Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
File:                     LXR59FZDorguENq_c-_vdwOx4tI.mft (raw, json)
Hash identifier:          bDvFDp7yTfMRR3dS24vDxPkKMaVbKLEzM+rWD1WDzQc=
Subject key identifier:   6F:8A:90:D4:CB:BC:B7:EB:9A:4E:74:C0:C2:88:CC:90:36:6A:9B:AF
Authority key identifier: 2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2
Certificate issuer:       /CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
Certificate serial:       0199FC582EEF33EEBB85A19EEF1E7BB5EE37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 12:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:01 +0000
Files and hashes:         1: LXR59FZDorguENq_c-_vdwOx4tI.crl (hash: lHDQcjuvDUCz9jCzsruWLxf29E0qb+4U74gBMNoYZw8=)
                          2: unRbkKxOnR98ml1J5g6bUjmiKYg.roa (hash: dSoLjUhYv2hRLBN1CZDtznSmSO++ZyOw/lIWfxfiQjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2e:ef:33:ee:bb:85:a1:9e:ef:1e:7b:b5:ee:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d7479f45643a2b82e10dabf73efef7703b1e2d2
        Validity
            Not Before: Oct 19 12:01:01 2025 GMT
            Not After : Oct 20 12:01:01 2025 GMT
        Subject: CN=6f8a90d4cbbcb7eb9a4e74c0c288cc90366a9baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:5e:01:b1:5b:e6:1d:bd:71:00:45:23:c4:
                    03:6a:a9:0d:a7:40:86:19:02:9a:4e:92:d4:70:46:
                    50:86:38:d5:94:99:5f:01:e3:f9:e7:21:25:b0:f3:
                    e4:19:c9:93:7c:82:91:65:7a:73:de:fa:19:13:9e:
                    f5:e8:3d:60:3d:22:89:2c:d7:f3:ed:5f:69:46:a0:
                    7a:e7:e0:32:17:6a:96:ad:d4:23:1a:60:55:4c:8a:
                    f3:c0:53:9c:4f:52:51:f4:c1:0f:ef:3d:0e:41:54:
                    0d:ce:d4:2a:d3:ea:ad:16:d4:a2:a4:ec:ea:aa:69:
                    3e:b1:d0:20:a1:84:c4:5e:ee:2b:d1:4d:b7:1a:48:
                    36:2b:f8:92:ba:a9:21:99:a7:8d:c4:48:1f:2d:94:
                    50:6e:5e:d9:a9:33:71:6f:e2:9a:94:7d:92:2a:ff:
                    47:b2:6b:4b:db:66:41:7e:70:8b:76:26:24:f7:f0:
                    af:1b:e3:ff:04:c9:a0:84:d9:ad:e0:fa:1d:52:a7:
                    e8:17:d4:06:a2:3e:63:f9:ce:a1:77:74:06:6f:bc:
                    f4:15:a2:49:87:f7:12:3a:b4:26:bc:81:02:25:4d:
                    41:78:e8:22:c4:fa:b9:9f:6a:b9:a4:e5:48:e1:ed:
                    17:75:de:a1:7a:3c:fa:02:e2:11:33:00:ff:a3:7b:
                    14:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8A:90:D4:CB:BC:B7:EB:9A:4E:74:C0:C2:88:CC:90:36:6A:9B:AF
            X509v3 Authority Key Identifier:
                keyid:2D:74:79:F4:56:43:A2:B8:2E:10:DA:BF:73:EF:EF:77:03:B1:E2:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXR59FZDorguENq_c-_vdwOx4tI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9dfe1e-cd74-471e-91bf-0fc3fdcf59ae/1/LXR59FZDorguENq_c-_vdwOx4tI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:69:cc:33:21:2d:72:d2:29:b6:2c:13:63:e5:cf:d6:31:d5:
         8b:20:80:08:a6:1e:f1:ab:40:83:52:a8:61:e7:74:5b:f6:a4:
         ed:3f:f7:1e:72:8e:42:ba:c8:fb:a8:4a:1c:f6:0c:1e:59:bd:
         f7:75:67:63:1a:a6:91:d6:42:11:64:fb:23:93:56:f7:87:87:
         d4:22:50:cf:7b:01:03:ea:cf:97:49:f2:4e:ed:fa:15:d0:a1:
         04:c4:68:fe:9c:5e:fd:61:ec:95:68:32:06:60:3f:8c:bc:35:
         b0:6d:0b:87:d3:75:24:27:e5:46:5b:da:0d:2b:64:c1:2d:fd:
         a8:e3:ad:1a:21:19:8e:43:7a:a0:ed:9c:63:6c:8c:b2:04:67:
         bf:eb:06:e6:01:62:b9:fe:75:44:0f:21:68:80:0e:b3:1a:c7:
         5a:b8:18:01:94:8e:6c:97:81:a8:91:20:96:6b:67:92:f1:89:
         d4:d8:5e:09:27:cd:ce:86:59:0a:59:af:90:5d:31:c5:b2:f5:
         a2:2e:65:54:d3:17:fa:21:44:18:6a:e6:5f:67:81:03:16:df:
         69:ba:c6:fc:d3:44:04:88:c7:88:a8:11:ab:6e:25:4e:ae:1e:
         e2:3c:c6:41:68:c0:2e:8c:db:ae:42:6f:c5:fb:5f:b7:69:c2:
         87:72:3d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:58 2025 by rpki-client