Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          ppaVrrTJlynU4fYVyQniBOfD4KLgkkeHgNJB7ECwKSk=
Subject key identifier:   82:F4:2D:4B:4D:34:A6:DA:DF:00:1E:65:07:6C:F6:5E:AC:37:71:1E
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       0199FD33F1872F2A5885E3CF47D954F74C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          0DC3
Signing time:             Sun 19 Oct 2025 16:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:03 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: ymKTKv5t2ihIV1irnQVTlim89ppSitfDUHDfb0gbN2E=)
                          2: MpZukC5Je7qm2_0dzCsOSFpg8Zk.roa (hash: 3WYgApKsvBIkvYFsJfu+jnkLPrausIW2p0OxArSLtNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f1:87:2f:2a:58:85:e3:cf:47:d9:54:f7:4c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Oct 19 16:01:03 2025 GMT
            Not After : Oct 20 16:01:03 2025 GMT
        Subject: CN=82f42d4b4d34a6dadf001e65076cf65eac37711e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:ea:2d:c2:31:1d:f3:e9:ca:94:e8:13:d9:
                    2a:8d:6c:17:57:80:d8:d7:63:4d:c4:1c:76:ec:48:
                    41:a8:1e:78:7b:9d:31:da:77:e1:ef:4b:1c:3f:7a:
                    b8:8b:ec:0c:5d:07:d6:40:2b:b5:24:d1:93:5f:94:
                    e0:ce:6f:45:69:a0:82:4c:ac:cf:c5:c1:e1:cb:db:
                    5a:08:69:66:0d:46:3b:7a:bf:89:97:3d:b9:83:15:
                    01:c2:82:4a:ef:3a:16:95:ec:b4:bf:2e:0a:8b:f5:
                    51:cf:d8:bc:76:e4:ce:e9:38:33:f9:6c:27:7e:dd:
                    6e:e4:0f:83:ed:23:7a:07:64:55:c4:91:a3:aa:96:
                    58:95:9d:fe:f1:d6:3b:41:47:8f:71:ad:63:3c:73:
                    a6:b4:34:26:14:41:ce:57:06:5d:51:56:d5:37:03:
                    4a:f4:15:40:5f:77:21:48:8f:da:68:34:e6:84:4c:
                    89:cb:b3:ce:15:53:3d:d6:ee:35:71:05:a5:64:41:
                    fd:61:d3:aa:f3:46:61:11:6a:ba:df:2f:cf:6b:8f:
                    90:18:9c:8b:64:76:97:e1:1e:4c:e2:54:70:61:81:
                    21:bf:fe:c5:aa:de:c6:b3:20:dc:86:df:cf:02:47:
                    cd:e8:da:d2:25:bc:72:d8:89:35:4c:f7:e0:e8:01:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F4:2D:4B:4D:34:A6:DA:DF:00:1E:65:07:6C:F6:5E:AC:37:71:1E
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:b8:8c:ef:38:d1:09:59:37:0a:c9:83:37:84:e7:b1:2f:08:
         26:ee:d6:6d:b1:2e:45:a3:fb:0a:2a:87:cf:97:e9:70:d4:f4:
         80:98:1b:08:64:2b:f3:68:6e:c9:9f:08:fa:d0:af:d0:d2:e8:
         be:1d:f6:ed:7d:37:d8:a9:cc:b9:dd:76:4c:d4:9f:0e:a4:bd:
         0c:fa:00:ff:da:b4:1f:a4:df:1a:ca:fa:fa:1d:72:f6:9e:4c:
         ed:bc:f6:15:ac:95:f4:40:3f:38:60:32:13:c9:5e:5a:ba:33:
         1b:29:68:6f:95:d1:d0:5d:5b:de:1f:df:e2:6f:0b:2d:54:d5:
         e0:ac:b1:c2:b9:6b:6f:63:f6:0f:b0:0f:67:19:48:cc:b7:d1:
         a0:95:48:52:eb:1b:46:03:34:28:b7:26:e5:52:b6:c1:9f:7a:
         4c:42:5c:2c:31:da:eb:66:54:06:51:a5:11:75:d3:ff:54:e1:
         6e:ab:31:9d:4d:12:e7:80:db:3d:7f:46:b1:3d:42:40:7d:21:
         48:74:f3:0b:99:fb:ce:77:80:59:f5:bd:cb:c8:3e:3e:9a:8d:
         63:25:2c:11:c7:9f:e5:bc:05:68:9c:b5:db:8f:ab:2a:ba:0e:
         24:25:bc:bf:ac:26:2b:f8:46:e6:74:a4:6f:9c:e7:56:f0:a4:
         a8:18:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:21 2025 by rpki-client