Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          1e75IEhzTa9TKsG1//nWQJ8a73dOdKDEbUadqB1w4tI=
Subject key identifier:   F0:BB:8E:5B:EC:D0:3D:71:6E:5C:65:FE:C7:72:65:98:5E:DB:7B:C4
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       0199FF903A02D9A6EE66AD1CB711FDF5467B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          09F4
Signing time:             Mon 20 Oct 2025 03:01:06 +0000
Manifest this update:     Mon 20 Oct 2025 03:01:06 +0000
Manifest next update:     Tue 21 Oct 2025 03:01:06 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: ybSbEfk0h52tQmP+vioXe3seG5DCqddR9LrmvbJOQoE=)
                          2: QGurDva1s4alg8iGu6qVYxbvUlE.roa (hash: eFsT2lU76i8V7l6B+0U5YuaE3bHnUDv4afzG2LbiiJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:90:3a:02:d9:a6:ee:66:ad:1c:b7:11:fd:f5:46:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Oct 20 03:01:06 2025 GMT
            Not After : Oct 21 03:01:06 2025 GMT
        Subject: CN=f0bb8e5becd03d716e5c65fec77265985edb7bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:3b:a1:2e:fb:66:61:51:d1:9e:d0:13:1c:
                    e1:6c:73:b4:18:de:7d:36:8a:ff:a9:d1:57:1f:d5:
                    33:be:ba:c9:30:e7:a4:8f:28:99:a3:b9:80:c7:32:
                    dd:d6:2b:de:d7:43:23:e2:ea:62:70:57:7d:90:84:
                    b0:f6:16:de:f7:e1:40:7f:78:5f:b0:69:9b:97:f2:
                    19:a7:93:9b:c1:d7:0d:d1:58:dc:65:e7:2b:c3:95:
                    d6:8c:5a:84:17:b8:7c:17:5e:95:93:f6:c1:90:42:
                    c1:52:af:3b:28:07:6b:18:c4:f3:d7:b8:a7:74:87:
                    c1:e6:16:da:33:8d:a2:3b:85:aa:a7:0a:a8:d4:e1:
                    db:1b:85:cd:63:62:ca:74:fb:55:4b:68:c0:f6:3e:
                    93:92:05:91:54:1d:fc:11:b8:4a:39:d7:06:7b:2c:
                    9d:86:22:79:7f:af:b3:86:18:c2:94:07:19:a9:96:
                    8b:1d:61:39:dd:cb:98:72:2d:2b:dd:d6:57:61:8d:
                    ed:9f:55:58:0e:0d:69:3b:a9:b2:09:27:46:a3:98:
                    d6:3f:66:6a:1e:4d:14:b0:dd:cf:c4:dd:a4:66:fb:
                    8f:b7:ff:a7:60:1b:47:71:f4:39:44:f9:be:1e:e1:
                    48:ca:12:bf:73:5b:fc:a0:f7:06:f5:91:dc:a2:c5:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:8E:5B:EC:D0:3D:71:6E:5C:65:FE:C7:72:65:98:5E:DB:7B:C4
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:db:6b:39:ea:72:71:d3:d6:2d:73:ba:c1:98:09:b5:b5:6a:
         b9:fc:93:f8:78:41:38:20:e2:e2:dd:98:29:2a:cf:31:5a:fd:
         16:01:6b:af:e3:ec:43:fd:a7:19:d8:70:6e:0a:de:5c:8d:f9:
         30:3d:52:44:91:89:e5:d8:b9:6e:a1:54:5e:14:1e:04:2d:22:
         c0:4f:38:f7:95:ea:1b:13:9b:b5:a5:32:ec:20:e8:03:dc:f4:
         27:68:95:69:b3:92:70:52:c0:78:10:74:aa:4a:27:36:7c:7a:
         d3:d3:d6:de:d4:da:38:01:49:0c:ac:02:07:e4:e5:79:89:cd:
         d6:a5:62:61:8a:23:85:50:bd:6a:d6:60:2c:ee:70:d5:80:42:
         5a:cd:4a:dc:a3:56:84:aa:84:10:9b:95:95:41:51:c7:16:b3:
         23:a1:0f:94:1e:a5:a5:1a:fb:00:5c:b9:c0:d5:ec:e3:00:54:
         da:1e:cb:06:c9:0e:dd:10:7e:59:c4:85:32:a3:69:0b:93:24:
         96:c4:75:2e:51:f8:7b:75:b4:53:06:1c:98:b1:cf:eb:f9:b0:
         89:41:2b:c5:9e:c8:9b:f1:cf:1c:5b:99:c0:cd:70:f9:b2:95:
         28:e1:a3:99:b8:04:58:b5:7d:19:ec:85:e9:7d:79:1e:7d:ad:
         8d:8e:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:47 2025 by rpki-client