Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
File:                     0CDxCDLEm61vFalgWMW6GFcqxSo.mft (raw, json)
Hash identifier:          4OmZ+xFew7cGg5/QKdtBnblmRnws5R+dLPBmvm6OCHQ=
Subject key identifier:   2E:B7:45:5C:57:20:E0:F2:C7:87:DF:24:C4:A9:A1:C8:DC:B3:55:F6
Authority key identifier: D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A
Certificate issuer:       /CN=d020f10832c49bad6f15a96058c5ba18572ac52a
Certificate serial:       0199FAD832D39B2527842B98524A13A2BE7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
Manifest number:          0A3A
Signing time:             Sun 19 Oct 2025 05:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:36 +0000
Files and hashes:         1: 0CDxCDLEm61vFalgWMW6GFcqxSo.crl (hash: gp3A4rd/gbkEiR87mQRg7CDtTBgOdrehkArlcLs9lRY=)
                          2: 8LyQu6M29k1339l_CEp2NXxrXCM.roa (hash: sefzNsDqr2VAFaOlXDNefpIYjAbww43X8pxj4t3RtgQ=)
                          3: TNuoVQLMoCvPw9pqbv1lB1R6WTo.roa (hash: lpAiG+1V0l8l8KBHMEE2mx4+9kmKvUMXZxyrbPf7z7g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d8:32:d3:9b:25:27:84:2b:98:52:4a:13:a2:be:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d020f10832c49bad6f15a96058c5ba18572ac52a
        Validity
            Not Before: Oct 19 05:01:36 2025 GMT
            Not After : Oct 20 05:01:36 2025 GMT
        Subject: CN=2eb7455c5720e0f2c787df24c4a9a1c8dcb355f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1b:ce:d8:32:47:e6:d2:71:c8:6a:a9:ee:a3:
                    18:28:c0:0f:77:57:21:2e:4a:b4:74:8d:fd:e0:db:
                    31:0c:ac:ce:b5:27:2f:42:f1:c3:e8:d4:ff:76:1e:
                    4e:d5:79:3c:31:de:f3:83:32:a3:b1:da:48:c7:33:
                    7b:7b:8d:c9:14:03:41:21:b7:47:1b:f2:b5:59:ec:
                    1a:1b:83:36:a6:c6:00:31:7b:33:8e:40:f7:76:6d:
                    98:4e:0a:73:71:23:7d:62:e7:40:72:6f:a0:a7:e2:
                    36:ea:29:54:06:11:9e:41:2f:9e:a1:81:16:63:dd:
                    9e:10:3d:30:b2:a3:30:06:8d:4c:c9:2f:c5:3c:41:
                    9b:37:0b:a9:52:c8:8e:79:a7:f0:04:1c:d4:43:d8:
                    c9:40:91:58:ad:42:b9:ab:8c:e0:b2:75:56:66:46:
                    42:fd:ca:e0:51:5e:e6:a1:d1:16:e4:24:19:e1:b6:
                    30:d8:b1:be:c2:99:cf:76:3e:81:50:be:5f:28:00:
                    5d:a2:a3:82:ac:75:d3:2d:bb:4a:ee:57:70:4f:24:
                    16:c7:ff:e4:5f:c3:b3:2c:8e:ad:8d:fe:64:0f:29:
                    de:f8:ea:9f:54:40:0c:3c:3f:b3:96:fe:5f:04:6b:
                    5e:fa:68:0a:1b:32:bc:6b:28:c0:23:ce:9d:4d:f5:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B7:45:5C:57:20:E0:F2:C7:87:DF:24:C4:A9:A1:C8:DC:B3:55:F6
            X509v3 Authority Key Identifier:
                keyid:D0:20:F1:08:32:C4:9B:AD:6F:15:A9:60:58:C5:BA:18:57:2A:C5:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CDxCDLEm61vFalgWMW6GFcqxSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c11c1-4250-4387-a4db-2701d591deae/1/0CDxCDLEm61vFalgWMW6GFcqxSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bf:f1:38:71:5a:93:d1:3d:00:36:93:75:1b:19:4f:99:b1:
         97:df:ea:53:6c:74:10:88:ae:e3:54:f0:16:c6:37:4b:cd:9c:
         7d:6f:f5:cb:1c:8c:f5:91:77:67:57:65:4e:1d:b7:c6:84:00:
         8a:1b:d6:f4:f7:8e:2f:32:f2:08:ad:1d:fc:c0:eb:23:38:91:
         70:04:ec:b0:ae:80:b8:c4:84:6c:02:44:1b:f6:2d:be:61:66:
         0c:a1:9c:68:5a:40:db:ae:24:1d:4c:40:cf:8c:90:f5:12:4b:
         ae:0c:f2:7e:27:05:45:88:97:86:99:ea:fb:ab:27:b5:2c:5b:
         a2:74:bf:bb:21:ae:a1:3e:1a:02:ea:65:12:f0:8a:c1:62:ad:
         63:17:fc:42:42:40:4b:68:8d:1f:af:a8:68:0a:82:01:04:f7:
         38:92:ea:0f:eb:49:b0:d1:53:2b:0c:b2:f5:c7:45:17:47:42:
         5e:3c:e0:6f:fd:d2:0e:19:79:5b:b9:ec:1d:a9:2c:a5:bb:81:
         21:e2:ec:a5:08:ae:38:c7:41:29:35:dc:50:0b:27:66:ef:b5:
         d5:ee:ea:6a:87:27:95:e6:40:d7:83:7d:c8:08:3d:63:68:81:
         d6:36:b5:e2:5e:b4:97:78:dd:4f:cf:6d:e3:26:52:88:32:14:
         42:d3:1f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:19 2025 by rpki-client