Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File:                     g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier:          CWo/BSyaDRGZTfF3ErkwsLamyzoq0f6l573snngsGBk=
Subject key identifier:   E1:66:25:F9:B2:86:BF:DC:30:0B:90:CA:05:7B:1E:8E:C2:D0:7F:CE
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer:       /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial:       0199FBEB9DB51CAE6199B5C2666BF18B2284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number:          07F3
Signing time:             Sun 19 Oct 2025 10:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:26 +0000
Files and hashes:         1: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: GTlfY419u3Fp5DNwW8O3puK/rlYFQXN0o7MmhQcF+kA=)
                          2: uQEihKiuIl1rl-qFPqFxAyhOwfs.roa (hash: 741H2NNyRCld+680I0F2CoeAI6uDzCv+B0JzFOkmvnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9d:b5:1c:ae:61:99:b5:c2:66:6b:f1:8b:22:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
        Validity
            Not Before: Oct 19 10:02:26 2025 GMT
            Not After : Oct 20 10:02:26 2025 GMT
        Subject: CN=e16625f9b286bfdc300b90ca057b1e8ec2d07fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e7:15:99:a4:2a:19:59:e3:23:fb:bd:b5:ed:
                    1f:72:72:1c:04:da:00:ee:85:34:49:94:4f:60:0c:
                    cd:1b:05:6d:54:60:c6:b3:3d:1a:4c:31:e7:6f:ce:
                    8c:cb:3a:a1:6b:94:a5:2c:dc:d6:0d:3f:77:ee:ea:
                    00:15:04:6a:95:fe:26:96:0b:3c:b1:1f:5f:12:db:
                    fc:7b:97:42:41:80:b0:f4:89:83:de:41:a5:32:36:
                    23:c5:43:82:76:fe:5c:8b:a4:0b:b0:7b:3c:13:04:
                    89:25:4d:59:79:8d:1b:62:88:36:65:55:87:32:63:
                    d0:73:d1:38:14:9a:6e:ce:14:59:8e:10:40:5f:71:
                    e1:dd:82:a8:c4:95:01:db:7f:b3:5b:d8:c5:f2:50:
                    2b:fb:78:79:9c:60:2f:2a:e3:24:00:9e:9e:fe:35:
                    34:02:8d:c5:f5:b9:c9:1f:03:6b:92:a0:e5:d5:b1:
                    44:95:a3:69:dc:b7:e2:52:a1:1c:fd:ad:e0:24:de:
                    f1:e3:9c:7b:04:ff:34:c2:f6:a1:f6:31:d9:e2:60:
                    0d:f9:dd:4c:6d:46:51:94:b9:19:e0:8b:e3:30:4f:
                    e8:6e:28:c8:da:20:db:4d:dd:e3:a0:15:0c:bb:a4:
                    40:da:b6:3a:68:56:9c:7d:0e:88:bc:7a:b8:fb:72:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:66:25:F9:B2:86:BF:DC:30:0B:90:CA:05:7B:1E:8E:C2:D0:7F:CE
            X509v3 Authority Key Identifier:
                keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:ac:8a:02:e7:ea:4d:90:97:9f:d3:fb:7a:ba:8c:34:34:
         9f:be:21:1e:57:5f:52:b1:1c:83:f7:c2:40:28:13:79:2a:fe:
         8e:e8:04:76:be:cf:07:77:ad:75:ef:b9:c5:95:0f:d9:5b:87:
         18:d4:3a:18:78:7a:e5:e3:cd:e4:ed:0b:13:87:56:23:55:d2:
         66:30:56:e8:e6:58:6c:1a:45:f8:0b:f5:3a:87:f8:b8:f1:e3:
         eb:be:3f:88:5f:a9:5c:39:f9:30:ec:3a:d3:68:6c:60:d0:16:
         45:dd:e9:c9:af:16:5c:f9:be:ec:f5:da:92:1e:59:9d:13:f5:
         d0:a2:60:0e:3f:d3:b4:86:44:45:b9:1f:4f:8c:ab:87:3e:b9:
         f1:7c:a8:a0:dd:36:3f:69:90:6b:63:b7:00:73:71:67:27:b9:
         61:e4:24:49:9b:ea:52:37:bd:1b:03:e1:e8:75:4f:14:2c:5e:
         dc:14:d4:3d:43:cc:b6:1c:fd:29:63:32:bc:df:81:9b:67:a1:
         07:8d:94:67:ba:97:2c:9c:7e:a8:fc:54:61:fc:29:e7:08:05:
         cd:11:37:28:39:4b:a1:ae:71:3d:a0:19:16:c0:61:22:1f:12:
         8c:0a:5d:e2:9d:a0:87:e6:64:a9:3f:34:9f:50:d8:08:01:67:
         88:bc:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:55 2025 by rpki-client