Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File:                     0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier:          q8eV2Voft9vEOhtQA5FVXWlTXEEV0d9CWwDuyTmu+oY=
Subject key identifier:   F8:D0:5A:4E:82:A8:28:D5:30:1B:4A:AA:DF:86:CD:29:C6:F5:91:96
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer:       /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial:       0199FBEB6B380AAD8C2FF6C5413C541652D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number:          11CC
Signing time:             Sun 19 Oct 2025 10:02:13 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:13 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:13 +0000
Files and hashes:         1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: P/xHt9yYE2yfI2qiQtKG5r1t33UfykjBpMS+DmvG1dg=)
                          2: oYfn-XKrvi8qPxxQpXw6G0ZQv_I.roa (hash: XlHaPnUqiYpT0LQiKW0OJf8RSsswldbENWW7FfjNUtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:6b:38:0a:ad:8c:2f:f6:c5:41:3c:54:16:52:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
        Validity
            Not Before: Oct 19 10:02:13 2025 GMT
            Not After : Oct 20 10:02:13 2025 GMT
        Subject: CN=f8d05a4e82a828d5301b4aaadf86cd29c6f59196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:ab:a3:66:f8:f3:64:a0:d4:da:44:b5:ca:
                    11:da:aa:d3:69:a5:94:b2:37:ab:e3:d6:00:43:ff:
                    a8:85:d2:67:1c:9a:f9:b4:fa:55:9b:35:67:7e:85:
                    9a:0d:51:eb:a2:cd:44:d6:07:39:26:1a:ee:9e:a2:
                    a0:3f:4a:5e:a4:4e:9c:9a:56:af:22:e7:59:5b:78:
                    5f:7b:ea:23:9f:7b:3d:86:d8:fc:8c:f0:f7:63:c3:
                    44:d9:5c:f4:5f:0f:01:30:d3:65:06:09:ba:b7:ab:
                    56:76:b6:58:61:cd:c3:b2:d7:2d:d8:65:e0:cf:7f:
                    f4:1c:80:3b:ce:0d:f8:88:eb:e6:57:63:94:d7:f5:
                    c3:98:1b:57:f6:23:21:61:b6:e8:d0:8b:2d:8b:23:
                    41:15:1a:a0:48:b6:37:dd:39:0b:ec:9c:f9:b8:fd:
                    f3:d7:e7:c0:cc:2d:be:69:65:6c:e4:f6:18:86:52:
                    c3:15:6f:7b:62:f3:59:40:dd:19:6e:87:13:3c:a6:
                    4a:8b:40:6b:c8:cd:80:c1:d4:92:7d:c5:98:76:cc:
                    bf:cc:d1:4d:2a:fd:01:e5:d7:02:05:2d:58:69:53:
                    b8:a2:13:03:93:8e:11:15:c4:da:66:cd:7c:a4:bd:
                    b6:bc:31:af:47:77:fd:cb:af:5a:a4:6f:a3:54:65:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:5A:4E:82:A8:28:D5:30:1B:4A:AA:DF:86:CD:29:C6:F5:91:96
            X509v3 Authority Key Identifier:
                keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:6f:ec:bc:05:53:96:3f:9d:1e:eb:10:b5:92:70:e5:da:
         e1:fb:fd:72:b5:6b:4c:4f:0b:50:48:16:fa:43:8d:37:f7:a3:
         48:17:ff:58:60:df:eb:1b:d4:9f:53:6b:03:95:ae:e3:ee:29:
         2c:37:69:75:01:81:56:a5:bf:81:92:27:4f:1f:5f:46:4d:d9:
         97:83:c5:9b:e4:f9:19:4a:af:66:ed:18:4a:29:ef:bb:0e:48:
         8d:04:fc:7e:d4:90:91:d7:0f:a5:e3:1f:32:96:99:f5:a8:ce:
         e6:24:3e:7c:19:47:94:12:97:09:b3:27:aa:7a:8c:ea:b8:26:
         2f:20:a3:48:9c:60:92:b8:e4:4f:ba:05:b6:fb:31:82:18:b4:
         d6:b6:99:67:24:a2:88:dd:59:87:1c:63:6c:76:78:34:36:54:
         57:55:4a:7c:be:64:6b:40:6d:3a:7b:b7:b6:08:84:c8:04:5f:
         2a:4f:98:27:be:b7:63:bf:9a:49:78:8f:fa:f8:3f:f7:69:46:
         06:2b:c8:22:3c:c1:54:92:c2:62:d9:67:9a:84:0b:37:3e:8f:
         be:7e:17:01:3e:b8:4a:c1:7e:21:1c:e7:e4:41:47:e6:7a:af:
         2e:60:75:6d:47:ed:1e:80:ed:94:d5:c7:a8:3a:38:a7:0d:18:
         b6:da:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:50 2025 by rpki-client