Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
File:                     dvkMwSPQ0gRp05xsNFXzHqYSP04.mft (raw, json)
Hash identifier:          kOlMfOhzqG7VAWn/Qx0X+/rw/TCnNik75I0/rzTwWs8=
Subject key identifier:   4B:E1:BF:6F:A7:65:92:26:CA:78:D4:94:52:A9:EC:62:B0:8D:9F:FB
Authority key identifier: 76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E
Certificate issuer:       /CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
Certificate serial:       0199FFC870D4263B635871050D3363385F79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 04:02:30 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:30 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:30 +0000
Files and hashes:         1: dvkMwSPQ0gRp05xsNFXzHqYSP04.crl (hash: PIB8rGuuWy3VvwtKLOc6yAZOfzn5OdPzXcAdCIJ+4p0=)
                          2: u3lxxc1lkavM0xc30bqZfpWxvHo.roa (hash: UHLRAbtjmSCDadx2fBrU+RDEoeooREQATwB2er11mzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:70:d4:26:3b:63:58:71:05:0d:33:63:38:5f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f90cc123d0d20469d39c6c3455f31ea6123f4e
        Validity
            Not Before: Oct 20 04:02:30 2025 GMT
            Not After : Oct 21 04:02:30 2025 GMT
        Subject: CN=4be1bf6fa7659226ca78d49452a9ec62b08d9ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1f:fa:9e:45:c4:72:d8:dd:a0:17:7a:5c:69:
                    9b:cd:ee:25:7b:e4:c6:8c:81:12:49:09:2e:2c:d3:
                    ce:a8:99:58:89:44:97:12:b3:51:94:2e:c5:8f:05:
                    a0:cf:e3:a6:b2:c8:ab:b7:90:7f:74:dd:1a:80:58:
                    26:d4:bb:45:cf:c3:98:32:56:57:38:31:9a:f8:5f:
                    96:68:81:f0:d1:6f:6b:b1:3f:02:08:26:35:0c:63:
                    0f:50:69:f4:a8:2d:7a:00:47:e9:35:fe:20:30:52:
                    d4:d5:54:dc:f3:3b:5e:52:c5:cf:33:6e:ec:a1:2e:
                    7f:5a:62:f3:95:6b:7b:9d:17:77:be:02:e9:bc:b4:
                    f5:53:b3:30:70:60:6a:af:b2:c0:54:e5:37:43:f0:
                    23:fb:49:77:5e:23:90:d7:d1:30:fa:98:56:7a:fb:
                    1f:a2:89:18:b3:6d:19:41:8d:d3:95:00:1e:0c:d4:
                    ef:e5:13:d1:70:6b:23:c0:1d:b4:99:ec:a6:33:81:
                    c8:85:1f:b9:32:f7:8f:b5:77:6c:15:31:7c:c6:c9:
                    88:6f:35:74:9d:45:61:6c:72:e8:27:e6:8a:89:05:
                    5b:9c:27:80:e9:b0:89:33:61:e5:55:26:e6:fb:a0:
                    12:82:17:73:ea:e8:e2:fb:96:1c:42:19:aa:d4:e0:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:BF:6F:A7:65:92:26:CA:78:D4:94:52:A9:EC:62:B0:8D:9F:FB
            X509v3 Authority Key Identifier:
                keyid:76:F9:0C:C1:23:D0:D2:04:69:D3:9C:6C:34:55:F3:1E:A6:12:3F:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvkMwSPQ0gRp05xsNFXzHqYSP04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/82f901-3f48-429a-8365-7af574941936/1/dvkMwSPQ0gRp05xsNFXzHqYSP04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:90:0f:e5:5f:78:d7:dc:c4:d8:d9:6c:9d:3d:c1:8b:89:36:
         44:54:86:0d:04:25:3f:6b:5c:86:2d:86:25:8d:c2:49:64:ef:
         12:f6:69:94:56:9a:95:cf:80:af:ed:55:04:24:0e:b9:97:82:
         9d:b1:c3:f2:d0:89:62:fe:dc:b6:a8:e4:ae:f7:52:e7:27:f9:
         41:dc:09:37:29:66:0e:2e:10:41:94:c7:fb:69:2c:0a:63:ad:
         4c:27:28:f5:25:55:b4:c7:1d:71:f2:64:70:2d:82:e0:cb:77:
         9c:93:9e:cc:e9:68:0d:38:3c:2c:a2:44:2e:e4:bf:1b:63:dc:
         3b:3b:0c:6b:cb:0f:6b:f3:0b:5a:09:8a:8a:ba:9f:7e:99:2c:
         f0:8c:0b:14:54:34:43:6f:57:a0:4d:b2:b6:cd:cf:e5:2f:eb:
         8c:af:7f:47:da:6b:b5:19:f3:3d:95:48:c2:b7:59:5a:9e:f9:
         be:8a:67:35:29:c3:40:2b:07:ac:c4:90:e2:e1:5e:b0:d5:53:
         2b:e3:2d:a2:a5:6f:e7:65:54:df:0f:39:ba:df:01:dc:a1:dc:
         10:67:a8:de:99:53:03:00:15:79:37:95:31:ad:47:22:1f:e9:
         60:be:47:23:94:5f:2c:ec:5b:3c:d6:83:71:18:67:58:55:dc:
         62:9e:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:44 2025 by rpki-client