Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
File:                     RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft (raw, json)
Hash identifier:          v1U86yThqqu+WMk05EW2SiI1JiMvFO/qxP5+BDC6DIM=
Subject key identifier:   DA:35:87:C3:5D:15:E1:3D:27:0D:E2:50:CF:16:34:0A:F9:5D:C8:14
Authority key identifier: 46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F
Certificate issuer:       /CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
Certificate serial:       0199FC8F8A916201632CD7ECC086180627CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
Manifest number:          10DD
Signing time:             Sun 19 Oct 2025 13:01:29 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:29 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:29 +0000
Files and hashes:         1: RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl (hash: Dt8NQqp9dTEbWYSJJfx28hcsByPysC6cabuftBWg240=)
                          2: mbYI3-hNPDwmapQzW6ANq2gKpA4.roa (hash: lOLT23JUefetUmb19vAU2x5VH7+ec+ZaMiJuuVxV7Oc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8a:91:62:01:63:2c:d7:ec:c0:86:18:06:27:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f3f9b41f45a0f97b2a6a811ca67a0402a0477f
        Validity
            Not Before: Oct 19 13:01:29 2025 GMT
            Not After : Oct 20 13:01:29 2025 GMT
        Subject: CN=da3587c35d15e13d270de250cf16340af95dc814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:57:1b:37:63:f9:4d:0c:c7:f5:8e:9a:2b:f0:
                    87:b2:e6:b1:8e:da:a9:0d:be:a6:b0:3a:54:0d:77:
                    29:4e:58:47:5e:ae:35:89:31:c8:33:c6:29:b3:d3:
                    08:c3:35:68:60:e9:2d:1f:48:7c:c2:27:9e:bf:fb:
                    7e:31:a9:39:1f:10:59:f6:cd:fe:5a:ce:98:9a:75:
                    ee:a2:a3:d1:c2:94:2d:27:77:42:a9:29:bc:dd:9c:
                    5a:db:49:99:ad:39:2b:b2:78:10:5a:af:e8:1d:73:
                    e5:a3:c7:92:db:c3:17:c0:02:f0:c5:dc:f4:39:1b:
                    4e:56:f1:5e:9e:02:94:ea:ee:e7:da:8b:65:0a:1c:
                    11:94:d8:8f:1b:48:b2:a8:44:a2:93:bc:e1:ac:9a:
                    10:07:ea:8d:3d:ee:de:8c:65:29:82:63:d5:77:05:
                    d9:c2:44:65:04:04:fd:d0:24:7d:27:24:a2:7d:f3:
                    a8:f2:24:ed:c6:8c:11:35:0e:cb:ed:ce:84:53:85:
                    9c:e8:04:01:e9:da:fa:92:1f:52:26:b6:85:cf:cc:
                    7c:15:a0:0c:f1:07:d4:91:74:ec:c2:e3:ba:5f:29:
                    c0:d6:0a:9d:4c:60:4b:cc:9f:6f:aa:34:93:a5:01:
                    90:fc:77:42:dc:b7:f5:87:db:ca:66:04:57:cc:4c:
                    fc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:87:C3:5D:15:E1:3D:27:0D:E2:50:CF:16:34:0A:F9:5D:C8:14
            X509v3 Authority Key Identifier:
                keyid:46:F3:F9:B4:1F:45:A0:F9:7B:2A:6A:81:1C:A6:7A:04:02:A0:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvP5tB9FoPl7KmqBHKZ6BAKgR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/25daa4-f7fa-40fa-9250-996326ca7dd6/1/RvP5tB9FoPl7KmqBHKZ6BAKgR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:89:b3:2f:51:ef:f5:38:39:07:a4:de:cb:27:7d:5e:09:a1:
         b7:c0:35:d6:84:11:8d:88:c2:1a:2f:c7:9a:43:61:dc:d5:c5:
         a1:e7:d3:53:39:74:5f:98:cb:6d:ce:a7:06:08:b0:54:74:ff:
         f2:4a:7c:51:f0:cc:54:be:0b:da:65:65:ab:c6:5c:46:04:36:
         6e:15:56:a1:8f:0e:36:ef:d8:16:4c:20:9d:5a:61:2c:98:ae:
         f1:84:17:8d:c3:a0:4a:a5:cf:88:7a:b8:86:3d:b4:d9:ae:fd:
         c8:06:40:45:06:f2:f4:fb:6c:77:59:d2:bb:4c:4b:7d:65:21:
         8c:d9:20:ca:29:d2:9f:19:4a:fd:88:7a:f3:eb:80:5e:18:55:
         94:cf:d6:b2:13:54:de:cf:c1:2d:8e:57:84:d6:39:1a:d8:7b:
         7c:72:96:e7:c0:24:7a:15:9b:7c:18:f6:06:ab:b9:5e:da:4c:
         57:27:a0:24:d8:b6:fc:27:86:62:9c:e1:42:70:ca:62:49:f7:
         c8:1c:81:94:97:ca:7f:48:e9:f4:86:74:41:cd:6e:8b:dd:88:
         3e:9d:33:6b:a7:90:08:07:d4:ef:31:db:6e:5f:4d:1f:41:ec:
         33:fe:cf:3d:9d:6b:1a:dd:4d:1a:f9:96:9a:30:05:fb:89:05:
         2c:d8:66:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:08 2025 by rpki-client