Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
File:                     2Lkq9Et5_ArPZBA-tfszepHuzZo.mft (raw, json)
Hash identifier:          6SINXqU/1Pf3JR5AFVbu5ovwUi0jpyHaRLDpnUsyZTQ=
Subject key identifier:   50:AD:D4:CC:17:38:69:E6:C8:8C:71:AD:17:F2:7E:6D:BB:33:A8:A0
Authority key identifier: D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A
Certificate issuer:       /CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
Certificate serial:       0199FDD9659F9590191E0E92254C795BA02D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
Manifest number:          0D8E
Signing time:             Sun 19 Oct 2025 19:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:46 +0000
Files and hashes:         1: 2Lkq9Et5_ArPZBA-tfszepHuzZo.crl (hash: MNW/35+RduS1zLrHOEA0ChnuR/fgjTFby/KX3wZWZfk=)
                          2: 7kBeMxQr55u4jzjtTCDEYGM6EEQ.roa (hash: 3w7GhztTuWSS7ow4ABWJ4t+Vqt8iLOefb3FlbZATOr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:65:9f:95:90:19:1e:0e:92:25:4c:79:5b:a0:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8b92af44b79fc0acf64103eb5fb337a91eecd9a
        Validity
            Not Before: Oct 19 19:01:46 2025 GMT
            Not After : Oct 20 19:01:46 2025 GMT
        Subject: CN=50add4cc173869e6c88c71ad17f27e6dbb33a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9b:8e:d3:25:ee:d9:67:4f:91:2d:6e:63:aa:
                    6c:1d:cc:fe:8b:cd:2a:a6:91:e8:e9:2b:a3:8a:5d:
                    c8:d8:3b:53:48:bb:20:09:68:da:ec:da:08:23:cf:
                    02:18:9d:2c:02:59:1e:b8:83:c1:05:b0:98:d7:c2:
                    65:3a:44:8d:72:bc:2e:da:48:20:37:28:53:e4:52:
                    cd:34:ca:51:01:e2:ed:b5:27:9a:5d:16:13:a8:fa:
                    c3:84:4a:2e:7b:f3:30:53:58:4c:a0:79:55:e6:d7:
                    1f:43:78:07:53:6c:d2:93:d4:b1:a1:02:3c:15:44:
                    af:80:15:92:a6:2b:ea:bb:61:f3:d8:c8:be:3d:d9:
                    4b:0e:5f:2c:0a:de:4c:14:c4:eb:bd:11:f5:c8:e0:
                    5a:d0:19:df:26:01:82:31:90:34:c5:84:f1:17:33:
                    03:7f:35:ee:55:0c:a4:32:30:d7:d1:52:f1:16:1f:
                    ae:54:36:da:79:9b:b8:2c:b1:f5:da:80:9a:71:ab:
                    2d:4c:62:db:25:4b:72:1b:05:d9:1c:fd:f5:db:f9:
                    83:3a:7d:5b:22:6a:4d:b3:2a:bc:57:2e:8e:58:7d:
                    cf:d4:e6:c0:a1:ee:f2:53:27:6d:ba:4c:15:1c:fd:
                    53:38:6a:32:87:90:f1:4a:94:1f:80:ef:92:43:5c:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AD:D4:CC:17:38:69:E6:C8:8C:71:AD:17:F2:7E:6D:BB:33:A8:A0
            X509v3 Authority Key Identifier:
                keyid:D8:B9:2A:F4:4B:79:FC:0A:CF:64:10:3E:B5:FB:33:7A:91:EE:CD:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Lkq9Et5_ArPZBA-tfszepHuzZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/eac86b-6e91-4bbe-a203-67ac97118cac/1/2Lkq9Et5_ArPZBA-tfszepHuzZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1f:67:3f:bf:92:45:79:9c:d2:27:c9:d0:b9:16:5e:fa:6b:
         9d:51:3a:d1:b3:ba:93:1f:08:23:be:87:30:51:9c:39:94:79:
         5c:eb:06:54:2b:b5:6c:23:c4:52:9d:a9:8c:61:c9:2c:10:8e:
         28:d6:25:33:17:95:af:d9:d2:90:a2:c8:2b:3d:72:aa:ca:66:
         5e:51:2d:22:ef:4a:43:af:8a:3c:38:b5:3d:86:b2:e5:7d:b7:
         19:cf:44:6a:6b:d3:d5:ea:2b:a3:67:b2:d0:fb:90:ce:16:5d:
         68:f3:db:8e:d2:30:0b:25:d2:bf:f4:d0:bf:5e:ee:72:a6:63:
         c9:f8:85:57:b5:34:e4:8b:f5:c6:c0:00:ac:1f:d1:ae:bb:b2:
         cd:15:ec:8d:47:b1:a5:06:b0:c6:2c:d2:7b:65:9c:e6:6b:98:
         9e:7f:65:83:89:d8:5e:ea:4b:da:36:72:fc:2e:93:7a:cf:33:
         bf:6c:c4:6a:f0:a2:81:ec:26:50:f1:1c:43:b9:63:5c:97:7c:
         1a:bd:78:90:85:f2:37:32:4a:cc:9c:30:74:72:2e:60:93:f1:
         ab:f6:20:1b:94:87:54:ee:f7:bc:53:1e:1f:f5:b3:df:78:99:
         7d:4d:7b:eb:fb:4f:b5:37:8e:c2:0e:3a:1f:d2:c3:10:11:15:
         3f:7e:54:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:41 2025 by rpki-client