Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
File:                     pABDs-E67Tl_iTLPXRP_T0qv5ro.mft (raw, json)
Hash identifier:          rpe4EsOTc+7tc8wNZ9CNhyM6nX3hCebItjhAYF9c2y8=
Subject key identifier:   BE:FF:75:7B:74:B2:AB:F3:5F:87:61:75:B1:53:24:B1:24:36:6A:99
Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA
Certificate issuer:       /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
Certificate serial:       0199FBEB2FFAFA00E8964F20C69090ADD07A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
Manifest number:          099E
Signing time:             Sun 19 Oct 2025 10:01:58 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:58 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:58 +0000
Files and hashes:         1: 6PmEXqzCqtOkV5rlVnjN7lD4y7o.roa (hash: oeYIl7mC76NEmwPAocr8euhDeieJStNOycGYHO+qVzg=)
                          2: pABDs-E67Tl_iTLPXRP_T0qv5ro.crl (hash: D9ejsz1RnSNR0Y7CWzTfeGxIiBEfVqb1lPb4+aIb1lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:2f:fa:fa:00:e8:96:4f:20:c6:90:90:ad:d0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba
        Validity
            Not Before: Oct 19 10:01:58 2025 GMT
            Not After : Oct 20 10:01:58 2025 GMT
        Subject: CN=beff757b74b2abf35f876175b15324b124366a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:29:a5:ae:4f:e0:34:68:da:a0:9c:02:88:d0:
                    c3:08:ea:05:a1:9a:19:67:96:53:a1:3e:fd:d7:3f:
                    71:0f:db:5b:b4:14:40:3c:c3:6a:ea:cc:e3:50:e9:
                    15:2c:67:5a:2d:c4:7c:d5:76:b1:05:4b:cd:31:0d:
                    16:6c:63:cd:5a:54:8c:cc:76:23:3c:12:c3:d8:ed:
                    7a:48:ac:1d:f4:a2:f8:a6:a1:34:5c:02:31:1c:98:
                    b6:35:dc:ad:cb:fa:3f:08:71:bf:f5:32:d1:5e:a5:
                    01:89:a1:03:8b:53:d8:ff:10:2d:56:4c:6e:b6:9a:
                    13:02:76:08:60:c8:2e:d2:50:b6:6f:93:10:4d:5e:
                    f4:e8:84:46:82:fe:97:d9:62:ad:d5:7c:0c:3b:a6:
                    a8:a4:fe:87:1f:eb:2d:ca:3f:55:f5:01:08:f7:11:
                    69:c6:c0:27:76:bd:ac:41:61:d9:e9:75:9e:21:2c:
                    21:30:bf:67:0b:bc:86:e8:b1:c9:45:05:2c:83:b2:
                    0b:13:67:c3:f5:63:6d:c5:03:86:56:b1:f3:13:c2:
                    28:90:40:79:76:e4:06:41:46:c0:fc:3d:25:cc:62:
                    da:a1:6b:90:2b:ef:f1:e1:00:23:f6:e8:08:d3:3a:
                    26:56:b8:9f:fb:64:b1:fd:ee:6f:50:0c:5c:16:7e:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FF:75:7B:74:B2:AB:F3:5F:87:61:75:B1:53:24:B1:24:36:6A:99
            X509v3 Authority Key Identifier:
                keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5b:58:72:da:64:7a:fe:71:59:96:62:ad:2a:26:28:b6:9e:
         b5:8b:27:98:be:08:66:af:18:c8:b1:d8:43:f0:68:11:95:a0:
         3c:7f:19:47:35:b2:76:e3:8c:c1:54:af:7b:96:73:d2:46:50:
         13:65:3d:ff:f4:df:03:bb:f9:83:f5:87:47:a1:89:fd:d5:7d:
         39:61:b6:21:fe:46:74:85:41:c5:38:84:98:56:4e:70:73:e2:
         ba:a2:23:fd:a7:7f:88:5a:d6:67:10:e7:4e:1e:57:1f:26:3c:
         80:4f:8e:3e:f2:35:ca:63:da:3c:65:9e:3e:36:0b:b2:d1:7c:
         c2:75:80:ba:ad:e5:72:66:45:f1:2b:66:a6:8e:f4:2e:f3:83:
         34:16:5a:7d:cf:15:84:49:c2:6e:5f:82:b5:b0:23:25:38:4b:
         63:fd:fc:f9:b9:cd:10:3f:be:91:23:ca:ce:30:f6:31:87:73:
         bc:a9:ae:91:47:13:99:18:c3:5e:c9:6d:f6:5e:2d:7e:58:a9:
         54:dc:e2:85:59:8e:f2:94:03:31:e9:54:9b:da:33:93:91:9e:
         e6:07:ab:98:64:2c:cc:1f:25:01:7b:10:e9:d6:0d:41:15:f7:
         b8:cb:01:c3:74:e3:05:08:be:7d:48:bf:ff:13:21:15:a7:d9:
         60:24:fa:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:36 2025 by rpki-client