Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          MZQdMMomn5MmdsPTvVuIeTcEA+3dQWcYgGYRyJIt7Yw=
Subject key identifier:   06:AE:84:83:CE:48:3E:D1:20:FF:E3:4E:6E:FE:DF:41:AC:2D:17:3E
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       019A01481DE2F86EDDBC552565E5E6A7A8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0B7D
Signing time:             Mon 20 Oct 2025 11:01:34 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:34 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:34 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: U4jRwU27mCWjsfGFtcfeef2qCHO34syCX/vWvMe3f6M=)
                          2: NY6GkITWKlUtVSGSEXVFnWklUFA.roa (hash: bc90pfjZ3z6bn5Sd1cSbU6mDm4LudyLIA08FEeaNBvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:48:1d:e2:f8:6e:dd:bc:55:25:65:e5:e6:a7:a8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Oct 20 11:01:34 2025 GMT
            Not After : Oct 21 11:01:34 2025 GMT
        Subject: CN=06ae8483ce483ed120ffe34e6efedf41ac2d173e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:5c:9b:fd:55:e0:e2:f5:1c:47:a0:fc:20:
                    5e:d9:00:7e:cb:26:99:bd:39:d2:e9:b8:66:80:cb:
                    5b:01:f3:af:d6:d9:c0:ac:d5:d6:b9:c4:d7:e8:a0:
                    37:c0:ac:1c:82:04:25:29:ca:59:7e:e5:68:7a:82:
                    d4:03:87:df:be:c8:c3:4f:1b:62:c5:f6:1a:ed:12:
                    7b:4f:e0:f0:23:0e:18:18:40:df:c8:a0:57:ad:8c:
                    ea:a6:d2:d2:cb:46:a1:32:99:f4:b4:34:49:84:bd:
                    58:c4:4f:42:6c:c7:be:9d:ce:cd:88:18:2d:fc:21:
                    a2:93:22:50:5a:fd:d3:f6:67:b5:d4:3f:85:11:0c:
                    c3:36:24:ea:23:4a:e3:be:25:f6:37:ae:45:5a:0f:
                    a8:27:a9:ad:ff:31:e4:7a:3a:22:d4:b5:c7:f7:1b:
                    d8:f9:5e:16:61:11:80:75:b4:64:76:09:a0:7e:11:
                    a6:24:5a:dd:07:71:7d:48:ed:df:c9:d5:9c:f2:90:
                    c2:28:f6:eb:26:0c:e2:b0:3f:56:2d:fc:18:65:e3:
                    fe:16:6a:bc:41:e3:47:7d:89:7a:4e:52:0e:fa:58:
                    07:1b:75:f8:59:9d:86:17:f6:78:1d:78:a0:64:e8:
                    ee:e7:4a:33:2b:11:ae:27:87:b7:b2:0d:fe:bd:44:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AE:84:83:CE:48:3E:D1:20:FF:E3:4E:6E:FE:DF:41:AC:2D:17:3E
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:30:3b:1e:36:be:8c:9b:96:3d:15:86:7b:91:18:b5:b2:84:
         e0:a5:5c:03:52:8b:ba:c0:32:63:b1:74:54:df:3f:46:72:e2:
         5e:3a:06:f7:29:b9:cd:f2:45:1d:50:89:e8:d8:e7:29:aa:a0:
         13:e4:9f:83:4a:d3:c3:9a:7e:e9:32:9a:67:15:b0:a6:b0:c8:
         20:37:31:4d:01:8f:62:07:e5:3f:55:4f:55:20:be:c8:4e:68:
         0d:49:1e:e4:16:6a:2a:1d:d0:df:da:32:e7:cc:fb:dd:48:df:
         d1:ed:66:d1:88:58:57:de:ac:5c:23:e4:b4:e5:51:06:5a:e6:
         35:74:fb:43:43:32:5e:f2:b1:69:bc:f8:5a:6c:47:e3:2e:74:
         17:4b:c4:00:e1:88:b6:9a:75:16:23:a5:94:7c:4a:56:e3:56:
         b8:1d:ee:46:fc:a1:29:cb:43:75:3b:e7:8e:88:ed:bd:e8:17:
         6f:cb:ed:5e:0a:e5:4f:e6:61:31:0d:5c:f0:0a:ab:3d:89:6f:
         0d:1a:fa:29:56:f1:20:fc:8e:17:09:23:b9:a0:6d:83:f9:6e:
         3a:c9:66:58:a6:42:b6:c6:00:4e:24:4c:c4:63:08:e8:d0:8e:
         24:a6:4c:ed:ac:ae:45:40:75:a2:66:fc:f6:06:43:56:da:c9:
         a3:d9:04:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:12 2025 by rpki-client