Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          OlBKb0CdgEreUCsN+DL/L85kDNwZVdNCC78yvymoRh0=
Subject key identifier:   7B:7C:EF:C1:89:28:4C:DD:D1:37:EA:CB:23:DB:2F:B2:BA:41:97:F6
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       0199FCFD568B1795A5834C9ADBE2FB286470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0B4D
Signing time:             Sun 19 Oct 2025 15:01:25 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:25 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:25 +0000
Files and hashes:         1: Zeibnx0jQfHrKCngsBYyNBtyCY8.roa (hash: 1tTIgh7rGioAClAEx5jMHBx5r9sM7mmraGPRQnv9pR0=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: 35I7bxTsdlP2+8V9+OMMjaGIZQExoy8/z1vjMZdEHw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:56:8b:17:95:a5:83:4c:9a:db:e2:fb:28:64:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Oct 19 15:01:25 2025 GMT
            Not After : Oct 20 15:01:25 2025 GMT
        Subject: CN=7b7cefc189284cddd137eacb23db2fb2ba4197f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:10:34:09:64:8d:5c:e8:e3:8b:db:ad:c9:
                    ef:af:09:23:a5:3b:57:03:8c:c3:2c:30:b8:4e:a6:
                    76:6e:3f:44:6d:fa:44:ef:1e:1e:c1:e7:ad:a2:43:
                    23:1a:4a:cb:ed:ba:fb:6b:ed:8b:3c:04:28:9b:d7:
                    09:b6:9e:fa:0b:c3:17:9e:f0:7e:e3:2f:c1:af:45:
                    34:78:cb:be:f1:c3:e5:8c:ff:d0:86:57:4e:6a:07:
                    ed:27:48:65:7f:e7:30:4e:44:c0:c2:e8:dd:72:8e:
                    d1:98:73:17:41:24:a8:44:5c:61:cd:80:7d:4b:f8:
                    1d:e2:a2:25:31:df:13:e5:24:0a:f3:98:f3:b2:66:
                    e8:fb:ff:bc:03:21:8d:4c:7c:1a:fa:ef:a1:92:20:
                    13:75:ab:df:8e:47:49:d4:e7:05:de:c0:53:87:77:
                    20:6e:fe:c0:24:d2:de:7f:7a:4a:e4:58:71:76:fc:
                    fb:de:d3:5b:0c:3c:3a:7c:b7:99:2a:e3:dd:17:c3:
                    9a:b1:d4:90:5d:d8:5d:22:69:e0:87:11:a7:97:81:
                    0f:0e:c1:23:73:23:44:3a:28:05:13:f8:8c:1f:5f:
                    64:4c:89:75:f8:31:46:70:6c:59:73:96:0e:9a:e3:
                    cb:18:8d:67:43:25:58:94:7b:79:1c:5e:da:88:f1:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7C:EF:C1:89:28:4C:DD:D1:37:EA:CB:23:DB:2F:B2:BA:41:97:F6
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:dd:b5:61:22:12:f2:16:bc:e8:1b:16:d1:1c:fd:c2:86:35:
         27:54:dd:f4:74:34:1c:a7:f8:d0:6d:17:c7:70:68:28:b5:83:
         84:92:b0:eb:c6:83:f3:89:26:3d:3f:04:37:d1:62:ef:4c:bc:
         9f:92:2b:0b:31:f4:10:89:54:34:96:ad:c1:da:de:22:e4:aa:
         86:18:34:9f:68:9d:15:3f:dc:19:52:a0:e2:7d:7e:ce:4a:b7:
         38:19:9c:d2:2f:2d:e1:4c:55:f0:45:86:46:dd:db:76:a4:6c:
         fd:98:f2:89:61:92:4b:5d:af:b6:48:4c:f4:53:23:fe:4c:53:
         52:8f:ff:8c:6e:d4:f4:91:8d:5d:36:6d:b7:fd:0f:c4:17:32:
         68:09:a7:f2:3c:ef:f0:47:d0:fc:9a:4f:5a:38:08:83:24:63:
         c8:81:75:7d:3b:92:22:b4:4b:aa:a1:9e:a0:22:dd:89:1d:f8:
         4d:23:5d:11:2b:5e:c2:09:9f:a3:c1:66:1f:eb:6a:01:42:7a:
         ae:71:99:e1:b6:7b:aa:32:13:1b:62:bb:36:58:18:7a:d5:dc:
         31:59:6e:27:90:1f:ca:d7:e3:a7:0b:62:4d:29:40:ea:f3:a0:
         5d:a3:3f:53:8d:22:a2:94:9a:2d:13:81:6b:a8:5d:ab:02:e1:
         3b:e9:e4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:48 2025 by rpki-client