Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
File:                     2v75fKAQutT_We99K2vJB3hgqrI.mft (raw, json)
Hash identifier:          ZTM/oUn3hxv13teZwwsqeNGwbI9CaY16wzCrUGMe7BI=
Subject key identifier:   F3:40:B7:7D:35:44:DA:21:13:FE:AB:98:2D:5E:8E:ED:5B:4D:B4:4D
Authority key identifier: DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2
Certificate issuer:       /CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
Certificate serial:       0199FEB52AF5680439D8C1629F8076EDAF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
Manifest number:          02EE
Signing time:             Sun 19 Oct 2025 23:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:49 +0000
Files and hashes:         1: 2v75fKAQutT_We99K2vJB3hgqrI.crl (hash: kPx5Xdtnx7v+Lr1mKj6wQtdxQpz77GESnZxKxIcdElw=)
                          2: oqk5KJmujXiysaX8VXypTA2T7SQ.roa (hash: 4j1HmrhOCzuuehX5YxvRwuekL1PdjN0/UeE0+HMMfsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:2a:f5:68:04:39:d8:c1:62:9f:80:76:ed:af:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafef97ca010bad4ff59ef7d2b6bc9077860aab2
        Validity
            Not Before: Oct 19 23:01:49 2025 GMT
            Not After : Oct 20 23:01:49 2025 GMT
        Subject: CN=f340b77d3544da2113feab982d5e8eed5b4db44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:dc:bf:3e:6e:d3:7d:1a:41:4e:9a:e8:24:8c:
                    44:ca:0b:8f:b5:84:d0:98:59:54:6d:12:da:fd:93:
                    dd:08:df:75:f9:3f:4b:dd:f7:51:84:b3:2c:1c:7e:
                    f3:fc:56:04:64:a7:e4:74:be:31:38:7c:49:bf:ed:
                    33:b3:56:38:1c:95:8f:9e:6a:8d:d0:41:aa:43:a2:
                    97:71:8a:2e:de:29:a0:44:2b:9e:51:c5:2b:00:61:
                    96:ee:60:b0:23:f5:df:b4:37:49:6c:0c:ec:29:f0:
                    de:1a:42:d5:21:2a:2c:5f:69:f8:ed:b3:89:74:e8:
                    83:70:35:64:04:b0:36:6b:3c:96:aa:ee:a6:73:83:
                    83:09:ba:6b:22:4f:3e:19:61:fe:38:18:60:24:b6:
                    a9:4c:3e:0d:20:79:1f:23:b6:54:a6:81:25:c7:13:
                    fd:72:61:3e:5c:8d:84:c4:a1:04:48:25:47:ae:78:
                    b4:f7:5a:44:29:9d:2e:ae:02:2b:67:08:b3:61:44:
                    7f:1f:db:89:5b:b3:7e:96:98:6f:3e:2d:bc:d2:a0:
                    da:36:b2:68:70:c8:82:1d:07:e9:3f:70:f2:92:72:
                    c2:04:32:b1:4d:e5:3e:a9:34:0f:bf:3f:1e:17:68:
                    2d:48:2e:19:17:b5:6b:56:c1:13:2e:08:2a:de:ca:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:B7:7D:35:44:DA:21:13:FE:AB:98:2D:5E:8E:ED:5B:4D:B4:4D
            X509v3 Authority Key Identifier:
                keyid:DA:FE:F9:7C:A0:10:BA:D4:FF:59:EF:7D:2B:6B:C9:07:78:60:AA:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2v75fKAQutT_We99K2vJB3hgqrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2921e6-81c6-4447-9d78-bfa94eb1aa02/1/2v75fKAQutT_We99K2vJB3hgqrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:29:d3:83:e8:be:5c:bc:de:10:88:e7:b3:a2:b9:07:3d:
         6f:6f:93:80:58:bc:1a:92:47:67:02:a7:41:2b:89:4e:4d:ed:
         42:22:41:d1:89:5c:37:94:37:0f:a5:21:f5:57:a5:65:84:0c:
         49:79:29:27:5a:8f:86:ee:d9:68:4a:ba:14:57:af:36:ec:f1:
         8c:0a:2d:3c:39:45:83:87:f6:f4:03:89:a0:67:65:fc:6c:71:
         f1:dc:b0:66:a6:13:49:8c:f7:63:58:96:f5:1c:20:35:f9:58:
         61:4d:f2:f6:44:3e:76:2e:57:ec:a6:89:77:3f:1a:27:85:28:
         33:96:78:d1:87:ff:31:f2:35:21:b0:52:9a:71:1f:fc:0b:38:
         7c:5a:22:e2:3f:80:39:02:e9:ab:3b:d2:1c:79:b4:03:0c:11:
         ac:c6:9c:be:17:b4:4a:11:13:27:dc:10:2e:bd:a9:75:a8:94:
         49:ee:25:df:c9:2a:ba:b0:3d:86:bd:34:01:77:ab:a6:42:84:
         6c:b4:d1:78:0e:be:39:8b:45:79:cc:35:dd:06:7c:11:13:4d:
         2e:f2:aa:d4:77:b6:67:f3:41:5f:ce:43:2c:6b:7f:a0:c0:df:
         14:26:9c:9f:1b:aa:97:35:6d:cd:70:6e:ba:07:fe:3f:b2:ec:
         bf:81:01:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:19 2025 by rpki-client