Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File:                     _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier:          jm4Fj2XJyTS60WcsVCzQwAqnbxi7z0nR4zGXwv3Lnw0=
Subject key identifier:   28:7D:5A:6D:6E:2B:19:CB:6D:5A:1F:1F:44:DB:41:12:67:F5:28:47
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer:       /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial:       0199FEB4C375CDBAF74C358D5AF09785A230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number:          0EAC
Signing time:             Sun 19 Oct 2025 23:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:23 +0000
Files and hashes:         1: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: dM1Tbk/UINGpDfUa1a7d7r/OD2HekxYvNBsPH1WN8Uo=)
                          2: mmQZQMc3pi55Js-9aVzfnXjlBGY.roa (hash: 93uL4N1ZhKCAtYqh9gXaRNVs2vWfWmN+xYkYAO6a64o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:c3:75:cd:ba:f7:4c:35:8d:5a:f0:97:85:a2:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
        Validity
            Not Before: Oct 19 23:01:23 2025 GMT
            Not After : Oct 20 23:01:23 2025 GMT
        Subject: CN=287d5a6d6e2b19cb6d5a1f1f44db411267f52847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:46:f0:55:0e:4e:9f:46:4e:8a:e1:fa:c1:
                    ec:f6:71:91:d8:d0:8a:ce:2b:64:5f:3d:bb:fb:7e:
                    ec:99:86:8b:33:81:92:46:79:e5:bf:6b:46:ce:6b:
                    d5:16:c4:50:0c:d6:27:75:b4:81:6c:aa:c2:ea:08:
                    d9:ce:35:f6:df:1f:4f:6c:87:42:86:74:4b:9f:5f:
                    7a:82:40:3b:0e:40:4f:50:31:c4:9c:50:ea:f6:b3:
                    62:d4:5d:a2:84:ac:f6:40:dc:0c:1f:fd:dd:29:53:
                    51:23:e3:62:02:1c:42:89:03:cd:de:7d:2b:64:42:
                    f6:03:53:68:79:5e:94:f7:52:c9:84:30:64:66:8e:
                    ac:a7:3d:82:90:ef:19:a0:5c:2c:d6:88:15:cc:a5:
                    b0:e5:1e:e6:c5:d5:4d:fe:21:19:fb:bf:3f:9a:30:
                    f8:3b:45:6c:6f:67:57:d4:1d:c4:2e:f4:8b:3d:6d:
                    52:d3:d1:72:22:e5:99:c7:56:82:84:4e:89:88:92:
                    40:49:fd:04:71:97:a2:93:88:8e:7a:9d:cf:4c:0c:
                    e5:96:f7:94:37:10:fc:0c:98:4f:8a:c6:7d:ca:2b:
                    3b:78:0b:ad:7e:55:94:ec:10:f8:8c:7d:3c:ad:b5:
                    9a:aa:8f:e6:e8:3c:80:34:4f:6f:9e:69:73:21:84:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7D:5A:6D:6E:2B:19:CB:6D:5A:1F:1F:44:DB:41:12:67:F5:28:47
            X509v3 Authority Key Identifier:
                keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:19:9f:b6:5f:32:bb:eb:50:ec:03:53:21:01:75:6a:11:32:
         9f:8a:e2:0f:cc:ac:89:a4:cb:41:cd:db:27:6f:bb:62:2c:a5:
         35:0e:b2:95:a5:9b:26:ad:67:92:9d:d5:d1:c4:fb:8d:01:e3:
         09:fb:68:67:4f:0f:c9:95:97:52:6d:87:08:85:c6:bf:d4:2a:
         e4:f8:0c:6e:ee:0a:45:ec:be:d4:2c:65:26:56:a7:83:1f:55:
         36:57:b4:8d:b6:8f:45:50:bc:4a:79:2e:da:d4:b4:4b:a5:65:
         bf:cc:4b:e4:1a:75:5b:19:fb:a6:35:b7:80:65:15:5d:81:10:
         d1:86:13:59:d7:21:6e:eb:ac:94:33:72:b1:0c:d2:bb:f0:7e:
         3d:03:e8:d6:eb:36:96:6c:f9:59:93:69:69:52:27:40:8a:93:
         0a:52:0a:c8:03:91:01:99:21:e5:c4:28:61:17:5d:c0:89:de:
         50:08:34:ab:01:0f:17:a7:bb:3d:75:e6:e0:e1:96:f9:7f:cc:
         74:01:c2:57:ea:4a:0d:87:3b:50:a5:a1:b0:34:85:39:b5:2c:
         c5:b2:ca:28:eb:4a:a8:9c:3f:bb:94:ea:da:d4:ba:0b:de:cc:
         88:97:a6:29:00:15:3e:bc:8f:13:39:a6:66:1c:bf:27:6e:7b:
         ed:d5:d8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:20:23 2025 by rpki-client