Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          gUKLZ/w8n3J0PzAXPNJqQVu83sU/R25PHyJPnC5G2eU=
Subject key identifier:   09:90:5E:31:7E:59:BA:76:C2:DC:A0:FA:83:D5:76:1F:BA:62:2F:D2
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       0199FFC7897DF3914E5FCBA6E965028A526E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          067E
Signing time:             Mon 20 Oct 2025 04:01:30 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:30 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:30 +0000
Files and hashes:         1: 5Glc2B08f5NNNCUv9fqw3ZiV604.roa (hash: qKV0O/uQL4URhMfYX9S0ZOufXlqcIe3xRJXIrY3RJwE=)
                          2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: SGPp9JSjAExV1TpGNxGEOplu8UmawiGRuSF0uFmNSZI=)
                          3: wzyOntPyHe2_vob8ftvNa_NHz8Q.roa (hash: jsopFRalC2C1iJbieVLkelaTdE/c46JWYuJBBa2M4iA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:89:7d:f3:91:4e:5f:cb:a6:e9:65:02:8a:52:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Oct 20 04:01:30 2025 GMT
            Not After : Oct 21 04:01:30 2025 GMT
        Subject: CN=09905e317e59ba76c2dca0fa83d5761fba622fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:49:03:88:12:81:d1:2a:27:90:77:10:6b:
                    4d:65:c8:9c:09:13:70:a5:92:af:5e:d0:8c:f3:1d:
                    fe:a1:32:2e:f4:ef:23:83:13:09:dc:23:f3:07:4e:
                    dc:91:92:7a:f4:9f:b8:8b:04:a6:fe:76:08:6c:d7:
                    1e:4c:92:d9:cf:b1:e2:a2:82:1a:db:3b:a5:33:35:
                    26:a3:7f:da:b8:6a:48:26:f0:65:2f:aa:16:78:dc:
                    29:97:7c:3c:35:2c:2f:6b:9c:fa:66:ef:c8:38:2b:
                    c7:32:fa:90:10:7a:3a:74:4a:35:a9:40:00:50:ca:
                    3c:b4:fd:d5:4f:4e:a1:c5:5f:3b:69:4c:74:19:99:
                    a6:2d:1c:62:c8:c6:ea:8d:f7:af:57:50:00:f1:26:
                    15:9d:0c:eb:62:2d:91:7e:4d:fb:82:e6:51:16:4f:
                    bf:47:8b:c2:d5:09:35:34:c7:78:f8:b9:af:71:e9:
                    6b:ed:43:ed:f7:62:3b:9a:73:ca:c7:ec:66:bc:f0:
                    a3:f9:d2:b6:71:bb:f3:88:99:64:e2:13:38:e3:f9:
                    80:0d:63:14:ba:1a:b5:c7:42:3d:c1:3a:9d:eb:7a:
                    65:ab:05:6c:b8:c0:dc:06:7f:c2:81:e0:79:2f:87:
                    2f:68:b3:e0:06:ea:4d:c3:e2:c3:7e:ca:96:64:e7:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:5E:31:7E:59:BA:76:C2:DC:A0:FA:83:D5:76:1F:BA:62:2F:D2
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cd:ff:41:5d:c4:f8:9f:77:60:53:58:60:5f:c6:55:16:69:
         38:68:eb:cf:d9:64:6e:7e:ca:e7:7b:92:39:6d:77:3d:ba:61:
         d6:bd:df:0c:75:e3:3d:08:08:01:d3:85:cb:62:3d:1b:7c:60:
         a4:d8:ba:3b:1e:4d:db:be:eb:19:6f:09:7d:51:c6:89:d1:34:
         f6:b9:ae:da:58:8a:bd:24:72:fc:06:e6:30:67:13:f1:21:e2:
         3b:d6:52:94:67:a6:1e:4b:53:2f:33:2c:06:ee:c7:a0:4e:42:
         2d:ca:d2:4b:0d:96:3e:a7:d1:f4:2d:4d:1e:81:c5:de:ff:53:
         f0:1e:08:5b:f7:8e:ba:8a:23:28:1a:26:5d:2b:58:85:8e:91:
         3f:bb:21:62:c3:be:7a:b1:3b:72:27:54:d0:cb:f1:f2:4b:e3:
         8a:5b:64:f1:c6:2d:16:6a:46:a6:a3:85:4a:63:c9:7d:38:f2:
         8d:3f:8c:00:37:bb:e7:07:c1:0f:ff:d3:28:9f:d7:09:f6:c2:
         53:7f:7f:ed:97:cb:0a:0b:9b:26:5f:e3:52:8c:4b:7b:ec:66:
         68:27:b2:76:2b:99:98:92:a3:bc:25:61:2b:47:d7:88:97:b1:
         10:79:6b:bd:37:30:fc:1d:70:51:12:a7:86:e8:a6:07:32:cc:
         ab:9e:d9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:55:59 2025 by rpki-client