Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
File:                     duBenuWUd-AVX8HtwKGDByl2bog.mft (raw, json)
Hash identifier:          CwbHiO7WgfpkoAIeTLrIlBwsnOvqgJMxmwF+TIM8sJo=
Subject key identifier:   72:3D:75:D1:E9:C2:47:4E:7B:E9:15:9F:70:81:B3:12:F6:62:E0:76
Authority key identifier: 76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88
Certificate issuer:       /CN=76e05e9ee59477e0155fc1edc0a1830729766e88
Certificate serial:       0199FAD7BD41F8E9F548B69442C1796FD2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
Manifest number:          1670
Signing time:             Sun 19 Oct 2025 05:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:06 +0000
Files and hashes:         1: 1-eNfPNgGjJz34a_6zifXZRNCWXw.roa (hash: BrqTM2h6iG7WyfhfDjhQFT8qhh74OvrPhMC05Ggy8tQ=)
                          2: duBenuWUd-AVX8HtwKGDByl2bog.crl (hash: rJrQcGWAKaCqMeaSP8KaHTYCWlL625nUnZEMfeoiKi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:bd:41:f8:e9:f5:48:b6:94:42:c1:79:6f:d2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76e05e9ee59477e0155fc1edc0a1830729766e88
        Validity
            Not Before: Oct 19 05:01:06 2025 GMT
            Not After : Oct 20 05:01:06 2025 GMT
        Subject: CN=723d75d1e9c2474e7be9159f7081b312f662e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:6a:60:8d:9b:66:99:6c:1d:dd:c5:2f:3b:
                    97:91:c9:47:47:2f:b7:d7:41:57:6d:f3:1f:28:6c:
                    51:21:57:5e:cf:76:e6:b5:23:2f:92:ec:21:5a:5e:
                    33:85:34:76:d8:3a:4f:fb:c7:a8:5c:a9:e2:04:ab:
                    ef:e1:1b:e0:9b:54:6a:2d:d6:f7:66:16:81:af:49:
                    8d:66:7b:af:70:c7:05:ae:d7:52:f8:20:ee:be:e8:
                    6f:96:ea:6a:6b:5a:81:72:be:22:d6:1a:cf:16:7f:
                    07:2c:48:69:53:39:35:38:a3:12:8c:d2:55:5b:e1:
                    b4:56:33:2a:f8:99:0a:c1:ef:1c:d9:61:b6:9d:4f:
                    10:1d:55:15:37:12:cf:75:e9:91:00:3b:15:06:f9:
                    f9:3d:59:36:1d:42:cf:4b:98:be:d1:3a:80:ec:36:
                    ce:ad:3d:ad:2f:63:04:8a:5e:6e:3d:5f:cc:7e:27:
                    08:c2:e4:52:83:d8:f5:bf:7a:f6:da:f7:1e:85:38:
                    01:22:3d:6e:af:3a:dc:56:75:53:b7:5f:79:09:2e:
                    ac:73:f4:3f:7d:4e:37:ae:f0:f1:26:8f:81:c5:02:
                    dc:61:2c:81:ac:21:54:c9:ee:f1:6c:22:97:a3:c9:
                    c0:da:8f:bf:e5:94:c1:dd:a6:f4:df:64:8e:4d:7f:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3D:75:D1:E9:C2:47:4E:7B:E9:15:9F:70:81:B3:12:F6:62:E0:76
            X509v3 Authority Key Identifier:
                keyid:76:E0:5E:9E:E5:94:77:E0:15:5F:C1:ED:C0:A1:83:07:29:76:6E:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duBenuWUd-AVX8HtwKGDByl2bog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66e51a-fe82-4b5d-9884-b533f4941afe/1/duBenuWUd-AVX8HtwKGDByl2bog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:0c:52:66:dd:b6:b6:dc:b1:c6:4b:00:83:af:99:ae:01:
         79:b1:dd:bc:0d:9b:6a:e7:9c:72:2f:e0:18:91:d8:07:b1:40:
         35:0d:08:ad:63:d6:3d:be:f4:6a:2c:3b:e7:ba:b5:e6:82:84:
         a5:54:e9:63:cc:0e:8a:e2:2a:db:ea:51:60:b6:62:4c:c3:c0:
         51:90:d6:e5:21:45:8f:6f:9c:a5:fa:e6:9d:31:48:94:73:25:
         fc:0e:98:9c:ac:4a:a7:4d:2c:a9:e6:58:3d:dd:ec:aa:39:8e:
         d3:db:9e:1b:1b:b2:d0:a3:6b:75:af:e8:13:b6:90:3f:a3:a6:
         60:5e:9c:2d:e2:44:c5:5f:07:88:2c:7d:97:3f:67:f1:6c:c3:
         3b:e7:14:d2:73:a5:ef:30:7e:cc:ab:62:6c:ac:4d:1e:89:43:
         08:69:40:6d:97:e5:6a:51:ea:7c:a9:5d:02:5c:db:9f:24:62:
         7a:ad:c3:63:7a:8c:80:33:23:a9:8c:c9:a2:2a:99:96:28:2a:
         22:52:3a:b5:b2:2f:4e:34:75:51:51:55:ef:f7:43:2b:28:37:
         3e:e4:fa:09:dc:35:04:6b:07:43:54:2e:b8:d3:e8:45:fb:0e:
         ae:9f:7c:b6:97:25:17:75:27:10:86:e4:bd:b7:21:b5:c8:13:
         7d:61:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:00 2025 by rpki-client