Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File:                     Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier:          F+hTl4D/kiX49hq3Vir6nGd3Z4Jzu3n4qrnDi6fxl+c=
Subject key identifier:   53:F8:3D:07:CB:B3:B6:94:80:58:73:7B:4B:D4:54:BB:A8:62:C0:A1
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer:       /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial:       019A0110CDB861169029B084C1C6AF03D8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number:          16E5
Signing time:             Mon 20 Oct 2025 10:01:09 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:09 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:09 +0000
Files and hashes:         1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
                          2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: BUHYZn1CjWlm0MLBKog9jcoEPuOiE5R9eEKMHeRv1pQ=)
                          3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:cd:b8:61:16:90:29:b0:84:c1:c6:af:03:d8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
        Validity
            Not Before: Oct 20 10:01:09 2025 GMT
            Not After : Oct 21 10:01:09 2025 GMT
        Subject: CN=53f83d07cbb3b6948058737b4bd454bba862c0a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:ae:2b:fe:86:d6:48:b3:9c:c0:e4:a5:83:
                    07:84:fe:62:59:59:03:79:06:fc:1f:a9:ed:bb:e8:
                    34:4f:0c:66:2a:73:dc:21:9f:2f:38:80:db:91:10:
                    24:9a:28:5a:e7:d3:d0:48:ec:fe:2e:fe:90:8c:1b:
                    52:43:fc:eb:b4:a9:bb:65:21:5e:5a:ba:7f:a1:8f:
                    fb:91:16:0c:6d:9e:e9:bd:54:d4:66:c2:53:c8:db:
                    82:ee:56:17:fd:9f:7b:29:24:7b:40:68:78:41:3a:
                    ec:4b:da:2c:80:e5:31:24:2d:54:0e:8d:f1:63:24:
                    96:f1:2f:a8:8c:9a:75:19:ca:25:ae:ea:3b:fc:27:
                    f1:15:42:a3:e3:99:17:4c:d9:31:d6:ff:18:cf:ff:
                    69:b7:98:11:8d:cc:be:ba:39:47:19:b2:83:39:5c:
                    42:c9:51:aa:93:45:eb:06:ad:b2:ee:dc:c5:a3:74:
                    2f:40:4c:fe:27:90:16:13:9e:86:70:f3:5c:fc:85:
                    1e:83:64:dc:c1:b9:88:60:64:b2:50:8f:51:ab:29:
                    7c:67:7d:a6:33:17:a7:ba:40:b2:cb:c5:1f:04:94:
                    65:27:d1:16:13:4a:7e:0a:fb:2f:04:d4:40:a8:19:
                    a7:96:64:8d:a1:45:74:86:9c:f2:e6:71:dd:e4:bf:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F8:3D:07:CB:B3:B6:94:80:58:73:7B:4B:D4:54:BB:A8:62:C0:A1
            X509v3 Authority Key Identifier:
                keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:78:20:18:3d:ba:f3:25:8d:42:a4:50:f6:4f:db:9d:ef:09:
         4e:85:c8:b9:55:20:22:34:81:28:96:f5:d8:16:ca:e3:fb:e7:
         22:18:16:6e:68:a6:13:a1:11:42:16:e8:bc:49:3b:58:4a:65:
         11:92:e1:61:0e:fb:2a:8f:01:e3:90:d5:92:e7:34:11:36:e3:
         c8:11:0c:a4:ab:4c:c3:e0:8d:97:4f:28:05:52:70:6d:ae:60:
         11:8f:f5:fb:0e:c6:97:e3:58:72:53:28:6a:dc:03:c5:13:62:
         9a:3c:d4:32:3e:d0:cf:5f:ca:bd:73:2c:56:19:33:04:6e:59:
         61:f1:14:08:03:f8:28:5f:c7:37:3b:a8:1c:06:0f:bd:8c:03:
         b9:e5:fe:ab:f5:0a:01:65:34:84:36:4b:10:53:39:ab:72:18:
         76:55:10:ac:05:76:12:34:8b:e4:8a:71:97:f6:86:c4:f2:d0:
         c3:fa:1c:5b:65:13:9c:fc:f2:80:6f:59:1f:4d:58:c1:d6:52:
         e6:94:4f:14:41:22:b2:f3:46:56:74:f1:be:8c:7d:a7:d1:4b:
         ea:6c:22:fd:5f:cd:5d:75:85:37:3c:e0:ad:40:61:5f:5c:1b:
         e5:81:51:10:ce:d2:a4:f5:d6:46:48:2e:fd:ca:18:75:34:4a:
         e2:1c:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:15:47 2025 by rpki-client