Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
File:                     MryjKc1OJWX_DRPoNVpuxMwXlOE.mft (raw, json)
Hash identifier:          BPQCWb/WnMGIIQXYbNOVO2oyZaI+RBP4rcKs5heMhec=
Subject key identifier:   74:99:12:2C:73:46:AA:4C:16:70:16:AF:8E:6D:7F:C5:27:3E:21:DF
Authority key identifier: 32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1
Certificate issuer:       /CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
Certificate serial:       0199FCC69DB08107A26AC9E1FDDC45B8B929
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
Manifest number:          0D96
Signing time:             Sun 19 Oct 2025 14:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:38 +0000
Files and hashes:         1: MryjKc1OJWX_DRPoNVpuxMwXlOE.crl (hash: OBWAPDBVF+PwdwIs6ff4fRj7pyfqdypi5UABJNJ9Pac=)
                          2: SrK-vjiDl0xs99Gd2cCyjeQdDic.roa (hash: 9BoGna4mMc990bImuJR3rw32j27JfV1QUyOoXmJi2O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:9d:b0:81:07:a2:6a:c9:e1:fd:dc:45:b8:b9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bca329cd4e2565ff0d13e8355a6ec4cc1794e1
        Validity
            Not Before: Oct 19 14:01:38 2025 GMT
            Not After : Oct 20 14:01:38 2025 GMT
        Subject: CN=7499122c7346aa4c167016af8e6d7fc5273e21df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9f:a1:29:67:fa:81:c0:a2:c1:4c:95:ad:5a:
                    ba:f7:5c:a8:98:e9:34:0f:54:2c:2d:84:04:93:04:
                    39:e4:43:99:d3:a4:eb:d7:45:0d:ce:c7:da:b8:44:
                    a4:e8:29:98:a2:90:e7:a4:31:e7:4c:bc:a5:1e:38:
                    2c:15:51:b5:ca:a5:18:ce:b5:c0:e7:26:04:bc:d6:
                    65:09:3d:86:80:d6:15:11:f6:43:7f:28:11:b4:ae:
                    12:fc:dc:7a:b6:86:f3:cb:b3:b2:c0:56:7a:aa:e4:
                    63:39:21:36:54:cf:39:16:f7:52:14:21:de:89:dc:
                    de:c3:e5:01:db:3f:36:db:bd:aa:ad:25:9e:c3:68:
                    c6:26:36:6c:8d:49:ce:26:ca:1c:49:31:5f:36:76:
                    f0:67:27:9b:ec:f6:ee:26:9a:5c:41:35:80:71:0d:
                    5c:ea:7d:ec:52:60:69:72:f3:86:b4:b2:57:0a:3c:
                    da:5c:43:72:c7:ff:73:0c:fa:33:57:7d:73:a5:a0:
                    6e:f4:02:90:ab:ba:bb:78:85:e7:b1:9a:88:45:6a:
                    4b:48:16:7d:a4:e4:0d:09:65:64:0f:4b:a9:55:65:
                    4b:1a:83:b9:e7:2d:a6:f1:22:ba:f5:c9:8d:5e:e0:
                    5b:46:36:42:cc:6e:97:f9:fd:a3:80:4e:76:25:99:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:99:12:2C:73:46:AA:4C:16:70:16:AF:8E:6D:7F:C5:27:3E:21:DF
            X509v3 Authority Key Identifier:
                keyid:32:BC:A3:29:CD:4E:25:65:FF:0D:13:E8:35:5A:6E:C4:CC:17:94:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MryjKc1OJWX_DRPoNVpuxMwXlOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bd8cf6-1db8-4ac0-8dd6-17be417e94dc/1/MryjKc1OJWX_DRPoNVpuxMwXlOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:82:a6:58:5e:0f:45:f3:20:f0:d8:b2:f0:9c:22:eb:c5:b9:
         10:da:fb:6e:fc:b5:2c:4f:65:18:83:64:57:f0:28:d0:9e:41:
         62:e8:cb:2b:b2:9d:c5:69:57:eb:c2:92:67:3d:6d:91:e5:61:
         fd:21:ce:7c:25:cb:d2:4c:27:16:06:b5:31:10:89:cc:7e:0f:
         8c:3d:ec:93:fe:f4:9a:ee:5b:12:2c:09:57:bf:d2:32:53:98:
         ca:e6:f3:8e:63:de:33:19:89:aa:07:6c:c6:bb:cb:99:a3:a7:
         77:7c:ce:a3:82:03:a2:d7:b2:f7:9c:cf:19:3a:fb:f2:f9:1d:
         51:95:24:e4:62:36:a2:35:27:2c:14:84:f7:0b:99:db:8b:f1:
         84:d8:7c:25:be:ed:69:48:5b:d0:92:b9:b6:7e:ca:b5:70:e2:
         be:b5:8f:7b:b5:20:07:9e:66:54:2c:c4:5a:67:9f:0a:69:1d:
         0b:ac:56:a8:ef:70:12:e8:d9:0d:89:2e:5f:6e:15:c3:c9:a7:
         c8:2e:33:54:91:af:d9:77:aa:f9:b9:bc:06:a6:7b:a3:e4:f2:
         a9:94:6a:0c:9b:a6:fa:24:8c:dd:89:3b:0d:58:64:44:05:fb:
         0b:e8:ac:7f:20:e1:93:91:f3:0b:94:38:9c:69:6d:ca:2a:20:
         2d:23:b7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:03 2025 by rpki-client