Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          wMoSX+K8oj4Hn9PyUlYLyUmNzjY83JoB8zeq1athLJc=
Subject key identifier:   0F:EA:20:00:9A:30:54:99:7F:5A:2F:3F:CA:52:35:F8:82:E8:45:8A
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       0199FDD9B990C57A3391D81D46DAE55DDB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0D79
Signing time:             Sun 19 Oct 2025 19:02:08 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:08 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:08 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: mfsnxvXTGgrkKJYZmDltJ4UXvMxt/MTFpnCzMLCo0ns=)
                          2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
                          3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
                          4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:b9:90:c5:7a:33:91:d8:1d:46:da:e5:5d:db:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Oct 19 19:02:08 2025 GMT
            Not After : Oct 20 19:02:08 2025 GMT
        Subject: CN=0fea20009a3054997f5a2f3fca5235f882e8458a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:38:68:be:7f:f5:d8:f6:41:c0:22:94:bb:
                    66:c4:ac:e0:f3:d6:03:66:c9:27:e9:ca:9e:17:17:
                    be:d3:1b:1e:1f:9c:ce:d6:4e:81:6a:1a:35:69:44:
                    c4:a3:0d:d8:95:1c:37:72:82:8c:13:6c:2b:39:60:
                    4b:e3:33:c3:2d:0b:bc:b4:aa:5e:99:0b:1b:05:86:
                    ad:e9:0b:20:57:ab:c3:50:2f:69:34:08:c1:c4:8e:
                    38:d2:3f:47:6c:8a:08:0e:53:86:a2:7d:ee:e6:a5:
                    e0:e1:10:12:47:7f:56:25:1d:07:6d:46:fe:68:28:
                    a9:8e:6f:b5:20:ac:7a:e0:ff:03:92:87:24:cf:d9:
                    06:99:e2:7a:e1:0c:1f:c1:d7:92:3a:4f:6c:3c:b1:
                    c9:03:0d:09:ce:5d:91:f5:7b:1a:9f:80:14:47:41:
                    88:d6:b4:4e:0f:c1:e8:dd:b0:d6:a6:4d:94:20:af:
                    2f:4a:ec:2a:61:fc:65:0b:ee:05:90:56:00:76:eb:
                    a5:4d:85:03:5d:03:a2:6a:a0:6b:43:d8:51:8e:65:
                    cf:05:4e:65:b2:f9:3a:0a:ea:dc:68:de:a6:cd:55:
                    e7:69:09:14:77:81:5d:67:41:83:d4:3f:b8:1d:11:
                    eb:08:e0:98:17:52:ab:23:9a:fe:33:6f:8d:a2:fb:
                    8e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EA:20:00:9A:30:54:99:7F:5A:2F:3F:CA:52:35:F8:82:E8:45:8A
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:9b:de:c3:e8:03:b5:8d:f6:1e:ba:a6:51:1a:45:6b:cc:
         11:c2:2a:0b:62:cb:21:ac:f0:be:26:de:86:0d:92:92:38:7e:
         0d:4f:b5:74:23:a7:59:f9:bd:59:01:df:d8:f5:c9:fe:85:ac:
         6a:b0:15:c1:54:0b:e2:05:79:81:99:cf:b6:3e:27:6e:f0:a0:
         c1:c4:54:ac:13:09:1e:7d:6e:0d:a9:5a:70:d4:e5:3c:99:60:
         64:ac:c2:e0:2b:ab:1d:f3:ec:9f:bc:15:d2:9a:de:af:a5:7b:
         3c:70:1a:ba:00:5c:9e:32:52:ec:ce:e8:e5:3c:bd:2f:01:db:
         01:e6:f5:d9:2d:94:3c:c2:6a:87:d4:23:5d:81:2a:8e:59:bd:
         af:23:1c:2a:69:09:df:a1:de:26:c6:cb:42:62:8f:6d:da:03:
         af:6a:19:c1:b1:92:42:d5:93:4e:ed:4e:32:48:dc:5e:ea:fc:
         71:a6:a1:b4:06:b6:8c:42:71:d7:d2:58:b8:45:53:6d:db:fd:
         cb:2d:07:95:2e:04:51:1e:d9:37:35:71:24:9c:1d:6e:f3:bf:
         0b:f6:f6:bb:97:29:7a:cd:af:8d:20:08:a2:7f:d5:b2:ca:d0:
         5e:cf:5a:be:6e:c8:8a:39:48:1b:19:a7:97:96:0b:06:c6:98:
         c7:f5:2f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:40:30 2025 by rpki-client