Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
File:                     RoZEuS85TK82Z722rz44aZxU8xU.mft (raw, json)
Hash identifier:          GW1iHS0oqAjKbbsXT3IgsaYMOZMQxuqrFI2zyD5LEjo=
Subject key identifier:   6C:B2:09:29:F4:43:84:4D:8E:B3:9D:A7:27:5B:0B:0F:6A:74:82:36
Authority key identifier: 46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15
Certificate issuer:       /CN=468644b92f394caf3667bdb6af3e38699c54f315
Certificate serial:       0199FDD98B03F933B1C659AE4A1745ADDC3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
Manifest number:          06EA
Signing time:             Sun 19 Oct 2025 19:01:56 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:56 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:56 +0000
Files and hashes:         1: RoZEuS85TK82Z722rz44aZxU8xU.crl (hash: /Hgm4bNk/5/qgJrE522EKLbwb4d0u64PyqCoOLLsWC8=)
                          2: UDnOw3yx7p_S6g0u-gxFkiQH6Ow.roa (hash: pt8gQb/ZyizTIVjVAR2lPtfMoGj527YNLleTVGkzd88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:8b:03:f9:33:b1:c6:59:ae:4a:17:45:ad:dc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468644b92f394caf3667bdb6af3e38699c54f315
        Validity
            Not Before: Oct 19 19:01:56 2025 GMT
            Not After : Oct 20 19:01:56 2025 GMT
        Subject: CN=6cb20929f443844d8eb39da7275b0b0f6a748236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:20:f5:4c:b5:e4:f2:09:53:9b:02:d0:98:
                    7c:60:1b:49:cb:e8:d1:7c:a7:4b:87:36:58:97:65:
                    bf:09:c3:23:c9:7f:a6:74:9c:03:93:52:9f:e2:16:
                    19:19:c4:30:c9:ce:1b:87:05:10:e5:7f:00:a1:48:
                    e9:d9:52:99:89:18:9a:33:6c:7c:29:22:be:13:9d:
                    73:b2:43:ff:2e:1b:1f:fd:7a:b9:d6:5e:33:df:c3:
                    ca:f9:57:87:59:29:78:d3:ed:83:85:ab:ef:fb:13:
                    af:07:49:15:20:85:4b:6a:e3:56:2d:9a:cf:f7:31:
                    c3:8d:f3:f9:9b:ae:87:f3:52:5c:0e:d9:a8:dc:15:
                    3b:04:7e:95:53:51:4d:c2:cd:ba:13:21:25:2d:77:
                    f5:a0:23:0c:c7:30:77:17:e3:49:ad:5c:71:19:67:
                    f6:ce:11:d5:23:da:ad:2c:90:c2:05:2d:e0:56:fe:
                    2a:33:28:18:bb:38:39:cb:10:10:26:62:5b:59:57:
                    ac:e8:ad:b4:51:fb:98:df:83:ac:94:ee:7f:f3:d5:
                    54:42:f9:22:5b:91:a2:13:b7:8c:8e:15:ff:4c:06:
                    da:6b:23:03:8f:94:33:0a:5e:3a:a2:a2:fd:8c:74:
                    12:cb:af:12:69:7e:a9:71:be:4e:83:dc:63:58:7f:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B2:09:29:F4:43:84:4D:8E:B3:9D:A7:27:5B:0B:0F:6A:74:82:36
            X509v3 Authority Key Identifier:
                keyid:46:86:44:B9:2F:39:4C:AF:36:67:BD:B6:AF:3E:38:69:9C:54:F3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoZEuS85TK82Z722rz44aZxU8xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/091841-02fe-44db-ba16-a5e13b4fb12b/1/RoZEuS85TK82Z722rz44aZxU8xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:e3:60:de:35:14:83:ba:59:43:50:d0:d7:08:b7:38:20:
         e3:c2:cd:a4:50:1e:45:47:63:c0:2a:d1:09:d6:cc:6d:93:f0:
         93:e1:1b:5a:a1:8c:2c:2d:bd:85:14:62:f2:ef:e3:67:a6:1f:
         9c:0d:20:0d:d7:04:d6:05:d0:89:5a:90:90:5e:1c:e2:32:a8:
         b4:d3:e1:e5:e4:81:da:51:42:75:15:49:52:e1:3b:45:9f:36:
         7a:39:b1:7e:5c:8d:91:80:ba:45:ac:7a:31:97:01:3d:67:a9:
         2f:bf:08:ba:9b:e7:84:4d:69:42:22:b5:a1:9e:95:79:88:57:
         16:e0:13:ac:9a:c5:cd:91:b1:49:4a:2f:c3:86:a5:da:92:56:
         09:6a:9a:21:70:43:3a:bd:02:a2:5c:2d:e9:27:8e:02:fb:9b:
         84:a1:df:14:99:c8:f6:1e:c8:ea:35:3b:2a:9e:f9:10:cd:fc:
         6b:8a:a9:f1:e9:52:47:8f:2f:50:8a:e8:0e:6a:0a:fd:ee:4c:
         4c:d1:bb:60:74:29:bc:a8:5f:1d:2f:71:ef:ec:ea:30:29:dc:
         28:96:bc:68:db:0d:0f:92:19:8d:89:e0:74:f9:b8:2c:6d:7e:
         b1:52:41:d7:7a:f5:e8:4d:fe:1c:d2:7c:4d:69:9d:64:76:fc:
         1f:dc:af:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:14 2025 by rpki-client