Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
File:                     DgXmzqSzk0XOKQLJeh26vLRtKjs.mft (raw, json)
Hash identifier:          fMNYjja2eNR1saBy3+w8FCqp3GqRP/re1xQ7AevmYg4=
Subject key identifier:   2A:C4:32:6A:CB:48:B2:6D:17:F7:73:0A:DD:2E:6C:6E:4D:56:EB:B6
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Certificate issuer:       /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial:       0199FB0F428C7A572B5EFA0D92CD0B9F811F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
Manifest number:          1672
Signing time:             Sun 19 Oct 2025 06:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 06:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 06:01:45 +0000
Files and hashes:         1: DgXmzqSzk0XOKQLJeh26vLRtKjs.crl (hash: K/axMzEMCR549vgmQDlxelFreaPzPGZzdi9j4Z+mfg4=)
                          2: ShuJCzTETjuD4IZyp5iTy1w6Ut8.roa (hash: fk95k0odtKaBXDPO6LkbFL/8lMCWYiJ12TM7p4C2lgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:0f:42:8c:7a:57:2b:5e:fa:0d:92:cd:0b:9f:81:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
        Validity
            Not Before: Oct 19 06:01:45 2025 GMT
            Not After : Oct 20 06:01:45 2025 GMT
        Subject: CN=2ac4326acb48b26d17f7730add2e6c6e4d56ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:89:48:0b:8b:39:0b:c6:1a:82:26:42:d4:cc:
                    ce:f3:f3:0b:df:e5:9e:7f:39:8e:f9:74:d3:d8:12:
                    1b:c4:0e:36:4b:a1:c9:41:78:a6:ee:e5:e4:10:25:
                    7e:93:14:60:55:b6:07:df:eb:80:57:f2:e0:c2:35:
                    91:bb:b4:e8:74:5b:dd:23:7a:f6:13:e0:a9:0b:04:
                    c4:ba:61:1e:91:3f:1e:88:23:a9:61:37:fa:b7:f3:
                    72:ea:6b:51:de:ee:f6:47:2d:b1:e6:99:db:7a:56:
                    57:ba:ad:61:28:dd:89:6e:d4:1e:8b:f3:7b:6b:6d:
                    e5:db:e1:93:65:d1:60:85:f9:36:0d:1a:d4:fc:e0:
                    b2:70:d1:62:7a:32:e3:20:dd:82:51:09:44:14:3f:
                    9a:e0:d3:da:12:19:66:9c:77:ff:db:44:0c:9c:ec:
                    e5:08:67:35:c6:55:be:d3:5c:0a:35:e4:25:ca:4c:
                    a5:fa:a1:24:a7:b2:c5:8b:b9:ea:01:67:0b:c9:40:
                    4e:7b:2b:be:94:ae:56:05:46:11:cd:3a:04:dd:b0:
                    a6:62:c5:41:73:86:a1:f0:da:72:26:d7:34:57:f2:
                    dd:99:18:e6:4d:3a:df:0f:21:10:ea:8a:dd:c1:29:
                    97:df:f1:ab:9a:84:6e:d4:30:13:92:b4:33:8d:60:
                    e2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C4:32:6A:CB:48:B2:6D:17:F7:73:0A:DD:2E:6C:6E:4D:56:EB:B6
            X509v3 Authority Key Identifier:
                keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e2:35:6d:15:99:a3:a0:ce:b6:0f:83:47:03:08:c9:d5:e7:
         1b:b5:10:70:cb:df:40:40:df:94:66:10:dd:83:ba:c3:28:b9:
         df:77:e4:bd:a6:a1:10:ec:70:3c:91:18:3d:ea:8a:41:43:47:
         06:56:0e:08:45:3e:18:f4:27:4b:68:b1:48:7a:ee:12:3a:98:
         f9:96:42:3b:ae:51:8e:26:b7:21:ae:8a:d4:4b:37:9c:c2:d4:
         98:9e:4d:3b:5b:58:d6:6a:fb:e8:d9:24:2d:d6:65:51:52:f5:
         5b:c0:e2:48:b6:45:fc:68:a9:26:af:2c:03:6c:aa:26:db:61:
         5d:94:02:6a:4f:2c:22:56:a9:e4:01:3e:b0:f7:05:b1:19:73:
         db:0d:cb:99:e7:45:00:30:c1:2b:1b:94:22:1c:ee:83:ce:97:
         9d:48:a2:87:49:70:e0:da:ee:82:ba:3d:7a:65:c3:d4:f0:df:
         ed:3c:37:96:8c:6d:f5:88:41:83:76:d9:33:f3:63:35:e4:4d:
         26:c2:e9:10:2b:4a:90:c7:3d:6a:81:f3:6b:ea:31:33:be:36:
         22:66:24:a4:53:77:f5:c8:2f:6d:ad:b3:7c:61:ef:8a:83:ec:
         da:e8:46:4c:24:0a:54:3d:e8:d4:28:e8:df:08:15:01:f2:35:
         86:00:55:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:41 2025 by rpki-client