Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          rKTVVAOsPOz2l9i/nDnWUvc7cV4WIJXb/6te72ODxco=
Subject key identifier:   F1:89:02:26:81:7F:B5:97:DB:41:19:D8:23:8C:31:37:2B:4D:F5:10
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       0199FBEBB7C5ADCCEDF75AA642A804489200
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          135D
Signing time:             Sun 19 Oct 2025 10:02:33 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:33 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:33 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: ACYFwEuvDSvbVo8LeDkxVgKwf/lX07RCPiKhQ02WVLQ=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:b7:c5:ad:cc:ed:f7:5a:a6:42:a8:04:48:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Oct 19 10:02:33 2025 GMT
            Not After : Oct 20 10:02:33 2025 GMT
        Subject: CN=f1890226817fb597db4119d8238c31372b4df510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1a:1f:84:d2:b8:ca:a1:63:b6:88:4c:56:b3:
                    6b:06:06:f0:1b:df:55:70:f9:a8:a9:be:bd:f7:55:
                    19:18:2f:6a:7f:ed:e5:1e:09:3d:7d:2c:d1:82:b2:
                    18:26:e1:9b:cd:e9:c9:61:0a:11:f0:0b:77:1c:69:
                    d5:1e:46:65:0d:1f:51:7f:47:ca:be:a8:87:3e:9f:
                    65:ee:82:48:f8:b9:e0:bb:f0:65:ba:c0:b6:61:ab:
                    a9:2a:b8:62:bf:cf:fb:7a:b6:bf:cd:fc:46:1a:57:
                    bb:49:56:04:20:60:b8:15:a0:1e:d5:3c:95:48:a3:
                    69:14:e3:b9:c9:c3:89:b8:84:66:1e:39:90:7e:89:
                    ab:56:26:03:ac:64:84:37:7a:83:cb:58:14:1a:87:
                    da:53:7b:14:44:f5:e5:a9:6e:e4:27:62:d1:33:6f:
                    5a:3e:7f:f0:a8:6c:92:66:e4:c4:df:c9:59:2a:13:
                    89:8a:1e:d4:ba:a7:df:3b:01:c6:db:c3:b9:bb:b2:
                    17:f4:39:20:31:f8:0c:1c:50:19:4a:84:7b:db:1a:
                    84:2a:52:23:e7:9a:f8:5c:7b:f3:53:29:b7:16:da:
                    5b:9a:d3:a3:a4:d0:bb:79:fd:14:b6:d3:66:6f:1b:
                    eb:95:29:a3:29:c2:c2:5e:9d:0a:6c:91:7e:26:58:
                    26:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:89:02:26:81:7F:B5:97:DB:41:19:D8:23:8C:31:37:2B:4D:F5:10
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:70:3e:10:f2:e0:be:1f:1e:73:44:52:b6:7e:88:1f:0a:91:
         06:ec:ea:76:f3:af:b3:13:7b:56:06:c0:55:65:70:d0:c0:8e:
         31:d1:e2:9c:e3:96:53:c8:8c:37:9a:ce:fc:eb:8c:e4:da:ef:
         b7:a1:10:4e:18:c6:12:46:41:a6:ed:e9:4d:bb:4d:8c:4f:b8:
         69:f8:d9:c0:1d:b8:0c:74:bd:76:67:b4:67:bf:96:d9:d0:68:
         86:c0:69:34:d6:e9:13:5c:02:71:db:92:d1:eb:26:b6:f9:78:
         79:43:51:07:42:69:15:9e:9c:b5:c2:27:5d:85:2b:07:d5:c0:
         ef:27:70:cd:63:a1:7b:84:5b:8d:30:73:9c:2d:5d:52:59:48:
         f3:23:c3:dc:ee:bb:42:e1:3b:c7:a6:d3:7a:a4:53:3c:9d:41:
         f8:d1:33:d4:62:9d:1b:f0:d0:d0:1d:66:31:b0:c9:a8:c2:89:
         a5:80:fc:6b:e8:73:52:62:49:f2:43:46:96:c8:9a:06:79:55:
         b3:03:da:f7:36:36:31:e1:18:80:e5:5f:9a:d3:cc:39:36:5c:
         b2:f0:ad:68:97:f6:6c:b2:6b:da:f1:78:1d:73:51:3c:15:28:
         32:45:34:aa:74:07:18:f8:a8:9b:b0:83:aa:65:4b:93:9d:a6:
         7d:d3:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:06 2025 by rpki-client