Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
File:                     AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft (raw, json)
Hash identifier:          gPvaYMaNfTrZPTj/NODD+I4d/Tt3Pz/tyAf+ZYvWpGI=
Subject key identifier:   D0:EC:29:60:68:45:5F:06:85:C1:AE:C0:12:8A:62:41:CA:82:D4:9C
Authority key identifier: 01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF
Certificate issuer:       /CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
Certificate serial:       0199FAD7D15A4C9FA2A285908F6F74ED0DEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
Manifest number:          0902
Signing time:             Sun 19 Oct 2025 05:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:11 +0000
Files and hashes:         1: AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl (hash: B+91gkYRpSWvTSYwDa8lDNsPhoGBGK7HNtzW/fbGqTk=)
                          2: qZ_vGww3miBwhmiPJQ4AD0HWpSo.roa (hash: /yOCjsEAUpbowyN4y+pICuqKMk+5ErunDXEzQRSdLQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:d1:5a:4c:9f:a2:a2:85:90:8f:6f:74:ed:0d:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01a0d5868c7a41d6fe9dcbcf93805ac42cbdbdbf
        Validity
            Not Before: Oct 19 05:01:11 2025 GMT
            Not After : Oct 20 05:01:11 2025 GMT
        Subject: CN=d0ec296068455f0685c1aec0128a6241ca82d49c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:f0:6c:9f:1b:8a:49:cb:2f:b9:42:54:99:
                    ab:11:0e:a7:90:f6:43:e7:30:2c:9c:41:9b:9b:0d:
                    2c:37:44:61:59:f7:2d:2e:9d:da:37:8c:3e:90:b0:
                    59:a3:0f:8c:c6:84:92:b3:21:78:cb:26:be:43:34:
                    50:bb:77:c9:48:88:a3:c2:a8:2f:bc:d9:17:64:3a:
                    be:42:dd:14:0c:e7:0e:a1:0a:80:1c:6e:91:7b:30:
                    12:d0:13:05:b9:be:60:d4:60:75:4b:e0:fc:ed:70:
                    7d:31:8b:80:60:02:85:70:b1:24:4a:f3:c7:e8:66:
                    14:af:ea:09:bb:d1:ae:2b:29:ff:d7:e7:f6:ab:96:
                    9d:1f:a2:e8:ba:23:20:b6:5d:3b:06:b7:09:18:9d:
                    b1:e1:ae:3a:c2:b8:3f:14:d0:3b:7c:5c:87:ab:8d:
                    48:1d:f0:21:e4:67:d4:07:a8:e4:4b:c9:9e:c1:7a:
                    86:39:f8:68:f2:25:c3:c3:98:fd:30:76:14:3a:09:
                    83:98:6a:52:f5:3b:86:83:2a:9d:85:ae:a5:e1:7d:
                    a5:b7:8a:4a:c2:ec:e4:0e:1a:bb:bc:f5:8b:1f:e2:
                    87:62:53:b9:5b:ac:89:03:65:9a:10:6f:eb:96:d8:
                    cd:0e:72:5a:6f:7d:4e:70:6e:2d:24:10:79:df:03:
                    bb:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EC:29:60:68:45:5F:06:85:C1:AE:C0:12:8A:62:41:CA:82:D4:9C
            X509v3 Authority Key Identifier:
                keyid:01:A0:D5:86:8C:7A:41:D6:FE:9D:CB:CF:93:80:5A:C4:2C:BD:BD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AaDVhox6Qdb-ncvPk4BaxCy9vb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fcdbee-db9d-46b8-9e03-146e0b178085/1/AaDVhox6Qdb-ncvPk4BaxCy9vb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:05:47:82:fd:e2:36:65:40:51:e9:12:8a:9e:11:1d:dc:9a:
         5c:b9:3c:91:35:b2:44:da:6f:a2:9e:0f:be:87:3f:e1:47:20:
         d3:85:aa:d1:c9:5f:b3:56:77:cc:1c:2e:aa:fc:54:24:54:7b:
         7b:9a:a3:c8:4b:0b:62:e9:6c:cd:0d:13:f4:8f:be:23:76:98:
         59:d0:0c:57:f9:90:a8:1e:76:f6:a8:e7:32:99:dd:7a:96:45:
         93:e3:a4:82:4d:90:c5:88:23:0a:cb:0f:e5:5d:cd:64:b0:92:
         43:2a:34:8b:19:ac:2c:fc:2a:6a:b8:1e:3e:d0:7b:6d:1c:03:
         82:0d:20:2d:20:ca:8f:20:5a:db:c6:c9:4b:a4:5e:cd:56:af:
         d9:a6:74:db:8a:2b:c9:98:70:0f:76:63:df:76:aa:b4:c9:6b:
         44:7b:c4:05:ed:15:f7:bc:7e:7c:6e:9f:9b:45:c9:5e:51:c1:
         b8:5f:df:fb:e6:63:03:63:6c:f6:1b:6c:f5:fd:9b:1c:a0:f6:
         f4:9e:6f:a7:cb:59:6f:24:43:54:50:f7:f4:05:25:c5:0b:3e:
         52:22:4e:82:50:d1:d7:be:01:03:70:e5:fd:1f:1b:b9:32:72:
         5a:f6:6b:26:18:a3:db:16:4f:90:ca:ec:3e:eb:bd:01:80:b9:
         c1:fb:48:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:32 2025 by rpki-client