Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
File:                     dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json)
Hash identifier:          wTh6bTxE/+aFT2q3eAjr4l70z6iOaDJrUDei4VHy7h0=
Subject key identifier:   5F:27:F4:2D:8F:B7:65:E6:93:D1:22:0A:94:40:EB:7B:B3:98:BC:F1
Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2
Certificate issuer:       /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
Certificate serial:       0199FAD7C26D423E5A4B9699AFF92693E26F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
Manifest number:          11C1
Signing time:             Sun 19 Oct 2025 05:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:07 +0000
Files and hashes:         1: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: NalRv6rRxZLktaA0az136MLyuc0zg1cKI4F5x3eBwhA=)
                          2: xzA5d-E1vgeb4mwlvmzNBazR01w.roa (hash: ajfP28ApDq4Q5y/sbVJlhsT7w2HrFwDNTtJP+3l1w9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:c2:6d:42:3e:5a:4b:96:99:af:f9:26:93:e2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2
        Validity
            Not Before: Oct 19 05:01:07 2025 GMT
            Not After : Oct 20 05:01:07 2025 GMT
        Subject: CN=5f27f42d8fb765e693d1220a9440eb7bb398bcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d5:e7:49:64:f0:de:a7:03:c6:f6:4e:86:bd:
                    e1:94:53:3e:09:58:36:ac:60:ec:fc:ee:b4:86:3b:
                    70:6d:e7:d0:b7:fc:95:a0:be:92:a4:92:74:33:47:
                    24:24:cd:e9:ca:f7:8e:40:42:82:30:52:f7:24:81:
                    89:f0:33:8b:55:e0:9c:8b:d7:7e:77:96:92:69:10:
                    80:97:f2:44:95:25:6a:ff:f0:c7:23:10:2d:58:73:
                    96:2d:fb:6f:27:aa:33:da:a0:44:ae:19:c3:ab:72:
                    58:5c:d4:06:fb:aa:c2:f1:55:6a:d4:c1:6e:ea:0d:
                    f7:15:e0:0c:a8:b5:2c:d5:d3:70:30:70:86:ba:a2:
                    6c:5f:57:e5:6e:7b:b2:54:6b:95:73:e8:dd:f1:29:
                    4c:e1:58:58:a9:d1:60:d4:bb:b6:51:3e:42:34:21:
                    1f:95:a6:92:e9:79:88:fe:a2:38:4c:2c:21:4b:b8:
                    41:e0:f1:ba:3b:b0:de:1b:89:fe:2d:2c:09:60:9c:
                    cc:08:30:df:24:c5:93:ef:26:a2:93:f6:b6:f2:82:
                    1b:d6:17:e4:37:26:f2:21:8c:42:98:87:43:a0:a9:
                    41:d0:f4:6d:68:cd:fa:b5:45:38:bb:46:fc:b8:01:
                    64:93:24:ab:5e:88:44:23:63:e1:ec:98:ea:d7:5e:
                    63:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:F4:2D:8F:B7:65:E6:93:D1:22:0A:94:40:EB:7B:B3:98:BC:F1
            X509v3 Authority Key Identifier:
                keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:21:38:db:ea:07:6e:f3:0f:6b:5b:c4:ad:f5:ab:75:eb:29:
         05:9b:07:60:ee:04:2a:2b:47:88:b5:24:88:d7:10:20:98:5b:
         2c:4c:88:73:bf:0d:2c:71:0c:16:f1:d4:48:1c:d9:81:c5:3b:
         99:ab:51:c2:a3:72:00:f1:3d:99:d1:21:19:d4:f0:bf:df:fe:
         5e:08:8a:48:79:6d:bb:b0:f8:f6:bf:71:c6:bd:55:c8:56:bb:
         c1:11:2f:65:aa:2f:a4:b3:fe:7f:02:05:f1:b5:c0:38:20:b3:
         57:2c:90:11:0a:38:c5:99:28:42:28:76:40:b0:d5:1a:eb:63:
         e5:4d:61:c1:8e:b6:50:ca:54:64:4e:cf:c0:92:f6:cf:fd:28:
         05:32:88:b6:df:62:d9:fd:6c:ca:ca:8d:51:b5:83:31:18:23:
         00:c8:0f:7e:fe:87:14:38:d5:00:a1:d2:bd:99:8f:01:a7:6b:
         c3:c0:86:61:ad:74:cf:7e:ab:d5:90:72:f3:1b:0a:50:70:18:
         2c:d0:d9:1b:12:b6:57:55:33:54:72:04:4b:40:41:57:33:16:
         3b:13:55:bf:23:6d:f2:43:5b:80:b2:16:ab:42:2b:ee:ce:c3:
         c9:c8:d2:58:e3:5b:5d:b8:fb:cd:53:28:11:0c:4f:e6:b7:67:
         ba:e3:8a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:50 2025 by rpki-client