Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
File:                     3hLrnHXTWdJRN7XvThdvXutsQ0I.mft (raw, json)
Hash identifier:          gyKF8QphcvzEFmevRqCx4OMkCPiDIo3n/N8EkqWhow4=
Subject key identifier:   DB:EE:48:9B:25:5F:68:DF:1E:68:61:8B:5C:8A:CF:4E:AF:02:98:20
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Certificate issuer:       /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial:       0199FCFDA9D9EE94210183A4BAB0C0BFED75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
Manifest number:          0105
Signing time:             Sun 19 Oct 2025 15:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:46 +0000
Files and hashes:         1: 3hLrnHXTWdJRN7XvThdvXutsQ0I.crl (hash: mPryCi3cN2K4amBjVSRCpgCPH9K77xWUZhYf8OlJbyA=)
                          2: 6_in1dGeOa5EieWvSzhrm2eve2Y.roa (hash: zCBFRN4Me6WT3LbN5ei+Xk4SQ36dgusZu9hKSxKm+nE=)
                          3: NUqvibQu6dWh6Eo5e0WkTVgiAOs.roa (hash: rpCYWQAUZby9hvUsdkbZ1E+JsPoOrGo+9DJrYWN/+/Y=)
                          4: QAjbbxJkwWP6mtvrf816lbgaTpE.roa (hash: BE3I5u9iuuHjxCqTUslvbILWdwNCS8MnbabYgEyaLMg=)
                          5: tWgxekly7bQX70uzUYCzzPGJXs0.roa (hash: 6/COonMRY4Vn23zty22GWVjAcqQp6yXy3HHv7ZIXe5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:a9:d9:ee:94:21:01:83:a4:ba:b0:c0:bf:ed:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
        Validity
            Not Before: Oct 19 15:01:46 2025 GMT
            Not After : Oct 20 15:01:46 2025 GMT
        Subject: CN=dbee489b255f68df1e68618b5c8acf4eaf029820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1c:2e:67:e1:f9:b1:18:cc:97:5e:8e:d7:2c:
                    4e:11:6d:5d:07:cf:8b:2e:e4:95:f4:a4:43:39:c3:
                    ae:b6:79:1f:62:79:dd:b7:6d:64:30:ad:2e:ac:0f:
                    7c:9b:81:3d:2f:5e:22:87:6d:37:80:5c:a1:03:8f:
                    56:18:fe:f6:d6:1f:c7:62:06:3e:05:ca:b8:3a:f5:
                    df:37:22:06:fc:78:43:b7:1f:9f:1f:8f:20:f8:04:
                    12:48:2e:d5:e4:63:22:3f:60:ec:fd:00:09:45:48:
                    cd:d9:5f:0f:a9:1d:7b:94:fc:c9:3b:1f:fe:ea:0d:
                    45:03:eb:94:ca:46:53:0a:01:16:47:00:3e:15:04:
                    dc:15:50:69:d9:19:25:33:a9:b1:88:af:75:86:91:
                    f9:a8:93:a1:6e:af:de:60:5c:1e:10:91:d8:00:de:
                    84:00:01:d0:ef:7d:e6:a7:bb:aa:7e:2a:22:10:da:
                    a3:59:61:84:fd:b6:c2:db:79:36:d8:c2:52:ce:8e:
                    65:2e:32:a7:fd:44:09:77:95:e9:a2:7b:00:91:76:
                    43:43:5d:f8:14:8e:e8:a0:e6:81:19:c0:a9:a2:8a:
                    13:59:83:e3:73:84:3b:00:c8:77:58:63:0b:1f:1b:
                    c2:bc:bf:29:bb:d1:9e:c6:42:be:af:07:fc:cd:52:
                    ac:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:48:9B:25:5F:68:DF:1E:68:61:8B:5C:8A:CF:4E:AF:02:98:20
            X509v3 Authority Key Identifier:
                keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ce:c5:49:ff:59:d4:aa:c1:80:1d:49:94:04:16:bb:54:d7:
         30:9a:10:be:ad:de:02:28:f8:2c:2e:1c:f9:bf:c9:a2:85:47:
         e5:f7:20:ce:79:52:ed:57:e8:1c:fa:d6:74:6d:09:93:16:74:
         99:92:de:b3:b8:94:93:f0:22:3b:13:b1:92:c3:8c:08:32:16:
         00:d7:e9:f6:d2:6a:88:e1:8e:c3:01:47:27:1e:13:86:06:dd:
         0b:01:dc:46:6a:1c:be:b4:46:37:14:37:f1:65:b9:55:c6:41:
         18:31:41:b6:b3:ab:37:b6:f5:0f:76:55:cf:da:90:71:03:9c:
         0c:fe:20:09:2b:1b:bf:3b:b0:30:6e:77:55:74:67:32:47:50:
         ac:45:1b:ec:30:18:4d:e0:7d:95:3e:2e:af:f1:1a:4f:47:12:
         bc:a0:6d:7a:6d:12:b4:01:5e:a0:79:c0:3e:d3:31:80:93:84:
         03:99:73:74:45:a4:31:e3:71:0e:90:14:1e:fa:06:64:80:a3:
         f6:15:f4:95:19:a8:84:32:72:de:00:23:9e:6a:7e:02:e4:9e:
         12:07:9d:e5:ed:0a:f6:d4:c2:78:7e:71:1f:9b:aa:a7:0f:db:
         6d:56:db:e0:f0:9a:15:24:7f:20:cb:b1:02:84:0c:6f:d1:5e:
         93:ec:9e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:40 2025 by rpki-client