT27Klz8_l0bZ9IMILU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c2:e8:d0:0f:f6:52:12:81:ec:cd:2e:b1:7a:59:44:c4:08:
         d0:ca:de:ab:a5:b5:99:06:18:c0:ae:5b:7b:dd:f0:a1:e2:1e:
         61:04:4e:13:1a:ca:99:8e:33:a2:bb:1d:dc:4e:eb:4e:f5:73:
         74:10:82:79:4f:cf:54:a2:8f:cb:88:aa:46:e7:fd:1f:68:22:
         05:80:62:9e:6a:dc:f5:f0:cb:0e:bd:b9:66:bd:0b:27:51:e4:
         fb:95:f0:db:55:81:9c:85:f8:3f:de:ad:aa:fc:03:2a:4e:f4:
         1d:58:7b:8f:2f:c1:4e:ad:e2:09:b1:cc:d8:27:13:91:08:f6:
         6b:3d:85:cd:c7:fb:ca:fd:eb:4f:a9:80:9d:52:4c:d2:09:7b:
         62:6a:89:54:ff:16:d3:ae:48:04:48:00:2a:60:3d:01:75:5f:
         7d:b4:99:9d:e6:1c:bb:13:76:e3:54:8d:6a:75:f7:f6:3e:52:
         37:fb:d0:53:a8:11:2e:c0:be:c9:50:99:d5:84:7c:d0:ff:26:
         e9:42:ae:e9:5c:fc:25:c7:cc:6d:98:df:d7:de:9a:76:44:3a:
         a9:05:11:9b:c1:95:de:e6:a2:98:4c:8e:4e:3d:6f:33:4b:cc:
         39:1e:44:72:b7:47:f6:90:37:97:99:6f:ad:03:a3:b2:a0:ff:
         c6:25:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:30 2025 by rpki-client