Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
File:                     CxxtDecMxRgFtjpeIydiJSXQdbE.mft (raw, json)
Hash identifier:          vwaOqOXRSiPFg/iKiC32SFl5XtLbpKcilfyMX4zSsiE=
Subject key identifier:   1A:72:07:77:49:1C:E7:E8:46:2E:60:BB:A2:AF:BF:48:C7:F3:89:A4
Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1
Certificate issuer:       /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
Certificate serial:       0199FC8F1D5EECDF66681C1BCE4E7E1951EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
Manifest number:          0867
Signing time:             Sun 19 Oct 2025 13:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:01 +0000
Files and hashes:         1: CxxtDecMxRgFtjpeIydiJSXQdbE.crl (hash: EroDzGRN0pZ1B/OoB2UOQac/n4HW11ieDwCk1/mApdA=)
                          2: EWTxX8xHCQ-y0eC-O4N3o3QoyvM.roa (hash: dVuWzw7AA4Zse8atqpUG5cLLbJKhbiKvMBsraKeVoHo=)
                          3: MJmSheQwhqTa8TcshZRbeEjyzHg.roa (hash: Gp/YgLDeJmP+HyXt6WhUwXyvRtnPi/acuut1qwHPb1I=)
                          4: NK7GdHMYRv_hDeWPBmQND98lvj8.roa (hash: jBbpvQcqJ1jdxJjUVdSmEBEQDhr0KhV9KMUkwMQPtk8=)
                          5: mx1zhwHtw-uurdoc1Rs-ub83PY4.roa (hash: O6YFpkOTCBT8CmU8XHKba4R6Y/9CL3lbQUtfKViPzQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:1d:5e:ec:df:66:68:1c:1b:ce:4e:7e:19:51:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1
        Validity
            Not Before: Oct 19 13:01:01 2025 GMT
            Not After : Oct 20 13:01:01 2025 GMT
        Subject: CN=1a720777491ce7e8462e60bba2afbf48c7f389a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:62:32:df:d2:17:d1:50:95:ff:bf:00:8d:31:
                    cf:40:17:63:fc:27:65:7f:e3:5f:da:70:b6:1c:7f:
                    eb:f1:3f:22:1a:de:2f:db:33:0d:d7:98:51:9c:bc:
                    d3:c8:23:b2:fb:84:d0:ab:4d:d3:23:40:19:d9:a1:
                    a6:83:ee:86:29:0e:c4:ae:2f:82:29:2c:57:77:81:
                    fc:57:a1:cc:35:e0:eb:82:72:ff:f9:c0:9b:76:3f:
                    38:2f:60:65:24:15:13:14:a9:a7:48:68:27:b6:b5:
                    63:67:61:86:3f:d2:f2:3f:50:ef:4b:4d:e7:26:fa:
                    7b:05:10:b2:ab:0f:5e:24:5b:c4:ef:ed:d5:05:c8:
                    ec:e2:b8:ef:4e:43:fd:77:ba:b6:61:90:b2:bf:bd:
                    8c:43:cf:5c:06:df:36:0d:b9:c3:6c:51:d8:9b:65:
                    a6:76:ee:6e:74:29:c3:ef:89:f4:65:76:80:e8:ab:
                    9a:8a:be:78:02:09:e3:69:4e:d8:26:d8:94:f1:18:
                    95:41:13:e0:98:b8:83:74:5e:bc:e5:5d:8b:00:87:
                    4f:2d:62:7a:83:9d:2a:36:53:b6:70:31:d1:37:82:
                    86:df:65:61:64:37:31:b8:30:d3:57:30:fb:bb:b7:
                    c4:a3:1f:dc:ea:62:65:31:47:dd:95:cc:97:e6:aa:
                    be:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:72:07:77:49:1C:E7:E8:46:2E:60:BB:A2:AF:BF:48:C7:F3:89:A4
            X509v3 Authority Key Identifier:
                keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:27:2b:c4:d2:74:30:ed:59:92:4e:fc:7d:a9:c5:30:c3:e7:
         6a:97:a1:7d:57:bb:67:dd:20:29:51:96:da:74:27:ab:28:ad:
         ad:a2:5a:1e:fe:3d:9d:95:b5:ac:c4:ce:a1:1c:75:31:38:88:
         d0:80:bb:02:6c:c3:7f:86:9e:1c:32:f6:e6:3f:db:2c:cf:1d:
         b7:62:58:99:90:82:d2:0f:75:e0:d3:3d:89:3e:86:be:e6:42:
         c7:25:bd:e2:da:65:e9:a9:33:f1:1b:1d:da:1c:18:f2:de:fe:
         8c:96:41:04:60:b1:a6:28:90:2f:9e:57:e1:fa:56:7f:5f:0c:
         0e:34:14:ef:81:49:3e:69:06:73:2c:a5:7e:f6:09:34:0c:23:
         a2:fb:ff:ab:7e:d8:24:ce:42:86:74:bf:42:bd:78:6a:0e:94:
         f3:7f:ce:93:5d:9b:5e:59:cb:09:1f:b3:ad:4b:01:96:0a:46:
         a0:ba:df:df:cf:19:b0:b7:ad:77:dc:f3:7a:ad:c2:cb:db:27:
         d7:01:e2:d9:1d:39:30:bf:9c:b4:64:00:b6:97:ac:82:74:06:
         ff:e2:fc:95:0a:1a:3c:53:14:75:26:e6:6e:d9:07:4c:23:77:
         88:6f:19:69:67:b9:e1:d6:15:3b:fd:39:02:e3:a3:54:20:66:
         82:3f:4f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:32 2025 by rpki-client