Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File:                     DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier:          ymqyfPg3f3GY8hAAXnj5s2U1DOjgWWRpN6WqyHlDBeE=
Subject key identifier:   2B:64:27:7C:82:7E:F4:AF:63:DB:DC:E7:FF:7E:E5:CD:D9:39:A3:C1
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer:       /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial:       0199FC584FB548C12BEDB477BBFC6ECD6CEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number:          0EC1
Signing time:             Sun 19 Oct 2025 12:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:09 +0000
Files and hashes:         1: 1teQs2-Gqr9Ttken-kpobex52GM.roa (hash: JwKmhVt10f03COhT0AoYFXxwUVkj2YdwV7qznRh2SmM=)
                          2: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: yei4Xu0HIjxgZBI9qAYQ/uGRiZFjQ4lILLuuQxk4Co4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:4f:b5:48:c1:2b:ed:b4:77:bb:fc:6e:cd:6c:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
        Validity
            Not Before: Oct 19 12:01:09 2025 GMT
            Not After : Oct 20 12:01:09 2025 GMT
        Subject: CN=2b64277c827ef4af63dbdce7ff7ee5cdd939a3c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b0:93:6a:32:b0:4b:44:7c:d3:eb:db:4b:cb:
                    c3:aa:da:32:fb:4b:27:1d:bd:34:46:ee:18:3d:d0:
                    cd:c6:7b:95:d8:1d:ee:86:54:62:cf:d3:b0:50:7c:
                    32:0a:cf:8f:e8:f2:3b:b2:cb:f0:e0:1c:47:e0:60:
                    ea:44:c9:df:47:a5:ee:de:61:81:77:b0:3d:a4:25:
                    56:27:6e:ae:0f:af:de:01:9b:02:ba:ff:ab:d2:bc:
                    37:ea:85:68:a6:08:9b:90:fb:66:c8:97:f7:47:1e:
                    51:d7:4f:a2:36:64:a0:93:39:fc:11:fd:7a:38:45:
                    17:6c:ef:fc:e8:50:47:5d:1e:82:09:64:70:01:90:
                    a2:5c:d8:7a:b9:4d:40:e5:3a:a8:c3:45:d3:f6:1f:
                    77:62:80:b5:6b:9c:b0:9b:33:37:db:21:5a:d8:93:
                    1b:92:77:77:0f:ea:df:c2:86:78:3a:c1:98:52:c1:
                    0f:e2:2a:27:12:4d:07:49:30:d7:29:38:6a:6c:5d:
                    17:a4:4c:98:3c:3f:94:c5:72:c9:53:d0:85:04:1a:
                    9a:14:bf:68:79:2c:50:55:97:a9:33:2d:b4:64:78:
                    18:9c:32:76:d5:36:5a:5b:d9:20:5d:aa:21:7d:50:
                    cc:59:8a:ca:60:aa:a6:b0:ee:c8:88:b7:4f:ab:4e:
                    5f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:64:27:7C:82:7E:F4:AF:63:DB:DC:E7:FF:7E:E5:CD:D9:39:A3:C1
            X509v3 Authority Key Identifier:
                keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:2a:28:e6:24:df:ad:30:b5:8e:ba:bd:25:87:c0:c7:1a:
         b2:d0:1e:5a:93:aa:73:34:75:f7:31:a9:8f:10:6f:c0:14:f9:
         a4:64:64:b4:a0:9e:f0:e9:d8:a9:d0:66:dd:71:cf:7a:ca:a5:
         0e:cf:18:ed:c0:af:b4:01:00:55:00:f0:00:68:51:8c:d7:de:
         a0:ca:5c:96:c8:c5:ea:89:f5:fe:f4:ff:c7:29:56:15:78:b2:
         aa:1e:10:25:f3:6f:62:cf:ab:53:69:82:f5:6c:c7:d5:7d:2a:
         25:0d:7c:30:e5:9b:f4:73:87:6f:f6:01:c1:88:07:cf:83:62:
         51:ce:38:bb:98:4c:88:b5:51:29:93:23:7d:69:a7:e5:89:09:
         56:bc:59:98:a6:82:13:9d:8e:36:48:58:cd:68:fd:b6:a7:80:
         8e:97:e7:77:fc:4f:2d:21:3f:7c:07:87:07:f4:1a:c3:79:8c:
         71:e0:3a:03:73:66:6f:2c:d6:48:47:d0:bd:54:c9:7b:a4:5c:
         04:2c:24:c8:bb:82:ec:1a:10:10:2f:8b:9e:d9:75:e1:a8:f1:
         0f:07:66:09:26:5a:f2:56:0a:a3:1b:19:93:de:c8:9e:03:4c:
         9e:8a:30:3e:32:cf:11:28:03:f9:57:40:f8:2f:25:d3:74:ba:
         8e:30:a6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:28 2025 by rpki-client