Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File:                     D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier:          Q6wxfLF+mESaopztuNeqGJOYPf08VBvruKt3cnZAUaM=
Subject key identifier:   89:C3:1A:0D:A2:BC:C3:2D:6F:16:59:26:DB:01:E3:7E:07:54:9D:69
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer:       /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial:       0199FBEBE2DF061F696D8C17F20C9758B653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number:          0983
Signing time:             Sun 19 Oct 2025 10:02:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:44 +0000
Files and hashes:         1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: ah/46s38qvtcSj387/PjscZm0F2UeGuG7IpIKoJl1ks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e2:df:06:1f:69:6d:8c:17:f2:0c:97:58:b6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
        Validity
            Not Before: Oct 19 10:02:44 2025 GMT
            Not After : Oct 20 10:02:44 2025 GMT
        Subject: CN=89c31a0da2bcc32d6f165926db01e37e07549d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:64:33:4f:65:2c:6a:35:10:1c:af:eb:fa:
                    fd:c2:8c:46:3d:e2:6b:22:4d:42:5b:95:fe:a0:4c:
                    a8:75:fa:cc:27:42:c9:89:d6:cb:4d:4a:f9:55:c6:
                    c1:98:42:90:28:d8:28:7f:7f:85:87:d2:83:90:32:
                    2c:74:e3:fd:39:d9:5b:c5:dc:e7:42:e0:e4:ea:9a:
                    37:4c:64:fb:1a:de:93:52:19:83:b0:73:4a:17:66:
                    fa:a6:86:c8:de:6d:43:e8:f6:91:4f:e8:94:b6:20:
                    c1:f0:7e:19:76:a5:2a:46:82:a7:f6:0e:89:59:c7:
                    de:b3:85:ab:ce:a6:9d:d2:8f:05:35:90:78:a6:0b:
                    81:7d:ee:85:93:fa:07:f3:8c:c2:8f:3b:68:4b:44:
                    f4:30:a6:3b:81:f7:76:0f:66:b1:25:d3:97:de:ce:
                    7c:bd:94:41:72:e7:88:a3:d6:68:1b:3c:82:d1:ab:
                    44:d0:c7:ed:b3:d9:84:d4:9a:95:e4:94:28:53:17:
                    3b:34:83:d6:0c:0a:e0:34:e2:60:dc:6e:cc:62:bd:
                    80:29:0d:fe:98:70:73:d2:50:fe:9d:1f:81:30:bd:
                    31:80:e0:d1:ad:1e:d5:8c:68:bb:8d:4f:70:87:00:
                    8e:42:bb:7b:ab:c2:5f:40:9f:42:bf:50:b2:07:74:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C3:1A:0D:A2:BC:C3:2D:6F:16:59:26:DB:01:E3:7E:07:54:9D:69
            X509v3 Authority Key Identifier:
                keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:30:df:2c:6c:b5:8f:24:f7:12:8f:81:83:24:b5:68:1f:8c:
         8b:18:c4:4d:9e:cf:d9:aa:96:74:8c:84:ac:da:1c:1a:bb:0a:
         c6:a1:4e:ba:e6:0c:d0:20:fc:1e:9d:e0:1c:28:ed:8b:77:22:
         75:f9:c3:be:e1:01:ec:a2:e7:28:60:e8:57:e7:a6:24:8f:e5:
         e1:84:40:6b:4e:ec:31:0c:09:43:6e:0a:d2:0d:6f:39:72:b3:
         3f:b7:ae:a0:34:fe:88:c6:2a:2c:57:33:b4:4a:59:f1:21:d8:
         98:dc:52:c8:86:d2:40:46:1c:c4:ad:45:55:c1:08:fb:75:b1:
         65:4e:07:ef:2c:1a:7f:1f:f8:f4:f6:0b:0f:e0:86:dd:42:e2:
         70:6c:eb:14:ce:1f:ca:da:e4:6b:19:fb:f9:77:3c:39:0a:a7:
         c3:9f:2f:a1:3b:c2:e7:9c:d7:a8:23:ea:0a:40:cf:00:f3:f8:
         ba:0a:a5:7b:34:46:3b:86:7e:cc:b6:a8:99:01:5d:73:a4:87:
         2d:20:6f:fd:c5:d6:93:7c:da:b3:71:b1:48:d4:fb:25:2d:c8:
         69:71:f8:a2:29:66:17:98:ee:e0:01:11:df:a4:99:45:78:1d:
         c6:4a:fa:80:43:e5:1f:c7:28:c6:e4:b5:70:fa:bf:62:04:7b:
         77:17:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:25 2025 by rpki-client