Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
File:                     DLeircbcrxd7k6M2y47OzFrzAlg.mft (raw, json)
Hash identifier:          iMrDSb9n7Ji1p/+Kbh3dwJXh3uz1jquw8aQHFX1y9po=
Subject key identifier:   B2:01:75:88:79:C1:74:CD:19:DB:3A:08:89:B5:8A:9A:CA:42:7C:C5
Authority key identifier: 0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58
Certificate issuer:       /CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
Certificate serial:       0199FAD85AC740009EA66E4D930CADDF4048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
Manifest number:          0988
Signing time:             Sun 19 Oct 2025 05:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:46 +0000
Files and hashes:         1: DLeircbcrxd7k6M2y47OzFrzAlg.crl (hash: DXpaMC+JOE3uGXYo1qaunappnHMl9e1IyEARSbmeLiE=)
                          2: DXgX_cMOKWmvyb5MDCu-yzGISYQ.roa (hash: fFfPzCo7zqTjJgcKhX4SxPHlq4HGUqWFQ0c7O8IZwwY=)
                          3: OVOzZ2g8zifvqCY8wDqOXjL1AOc.roa (hash: ei5vXf6WAl7FEI5d5Hm8KKAZYtO3URaho5E46M2Vof8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:5a:c7:40:00:9e:a6:6e:4d:93:0c:ad:df:40:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cb7a2adc6dcaf177b93a336cb8ececc5af30258
        Validity
            Not Before: Oct 19 05:01:46 2025 GMT
            Not After : Oct 20 05:01:46 2025 GMT
        Subject: CN=b201758879c174cd19db3a0889b58a9aca427cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:77:38:19:3c:c2:17:e2:be:41:ef:59:91:
                    47:f9:69:94:b7:7f:1e:d8:0b:23:ef:51:6d:07:f7:
                    26:d5:4e:b8:27:13:5e:3c:29:08:05:41:d6:05:8c:
                    b8:98:ca:28:01:77:4c:fb:56:aa:72:8f:c4:fa:65:
                    f8:13:d5:1a:17:f3:2f:1f:be:a1:49:fd:5d:69:91:
                    b9:3d:11:2a:e3:f1:25:5d:4e:13:a3:99:7e:ca:06:
                    fb:8c:f6:6c:44:a8:83:c1:ae:99:25:0e:07:d4:a3:
                    21:8f:21:da:75:f7:f2:17:09:7b:ed:45:7f:a1:26:
                    44:6f:5f:24:f8:94:0e:2e:30:d2:96:27:83:32:3d:
                    11:e5:38:8b:b4:fd:6f:1a:ce:f3:ca:fd:a0:76:b3:
                    2b:02:e6:81:0a:25:4e:66:7f:21:4e:e6:9e:e1:4f:
                    2b:e7:0e:1f:ba:fc:5c:55:4b:80:02:47:f1:e3:c4:
                    d8:f0:af:e7:09:18:d3:63:cf:d9:9b:6c:13:6f:bd:
                    2b:cb:11:5b:ac:bf:59:b3:a5:13:68:fd:de:57:65:
                    63:d0:64:f4:ea:f3:dd:15:f5:c0:c3:ab:d0:ae:5b:
                    01:cd:ef:b8:58:a9:58:15:52:fd:fb:12:72:2a:88:
                    58:be:58:ad:ec:9e:88:99:68:13:ef:8d:5a:dd:69:
                    bd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:01:75:88:79:C1:74:CD:19:DB:3A:08:89:B5:8A:9A:CA:42:7C:C5
            X509v3 Authority Key Identifier:
                keyid:0C:B7:A2:AD:C6:DC:AF:17:7B:93:A3:36:CB:8E:CE:CC:5A:F3:02:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLeircbcrxd7k6M2y47OzFrzAlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/2f7894-756d-4cbf-977c-3c5ae761cab0/1/DLeircbcrxd7k6M2y47OzFrzAlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:43:86:64:95:8c:59:22:01:6c:9a:87:75:cc:87:fa:cc:71:
         e7:aa:f1:cf:9d:7e:6a:83:c0:7c:03:e4:bc:f2:4d:23:f2:51:
         bf:83:54:a5:74:73:04:fb:02:ef:da:56:12:60:49:fd:d1:7b:
         00:bb:2e:4d:ca:01:a7:e6:59:04:14:c5:c7:91:4f:38:b5:f7:
         5e:b7:90:fd:81:77:d9:03:f5:33:d6:3b:ca:ec:30:32:52:16:
         5c:7b:0e:1c:66:f4:f6:77:36:d5:59:82:d5:cb:f5:0c:7d:59:
         1d:3d:fa:be:21:2d:5f:60:c0:b0:94:54:8a:90:8f:3b:a8:1f:
         37:43:01:df:5e:11:20:f3:99:1e:6f:e4:e0:b5:c1:2c:b0:ff:
         4f:56:fc:a0:17:ec:ca:53:8f:fa:e8:43:b8:58:ae:03:d6:71:
         cb:03:6b:04:ed:c8:2a:d8:1c:b1:de:cf:b6:dc:4f:07:8b:a8:
         d1:38:8d:f9:8c:8d:3d:21:34:46:66:7c:01:a9:6d:25:48:7e:
         f4:9d:12:c4:c1:e6:63:90:3a:7f:17:03:0d:75:be:23:26:5e:
         9b:fa:2e:0b:38:15:fe:df:af:04:bf:5b:e6:76:df:6c:47:5c:
         41:32:57:b4:81:ba:32:1c:b6:2f:ad:94:b6:a1:50:4a:73:ba:
         ec:0f:d2:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:24 2025 by rpki-client