Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          oD2n90ACo8bBzXDCdqWQ3b5I0L6TiV9OLCUlETxtrM4=
Subject key identifier:   7A:8B:A6:7C:2D:80:84:9A:96:11:9D:95:1D:D5:8E:F6:46:15:49:5F
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       019A006C5F6C0B85015CFA3468F2439BB0F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0B0E
Signing time:             Mon 20 Oct 2025 07:01:33 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:33 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:33 +0000
Files and hashes:         1: 9zwR0ItkTBE3NBrhNXLgD19Ygh0.roa (hash: 668uqZpsKXpsQP4NHjfvBq7qiMq3YrFIWJSOqGsUVvE=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: VGfiyOU/c+Ve9qoUoozCV8jslPpPLMc/FBN/Dpd/FP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6c:5f:6c:0b:85:01:5c:fa:34:68:f2:43:9b:b0:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Oct 20 07:01:33 2025 GMT
            Not After : Oct 21 07:01:33 2025 GMT
        Subject: CN=7a8ba67c2d80849a96119d951dd58ef64615495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:fd:75:e5:c0:e3:f6:41:d4:61:4d:8d:db:
                    f5:18:62:11:2a:b1:14:55:7c:3b:1b:3e:4b:1b:60:
                    41:d9:1f:0f:75:a3:42:ef:37:84:a4:99:51:0d:99:
                    92:9f:43:87:7c:35:a2:7d:03:a5:14:f3:eb:02:a4:
                    b1:50:30:8e:c0:42:18:64:6d:c2:52:d1:04:c9:b8:
                    50:e9:7c:eb:b3:ee:5c:b1:7f:e6:f9:73:85:8d:13:
                    69:bd:29:06:53:9b:7a:ae:08:f5:19:50:80:cf:a4:
                    26:1b:a6:af:47:a0:85:09:65:e8:70:31:e1:3c:66:
                    8c:7a:40:a3:61:dd:c5:c6:1a:8d:45:58:f5:4a:17:
                    38:37:b2:ff:e6:56:da:c3:b7:a3:bf:d4:0b:58:26:
                    ea:7f:94:6d:2c:9d:71:22:59:74:e2:4e:77:37:4e:
                    ae:73:66:5a:ce:35:18:0b:f9:ea:ec:a8:20:ce:ba:
                    9b:37:46:25:f8:0f:59:56:fc:00:e1:b6:f6:b4:c1:
                    44:b1:7a:be:26:ef:40:90:f2:03:b9:e4:96:c3:cb:
                    c8:f3:25:a5:7c:b9:30:a1:03:69:dc:d9:12:73:6a:
                    39:d0:a5:64:fe:4b:9e:c1:81:67:df:01:53:32:06:
                    d1:bf:16:a0:36:e1:d7:3c:83:a0:99:37:b1:cb:71:
                    11:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8B:A6:7C:2D:80:84:9A:96:11:9D:95:1D:D5:8E:F6:46:15:49:5F
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:76:ad:e1:a1:42:d8:bd:a0:df:8a:b7:65:68:a0:7a:0a:
         d5:87:26:bd:24:14:1c:60:f3:53:1d:02:2e:36:40:2c:ae:7e:
         11:b0:f8:e5:92:2b:a7:88:f8:58:36:40:1f:7f:29:51:0f:39:
         fe:13:8a:ae:63:27:c1:5c:92:3d:5a:5b:98:fc:ec:37:97:3a:
         bc:20:05:a4:b3:fe:03:34:2d:bc:30:5e:8c:7e:88:79:a5:3d:
         45:b7:e9:a6:7b:aa:f6:3a:57:b5:db:95:82:b8:e7:8b:f9:d9:
         dd:8f:57:c1:7d:46:2d:2e:8b:53:f2:a7:6d:b0:de:bb:08:d2:
         17:4d:97:e0:03:6a:a1:19:dd:be:66:76:87:5c:c0:67:67:da:
         13:66:40:f6:75:48:d0:d8:2f:cb:0d:47:0b:0c:95:cf:20:44:
         de:6c:95:c1:ce:9b:10:e9:13:75:fd:d4:22:80:c2:b3:75:87:
         8d:2a:cf:3b:b6:3e:8a:04:8b:5f:81:b8:49:36:60:d3:ce:c9:
         b7:d1:ef:87:d5:2b:e7:59:fb:26:d4:40:e1:c4:05:23:92:ed:
         3f:2b:8b:11:85:6a:8b:63:40:9e:5b:81:f7:89:c2:27:fd:f1:
         9d:20:47:61:6b:dd:c4:1b:25:78:6f:2b:f3:27:8a:cf:31:6b:
         df:89:fc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:53 2025 by rpki-client