Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File:                     0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier:          x/fvyPAqHXvJokpD+QADtSBNmM/+EtRtoTCCLBRcM0Y=
Subject key identifier:   3E:FF:C3:6B:E7:E5:87:14:FC:F5:22:11:D3:61:91:9D:CF:36:0A:72
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer:       /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial:       0199FCFD6272DAF927D336F159E66F686D90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number:          01D2
Signing time:             Sun 19 Oct 2025 15:01:28 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:28 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:28 +0000
Files and hashes:         1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: JeeWNTgjUFQrPM1OC/O6h1gkkKh3DCxHlo6SBoERbvk=)
                          2: FyqKK2FcK12A9-k5axnFf2sz21k.roa (hash: W5mhlrOLXBrpKomBUnhpTyesgUMLSIHoT9QMJTSp0oA=)
                          3: rF6Gqj7_srm_DIMIqHN-GdQzygE.roa (hash: 2gAliij8n2m8vHu7/1GlcWyJj1a4KLcr3RlOnjXIB4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:62:72:da:f9:27:d3:36:f1:59:e6:6f:68:6d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
        Validity
            Not Before: Oct 19 15:01:28 2025 GMT
            Not After : Oct 20 15:01:28 2025 GMT
        Subject: CN=3effc36be7e58714fcf52211d361919dcf360a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:10:00:4f:04:a8:98:d1:ee:1f:19:e8:50:77:
                    5d:37:45:e0:36:e2:26:ef:f4:23:48:7c:d4:c0:4f:
                    9e:13:1d:0d:ae:08:2a:47:d2:34:41:36:cb:3b:53:
                    31:89:c3:31:c6:72:16:4b:cd:01:b9:52:e2:c3:f9:
                    8e:1f:ac:7f:c2:36:03:41:87:62:85:b1:84:79:40:
                    91:04:e9:8c:46:c3:2e:95:cd:f5:d8:50:4e:80:7e:
                    32:21:81:17:04:6d:cf:d5:1c:bb:13:21:c1:d0:31:
                    7d:f9:ad:33:3e:b5:6c:48:e9:27:e8:49:d7:d2:5f:
                    fc:4a:e3:23:e5:c3:3d:12:a1:9f:60:fb:ff:3c:ba:
                    c6:a2:13:a5:93:69:3e:9c:ac:55:29:53:62:4d:a8:
                    9b:a6:1e:9c:2b:10:6e:34:94:ba:eb:e6:03:13:f3:
                    0f:71:ab:b8:15:02:ca:06:41:74:ee:d1:e1:cc:90:
                    f8:0c:c1:5b:a2:13:6c:9b:e8:20:cb:9b:ca:50:80:
                    8c:57:a3:7c:94:50:30:cc:ee:7b:22:71:71:9d:33:
                    34:ad:92:ed:11:ec:f4:b6:49:11:0e:d3:c6:1c:5e:
                    7c:04:1b:e0:74:13:fb:2e:c8:fa:09:88:3d:c8:ef:
                    17:f0:c9:7a:15:ae:2b:e2:6a:8c:93:52:f4:ba:08:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FF:C3:6B:E7:E5:87:14:FC:F5:22:11:D3:61:91:9D:CF:36:0A:72
            X509v3 Authority Key Identifier:
                keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:0e:6f:5a:70:79:07:63:1c:fd:1c:92:2c:7c:72:90:7c:f4:
         94:15:96:40:47:7b:9c:df:5a:ae:c4:96:be:04:ad:d5:51:15:
         36:6d:b0:ca:c5:2b:91:da:72:64:3f:b1:78:eb:03:a3:31:bb:
         3a:2b:0d:d3:9f:c8:cd:0b:2d:04:c6:9d:ea:e8:f9:51:17:4f:
         8c:b2:41:1d:a2:f3:28:b5:c7:3f:7a:00:43:c2:a5:51:05:a0:
         a4:b1:39:9e:f6:01:75:fb:5c:6e:fd:2a:bc:98:4c:20:3a:b9:
         03:88:ef:8e:3b:72:9b:b8:72:60:90:ad:56:0c:e7:71:1d:30:
         f6:b6:f6:57:6c:0f:d6:6a:92:87:85:78:87:3b:df:6b:7e:b1:
         0c:d6:eb:91:8c:bd:2f:9b:a1:9d:95:b3:b2:bd:e4:fc:da:2d:
         af:0c:20:ed:f5:d6:af:e3:c3:ab:d5:10:f3:d8:b4:00:59:53:
         dd:f8:ee:22:00:fe:30:7f:11:b6:7a:c3:e2:40:ab:4e:fe:62:
         f3:85:49:8e:a1:5e:56:a7:d5:02:d8:19:dc:b5:06:55:8a:a7:
         aa:b0:49:3b:f4:46:38:91:65:f8:1b:d7:24:ab:22:0c:8a:e1:
         75:9c:0d:60:1f:cb:b9:b7:12:d8:f8:20:2f:ed:20:7b:c6:37:
         7b:1e:11:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:47 2025 by rpki-client