Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
File:                     lDkZOu8f5NVwPLg033qrr4pL5Cw.mft (raw, json)
Hash identifier:          e89p9C0Z/Rv98Kutn9NkWWRIp6lL5yu9LJQNuzCEEBE=
Subject key identifier:   10:C0:10:97:9F:26:F1:71:53:C6:DB:66:53:29:50:8D:46:C6:E7:F8
Authority key identifier: 94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C
Certificate issuer:       /CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
Certificate serial:       0199FEB4C94EEC0FCA6A2F457DD9B43E3EF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
Manifest number:          15C3
Signing time:             Sun 19 Oct 2025 23:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:24 +0000
Files and hashes:         1: WNnJojurMk10LbGrLgZt0ifKwss.roa (hash: srIz81tLyVgircW7ks18A2CAzPVgxZ0XnEJTrVmvVb8=)
                          2: lDkZOu8f5NVwPLg033qrr4pL5Cw.crl (hash: OkHw5uYZ+7ETj5E5aR2l2KdsnCXSlGi7Ngm2VvFhptQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:c9:4e:ec:0f:ca:6a:2f:45:7d:d9:b4:3e:3e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9439193aef1fe4d5703cb834df7aabaf8a4be42c
        Validity
            Not Before: Oct 19 23:01:24 2025 GMT
            Not After : Oct 20 23:01:24 2025 GMT
        Subject: CN=10c010979f26f17153c6db665329508d46c6e7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:79:62:83:a4:b6:e5:96:9d:50:d0:5a:b2:79:
                    b5:7c:cb:0c:b6:bf:13:0c:95:69:51:93:71:1d:29:
                    37:14:e9:f2:c3:87:31:72:3d:0e:7d:b1:77:a0:a3:
                    11:f0:98:df:31:91:04:60:10:44:73:af:fa:2a:77:
                    42:45:16:9b:cd:94:84:05:f0:db:30:1a:46:83:54:
                    4b:f0:49:99:4f:11:2c:8c:c8:49:7f:8f:12:55:d6:
                    46:e9:14:44:e6:4a:80:56:b7:33:d7:33:43:51:f9:
                    b2:bd:60:d1:0f:66:d8:e2:32:62:f3:05:7f:19:53:
                    d8:f3:58:92:62:e4:d8:f6:11:ae:ab:1f:27:47:16:
                    1b:06:8b:38:f1:05:cb:8a:2b:2b:08:9b:38:90:d2:
                    8d:83:f5:fc:f9:80:77:ab:26:35:ba:2d:3c:c3:ce:
                    ec:60:b9:98:d5:be:ff:73:21:ad:05:39:da:ce:a6:
                    08:39:21:08:ac:4d:cd:dc:92:db:4f:8b:40:10:21:
                    ba:6a:6b:02:df:c8:67:a9:40:33:91:08:a6:8c:e4:
                    28:39:c4:96:62:d1:32:d0:ed:c4:28:38:49:26:a6:
                    50:e9:e0:05:8c:3f:41:a0:0a:39:3b:d8:e2:84:ec:
                    a3:bb:1e:4d:3b:fc:3a:48:43:15:3e:e9:33:8c:3e:
                    94:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C0:10:97:9F:26:F1:71:53:C6:DB:66:53:29:50:8D:46:C6:E7:F8
            X509v3 Authority Key Identifier:
                keyid:94:39:19:3A:EF:1F:E4:D5:70:3C:B8:34:DF:7A:AB:AF:8A:4B:E4:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDkZOu8f5NVwPLg033qrr4pL5Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ffce0e-c3ad-4c8a-9914-745cde74d01b/1/lDkZOu8f5NVwPLg033qrr4pL5Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:46:a0:04:bd:06:6f:f6:f2:79:0a:d9:0a:e4:8f:3e:de:df:
         e4:b7:c7:86:32:7a:51:c6:37:3b:1f:86:dc:26:09:48:6b:3a:
         77:43:ed:12:91:00:2d:db:98:09:8d:b4:c6:0a:28:44:92:8b:
         2b:5a:09:d6:37:ec:f1:a3:0e:9c:3e:2d:63:d6:3f:5b:f8:b2:
         93:5e:aa:1f:fe:81:0a:60:46:d8:84:e0:c8:ba:3f:92:e9:2d:
         db:fc:2b:b9:e9:49:9a:0f:76:86:89:91:02:f0:0d:67:97:fe:
         ff:26:22:3c:08:42:e1:99:06:1c:dc:1f:99:16:5d:f8:68:62:
         b1:3d:17:d2:61:dd:57:3f:d0:fb:30:39:28:c6:bc:19:24:16:
         83:a9:5b:e9:89:f5:d7:ad:24:c6:dc:06:cd:17:4b:44:e7:a0:
         fc:9a:4d:8f:ad:f4:61:70:31:e6:19:57:c7:2f:da:0a:30:2c:
         5b:5c:6a:8e:e1:a3:0f:fe:a1:f9:83:f7:5c:bc:05:ce:b7:b1:
         05:e7:1a:d7:ff:1c:ba:53:65:b0:62:b2:40:7d:f3:dc:c9:5a:
         39:cb:a3:11:87:db:3b:c4:a5:07:af:ae:39:fe:ff:15:95:b1:
         94:df:6c:b5:67:f3:d7:27:dd:a7:fb:31:7d:2a:1a:eb:27:de:
         e5:8e:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:26 2025 by rpki-client