Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
File:                     dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft (raw, json)
Hash identifier:          EWpj8BYQ+VsfcmtCWsXpgbB6YAk1z0ErGZccOl3OUzQ=
Subject key identifier:   41:29:D3:95:4C:BE:C9:7D:67:9D:65:C9:6F:E9:9B:9F:73:8B:A1:63
Authority key identifier: 76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14
Certificate issuer:       /CN=769a0ed13591d4b84ca79a8eb577226076651a14
Certificate serial:       0199FBEBD66B31BC2BA707DE74F567A72FAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
Manifest number:          0AF0
Signing time:             Sun 19 Oct 2025 10:02:41 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:41 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:41 +0000
Files and hashes:         1: dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl (hash: M2B8I94LWr6Cfg+EciySx8YC/NnwZo48iVGbHpxTq7c=)
                          2: r2xenfWR41SW-pcJkK2n6k9oW9c.roa (hash: 9h5yss6Wot3H0ZXysamwxUCIRFlANswYmfwPee5G6HI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:d6:6b:31:bc:2b:a7:07:de:74:f5:67:a7:2f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769a0ed13591d4b84ca79a8eb577226076651a14
        Validity
            Not Before: Oct 19 10:02:41 2025 GMT
            Not After : Oct 20 10:02:41 2025 GMT
        Subject: CN=4129d3954cbec97d679d65c96fe99b9f738ba163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:15:75:34:5a:9a:1c:2b:f7:55:1f:10:9e:
                    6c:d2:4b:50:6f:c3:08:54:9c:a0:8a:26:7e:41:27:
                    b3:68:49:bc:30:d5:83:3d:f5:f4:68:cf:b1:3c:a6:
                    8c:a8:19:10:a7:fa:e1:08:59:21:8d:db:08:a2:d0:
                    2f:04:8e:ad:c2:6d:18:e1:2b:f0:81:d2:52:5b:f1:
                    67:77:b8:a4:f4:26:16:cb:26:9f:73:14:ea:b8:3f:
                    37:57:09:ac:3d:3a:dd:f5:0b:b2:54:4e:b2:41:42:
                    ae:ee:28:29:1d:e7:87:41:23:43:2f:e8:9b:8f:ca:
                    4f:91:eb:c6:be:f3:2e:51:b3:27:88:06:7f:ac:65:
                    1e:08:1d:50:4e:4e:c4:2e:0e:67:13:fc:c0:82:e9:
                    0d:e7:cc:91:50:30:45:0a:53:62:9c:83:35:91:a2:
                    f3:a8:4d:ee:6c:0e:07:04:56:8a:3f:97:26:bb:5c:
                    17:d2:26:4d:4a:b0:a4:63:de:0f:7a:36:30:6b:e5:
                    9d:e8:5d:f8:96:d6:86:0f:61:51:67:ae:dc:52:19:
                    d8:e6:aa:01:cd:52:bf:a0:bc:61:ea:f2:26:0e:09:
                    71:f7:42:eb:46:94:6c:7a:6b:8d:31:0c:e9:5e:31:
                    56:2a:7e:69:15:c4:c6:cd:f5:84:ff:0e:87:86:8a:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:29:D3:95:4C:BE:C9:7D:67:9D:65:C9:6F:E9:9B:9F:73:8B:A1:63
            X509v3 Authority Key Identifier:
                keyid:76:9A:0E:D1:35:91:D4:B8:4C:A7:9A:8E:B5:77:22:60:76:65:1A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpoO0TWR1LhMp5qOtXciYHZlGhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/68c008-69d3-436f-ad33-2dbe785422f8/1/dpoO0TWR1LhMp5qOtXciYHZlGhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d0:5f:78:64:76:f9:bb:71:ec:69:fe:9f:d8:41:12:4b:a2:
         8a:d1:84:4f:0d:7c:9a:34:9f:50:e9:57:48:e4:94:91:12:c7:
         01:45:a5:f1:f7:95:15:36:54:82:bb:d4:1b:db:09:55:71:e4:
         c9:26:81:21:68:e9:6c:49:e5:8f:db:80:a9:cb:2f:75:21:5c:
         63:b1:f9:8b:c6:19:ca:08:d3:0b:ad:7b:a4:cd:86:19:dc:36:
         53:4e:35:0b:2c:2a:fe:b1:f8:32:9f:cf:65:67:20:b6:94:dc:
         63:26:28:84:ce:d4:bb:81:a1:9d:60:b9:83:53:66:6e:63:d0:
         a9:01:45:9e:df:e1:b7:f6:93:d2:0b:d5:e3:a1:e0:c9:a2:cc:
         6d:65:f6:e4:4b:3b:8f:ba:09:f9:26:c0:bf:d3:3b:1b:43:e6:
         62:e5:a9:2b:4b:18:2d:91:a1:6d:db:76:67:4c:90:92:fa:a3:
         55:01:2a:40:ae:23:a0:dc:07:6e:66:b6:69:6f:24:44:91:d1:
         c4:b1:62:3c:e2:fd:03:f8:cd:03:be:db:0f:c6:69:af:09:7e:
         6c:71:13:20:b1:fd:ed:ed:2b:71:e1:2a:bd:00:32:99:34:1a:
         cc:86:4b:88:86:21:09:93:f4:b8:9b:29:2c:a5:de:96:6e:bc:
         9f:ae:03:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:19 2025 by rpki-client