Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
File:                     dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json)
Hash identifier:          CogOHx4A3yYMtzX3th4LB896pUFKVxeTg7tpt9L/1q4=
Subject key identifier:   F9:2B:6A:92:C3:76:BA:C8:E1:3B:94:0D:07:76:00:85:43:4E:FC:8F
Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B
Certificate issuer:       /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
Certificate serial:       0199FAD8253003A2469A46384F03ED538790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 05:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:33 +0000
Files and hashes:         1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: fYejJdlEJAGNwzY+S4sdNM5m5ylJlHeI6k7h/b4fFC4=)
                          2: itTVy05KXbjBfmcjzdcEDVdPSEA.roa (hash: vAulIDyKQ5KBMKkmbKEQNL7hMBKpbBIacuNshnzHl5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:25:30:03:a2:46:9a:46:38:4f:03:ed:53:87:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b
        Validity
            Not Before: Oct 19 05:01:33 2025 GMT
            Not After : Oct 20 05:01:33 2025 GMT
        Subject: CN=f92b6a92c376bac8e13b940d07760085434efc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:60:2a:5b:c2:5a:97:26:d8:16:3e:d2:b3:
                    c0:fa:d8:18:92:b7:ea:2a:e0:ce:f0:59:2a:c5:91:
                    6c:46:50:35:7c:09:74:3c:39:90:ba:cf:25:cc:d0:
                    ed:dd:82:a2:94:90:8a:d2:fe:2d:7f:9c:f0:4f:92:
                    d8:54:bb:c0:1b:61:80:bc:a0:c0:63:c8:4b:41:48:
                    ca:79:33:aa:b8:b2:46:e0:36:7f:46:91:da:eb:94:
                    32:e3:0b:92:70:7e:a7:81:33:1e:d4:c6:2f:b8:c0:
                    fe:c0:ab:f6:0d:2e:28:b7:50:b2:cc:00:78:00:4e:
                    77:59:12:dc:43:7d:80:ab:e1:0d:d2:df:49:e2:43:
                    a9:06:59:d6:a1:d6:5b:bb:ff:cb:9a:68:7a:1c:88:
                    14:00:53:24:6e:8c:11:bf:da:11:a4:77:f5:6d:96:
                    71:c5:64:0c:64:ce:f3:1e:64:43:e9:33:de:6e:b3:
                    40:bf:53:02:1c:fe:d1:d4:9e:fe:5b:ba:b8:1b:be:
                    47:6b:f0:0c:45:12:ef:8c:b8:d7:fe:1c:54:cb:fe:
                    53:c2:97:c5:00:79:d0:4f:3e:e7:d7:e5:e9:c7:c7:
                    7b:ca:da:78:91:16:1b:5c:01:70:e5:d1:12:84:b0:
                    b3:28:36:a4:27:2d:58:3d:80:44:c9:0a:db:6f:5e:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2B:6A:92:C3:76:BA:C8:E1:3B:94:0D:07:76:00:85:43:4E:FC:8F
            X509v3 Authority Key Identifier:
                keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:47:1d:86:ba:3a:19:03:67:b1:5e:6b:c8:0d:e9:b0:33:21:
         a1:7d:38:08:f4:d6:ca:b3:59:a0:78:b3:28:9b:ab:14:47:2e:
         fa:5d:f8:c5:39:fa:7e:41:cf:07:12:ed:3e:5f:08:65:ee:28:
         da:65:77:f9:51:e4:26:cf:0d:e7:3f:b0:c9:73:2e:38:8e:dd:
         0c:b4:8b:e4:24:4c:f2:a3:11:e6:48:f2:2f:65:99:61:7a:c1:
         12:e5:c5:5c:77:ad:4b:b4:7c:db:ad:41:6b:02:0a:22:f3:50:
         b7:98:9f:e7:4f:63:e8:9c:c5:45:1b:e3:eb:f7:63:b0:d0:3f:
         ec:0e:cb:eb:cf:9f:76:19:21:7b:38:03:94:a9:1e:61:15:ee:
         60:2c:aa:6e:fa:25:ca:8c:f1:d7:d0:0d:e4:13:a2:3a:31:00:
         96:4a:da:b5:83:a5:fc:b4:78:4d:2c:8a:54:0b:e1:a0:68:4b:
         42:d4:f8:c7:eb:30:3d:82:55:8f:5c:92:b8:89:d1:1d:b7:9c:
         9f:1b:a5:b8:47:74:fd:6c:1e:d1:86:16:fd:69:c7:08:1d:7a:
         c9:c1:1d:a9:e8:f2:f2:8f:27:ae:f1:fe:fa:6f:18:8c:f2:27:
         d1:ec:e3:5c:51:8a:24:09:4a:67:1e:b0:7b:57:42:7e:14:1d:
         ff:4e:a0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:46 2025 by rpki-client