Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
File:                     LWX13HhD9bdmifNquRag2ZS5l5w.mft (raw, json)
Hash identifier:          GSCOsVBJhSsrjxjWaKeWdMKH8v9OlN8b2m5d9l2u6no=
Subject key identifier:   C9:1A:87:0E:D0:11:90:59:83:C3:5C:F5:36:4D:0D:5F:D0:6B:82:4B
Authority key identifier: 2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C
Certificate issuer:       /CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
Certificate serial:       0199FAD85603E81FBEECF3C95DCC96105410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
Manifest number:          04E6
Signing time:             Sun 19 Oct 2025 05:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:45 +0000
Files and hashes:         1: LWX13HhD9bdmifNquRag2ZS5l5w.crl (hash: 6D/GoejTArbINiLvF9XHfPzokzNsQQj1pnZA2oZjj9g=)
                          2: XEqexKJb2LrlBy7JmazWnnfRrCw.roa (hash: dfO0SxZnhpUVd2vYpZFuzNRZkTkzryjnbxAehzWWsGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:56:03:e8:1f:be:ec:f3:c9:5d:cc:96:10:54:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d65f5dc7843f5b76689f36ab916a0d994b9979c
        Validity
            Not Before: Oct 19 05:01:45 2025 GMT
            Not After : Oct 20 05:01:45 2025 GMT
        Subject: CN=c91a870ed011905983c35cf5364d0d5fd06b824b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8a:b2:db:50:d0:86:da:18:18:de:21:6f:6b:
                    4a:04:57:47:4b:e6:a5:8c:1e:4a:e1:32:bb:d4:d4:
                    97:e1:45:34:8a:62:94:38:a4:f8:57:c2:f8:08:e4:
                    6a:7d:6f:1d:f9:96:40:a8:4a:05:67:7b:03:a7:a0:
                    13:b0:85:d8:d4:50:57:dd:f5:b6:d6:f1:08:b8:e0:
                    b7:05:a4:3a:f2:17:2b:e2:a9:9f:0c:e1:1d:45:2e:
                    52:fe:76:2a:e8:3c:bf:d9:1c:2f:3d:68:aa:86:57:
                    c2:7c:21:11:ed:9d:49:b1:d3:5c:23:52:4a:da:ed:
                    b1:a1:78:e5:79:5e:9e:bc:f7:19:6b:17:fa:fd:4d:
                    d0:7e:a5:1f:56:9d:ba:da:89:c6:ae:87:e7:9a:7f:
                    8e:1e:ec:c8:ef:23:4f:6c:76:90:a8:9b:23:58:8b:
                    eb:48:b2:35:fb:75:fa:2e:36:e0:6d:ba:b6:ae:a3:
                    ce:6e:97:07:33:52:ae:f4:f9:d9:b6:db:0a:f2:47:
                    25:46:a1:51:a7:05:04:5e:12:dc:d3:40:ea:46:96:
                    be:8f:fc:2a:b4:29:f0:66:4b:f5:d1:d1:f4:ef:c3:
                    0e:50:e1:bc:81:7c:65:2a:e0:21:21:b0:75:05:d0:
                    e5:c5:dc:99:99:ac:5f:ce:34:02:0b:06:f0:a9:32:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1A:87:0E:D0:11:90:59:83:C3:5C:F5:36:4D:0D:5F:D0:6B:82:4B
            X509v3 Authority Key Identifier:
                keyid:2D:65:F5:DC:78:43:F5:B7:66:89:F3:6A:B9:16:A0:D9:94:B9:97:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LWX13HhD9bdmifNquRag2ZS5l5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/850af8-48d5-4297-9dbe-8e633e0f079d/1/LWX13HhD9bdmifNquRag2ZS5l5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:10:dc:78:76:76:09:67:ea:81:64:64:37:aa:5d:b5:6f:0e:
         2d:f4:eb:17:29:a5:57:d2:d8:ff:a5:39:0c:48:2b:c2:98:40:
         58:9f:f9:a8:c5:95:67:71:8d:65:fe:d1:28:b2:a5:65:a1:ef:
         51:93:18:42:5d:4d:93:86:cf:4e:e4:1a:7d:39:8c:c2:d5:bd:
         77:ae:85:9e:5a:5d:6d:74:46:25:1b:4e:66:62:a3:1e:b8:66:
         39:7c:23:f1:06:d0:5f:00:19:58:4d:39:04:af:d2:52:4b:7b:
         fe:24:00:92:76:d8:bb:6a:d9:8f:6c:42:46:1f:df:30:aa:5e:
         3f:e9:35:75:ed:4d:a8:96:9b:54:01:50:23:4b:6a:e1:92:bb:
         a5:18:fd:d4:6c:d3:16:30:cb:01:24:3a:da:6e:4c:de:4d:36:
         cc:3d:76:11:7a:38:1f:ee:d3:09:d7:01:b3:f2:af:a3:43:a1:
         f9:40:ad:e5:2c:ec:09:69:e7:5d:ff:9b:41:e6:f3:11:77:e4:
         12:1f:97:93:d6:69:7c:68:22:86:ba:14:8b:20:f0:ab:71:e5:
         10:7c:e0:8d:33:bc:20:92:70:c2:f1:bb:34:ba:2c:23:b6:f9:
         25:4d:0d:0c:9e:23:aa:78:5f:87:10:69:b1:52:6e:56:ab:af:
         19:1a:9e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:16 2025 by rpki-client