Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
File:                     pR2DPTR-bGymnqCoqyqD9JJnreQ.mft (raw, json)
Hash identifier:          pMBrkz7Lrsz+flsailgZpi88QSf5UyBUHXtwzGio4ZA=
Subject key identifier:   A3:D6:A0:B8:58:64:19:6B:F4:06:B1:DD:52:43:64:9F:9C:36:72:19
Authority key identifier: A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4
Certificate issuer:       /CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
Certificate serial:       0199FC21B2EDF131776725153B5435866FE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
Manifest number:          0916
Signing time:             Sun 19 Oct 2025 11:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:30 +0000
Files and hashes:         1: kzCPfsKhNa5ARc8OXK-NG4JyCeQ.roa (hash: HLmxhWB18Y9khY5YFcnO5u1aShLl675WwIsq2RBJTDQ=)
                          2: pR2DPTR-bGymnqCoqyqD9JJnreQ.crl (hash: tJEr63MnEcLQuU8c6CIPkt8y9/v45lKWQkKvmsXDZBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:b2:ed:f1:31:77:67:25:15:3b:54:35:86:6f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a51d833d347e6c6ca69ea0a8ab2a83f49267ade4
        Validity
            Not Before: Oct 19 11:01:30 2025 GMT
            Not After : Oct 20 11:01:30 2025 GMT
        Subject: CN=a3d6a0b85864196bf406b1dd5243649f9c367219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:21:18:53:bb:ee:a6:03:df:9d:ac:1b:4b:dd:
                    11:87:bb:2e:89:09:e4:f4:67:24:f1:2f:10:16:fe:
                    ca:5a:9d:9a:86:57:02:59:3d:2c:89:90:36:c1:44:
                    c2:74:81:f6:a6:83:28:08:81:48:ad:d6:3e:3b:5b:
                    bc:e0:12:0f:30:7c:58:ff:7d:e7:2d:cc:15:f2:7e:
                    5e:2d:ef:94:6c:4f:89:a6:c8:6b:95:e7:06:f2:ac:
                    42:c0:82:96:9f:19:1a:c2:cc:9a:4f:a2:fc:4b:68:
                    46:75:86:97:e7:40:b3:b9:6c:e6:a1:1d:70:b7:7d:
                    34:ce:b4:67:3f:23:4b:1c:cc:de:44:01:d8:16:a8:
                    dd:23:59:dc:a3:a3:65:5e:92:a9:3d:76:05:95:10:
                    60:15:c2:46:2a:78:e3:82:05:81:66:23:52:64:c4:
                    bd:5d:5c:df:27:83:0d:01:a4:a3:62:9e:f8:b1:c0:
                    e9:1b:2c:dd:90:31:0e:63:e0:e9:31:d4:ae:c1:9e:
                    c2:5d:07:bf:8d:d3:eb:4b:e4:f1:88:79:0f:6c:14:
                    fd:d7:0d:bf:a9:d2:84:90:11:ff:11:4e:fe:90:2c:
                    ab:13:bc:33:02:7f:ca:e8:09:97:1a:e6:38:19:45:
                    e0:f6:97:e6:ab:c7:76:db:89:ce:61:8a:9b:b4:cf:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:A0:B8:58:64:19:6B:F4:06:B1:DD:52:43:64:9F:9C:36:72:19
            X509v3 Authority Key Identifier:
                keyid:A5:1D:83:3D:34:7E:6C:6C:A6:9E:A0:A8:AB:2A:83:F4:92:67:AD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pR2DPTR-bGymnqCoqyqD9JJnreQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fda216-ecba-42ee-aab5-4782b7a8ea29/1/pR2DPTR-bGymnqCoqyqD9JJnreQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:12:bd:ae:12:c9:ca:06:ca:a7:7f:0c:b7:65:f5:fe:ec:9e:
         7c:45:07:6a:39:40:94:67:cf:28:ad:f1:cf:dc:bf:b8:15:5a:
         4b:4f:cb:7e:5f:5c:ca:e6:b6:8f:2e:c0:98:24:1d:56:e7:f8:
         a8:fe:52:87:b2:db:14:8e:24:c7:f8:01:aa:16:51:b1:a9:ed:
         e2:6c:5e:2c:6e:24:f3:3f:d0:2a:69:61:92:58:d2:c1:e3:6e:
         d9:a9:65:39:a2:7c:ee:71:39:7c:e3:11:de:4d:5c:ec:a8:08:
         8b:8c:42:d8:d2:02:5e:9f:d9:f1:b0:ea:35:0f:63:5f:c9:91:
         11:9f:a1:78:dd:3c:89:56:fe:27:06:73:e4:3a:73:73:75:69:
         ce:e3:42:ef:3f:42:0d:54:93:47:88:21:01:db:5c:24:bc:97:
         c8:cc:15:31:6a:76:96:86:ca:42:81:a1:a0:0a:2c:c9:60:b6:
         2a:ba:a2:a3:06:ee:3c:ec:ea:b5:91:83:46:c6:64:c0:af:7c:
         20:a0:15:6b:3f:65:17:df:7e:5c:8c:e2:60:53:1a:a1:30:ac:
         22:c8:14:b9:e2:4e:70:b8:7f:ae:c8:46:6e:d3:36:e7:6f:b3:
         20:8a:04:db:7d:e1:7b:2d:9a:93:97:bb:bb:9c:5e:9c:24:5b:
         70:a0:57:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:08 2025 by rpki-client