Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
File:                     9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json)
Hash identifier:          M3fNIkRiMurwMQvL6i/w9nqMIQZTIXlvnSnB5d+OKAU=
Subject key identifier:   A9:7D:3A:AB:E4:CF:DF:07:61:EE:27:E3:11:45:D5:E6:96:F0:56:72
Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F
Certificate issuer:       /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
Certificate serial:       0199FA69C5C9B469046FCECDFA0F96294859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
Manifest number:          0DAD
Signing time:             Sun 19 Oct 2025 03:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 03:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 03:00:59 +0000
Files and hashes:         1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: K8Jr3ubOvsY5/zayjaWJJPpbj9850CVVwDo22MvlAog=)
                          2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:c5:c9:b4:69:04:6f:ce:cd:fa:0f:96:29:48:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f
        Validity
            Not Before: Oct 19 03:00:59 2025 GMT
            Not After : Oct 20 03:00:59 2025 GMT
        Subject: CN=a97d3aabe4cfdf0761ee27e31145d5e696f05672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:54:9a:d3:6e:a4:7a:2f:b5:a2:05:c1:30:93:
                    1e:98:65:3c:b2:06:20:0c:27:e9:f9:cd:40:6c:a0:
                    93:b9:6e:51:39:64:b3:00:bd:d4:52:fe:5e:e4:7b:
                    8e:a5:53:3e:98:76:13:a4:71:88:8d:65:a4:2d:bc:
                    eb:91:04:79:ec:13:8f:a4:d2:bd:28:22:ab:ef:82:
                    25:e5:b6:7a:ca:b2:26:70:a1:91:a9:18:86:eb:96:
                    8d:30:42:00:77:61:60:28:16:28:10:f2:b2:bb:0c:
                    e7:64:fa:f5:79:ae:23:8b:e3:33:11:d7:0b:ff:4d:
                    1a:ca:d7:00:0c:17:b2:9c:23:99:71:c2:a9:9f:04:
                    a8:bd:7a:a4:28:9b:55:da:8c:93:87:30:d6:54:db:
                    41:c0:6f:65:c2:9c:c3:f8:ee:99:ad:4b:ca:2f:ca:
                    b9:6f:f1:a7:89:40:13:b4:41:a6:2f:83:62:a8:71:
                    69:b1:2f:02:c6:e6:7c:ce:31:40:3a:4e:31:61:4c:
                    1d:0a:44:1b:83:42:26:3f:1a:b6:f6:48:10:d6:da:
                    03:27:7f:f8:e8:ef:b3:d1:d2:ff:aa:f0:75:18:01:
                    1f:06:0b:92:34:47:f5:88:f0:7d:fb:72:3d:46:7f:
                    bb:d5:d3:fb:13:25:a5:19:d4:89:b4:dd:a5:a6:0e:
                    d7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7D:3A:AB:E4:CF:DF:07:61:EE:27:E3:11:45:D5:E6:96:F0:56:72
            X509v3 Authority Key Identifier:
                keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:cb:6e:df:ff:6d:fb:5d:b1:07:ea:a8:a6:be:57:9a:b0:df:
         2f:b5:6a:66:a4:78:5e:e5:e7:1a:03:3d:8b:6d:ec:73:f6:09:
         e0:13:8f:90:37:7a:a4:0b:e6:5d:0a:58:80:6f:47:19:f6:38:
         77:c6:ce:1a:17:a5:00:4c:2b:d1:32:e0:44:f5:0b:15:90:6a:
         d0:3b:00:14:61:0e:9c:57:80:5d:25:96:49:88:9b:31:a4:e1:
         d5:05:06:54:e8:db:53:65:1e:c6:4c:28:3c:c2:73:88:54:a7:
         79:88:57:79:8a:eb:80:6d:7d:8e:80:51:e0:91:4d:44:b7:c2:
         9d:59:b7:1d:df:e8:e1:dc:4f:9b:95:63:fd:02:48:c9:93:8d:
         03:bd:8e:c1:ff:0e:ba:ff:2d:47:f9:9b:84:f3:17:a5:4f:d6:
         fa:8b:c2:be:cf:e8:ff:60:5f:1c:bc:a5:77:4f:74:e5:e6:59:
         56:16:66:ac:1c:9b:66:01:c8:bc:c5:dd:17:10:81:ee:06:b3:
         6e:64:1d:9f:30:ca:5e:c2:76:f7:a3:99:f3:47:e7:e3:38:ab:
         a8:da:2f:d6:d5:20:57:f9:bc:d1:3e:19:6d:80:2b:cd:84:78:
         70:5a:90:bc:50:4c:b5:bc:21:22:9c:71:ed:26:d7:df:2e:da:
         c1:3f:91:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:57 2025 by rpki-client