Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
File:                     MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft (raw, json)
Hash identifier:          An6Thjo+8H0o4qij9SNuHfnl29eP/xc3FPyEygLVs/o=
Subject key identifier:   CB:04:F0:EF:1B:C3:8D:5A:01:D4:7F:5A:65:E5:BC:EF:AE:A8:A1:7C
Authority key identifier: 33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05
Certificate issuer:       /CN=330bc8fd949e651d93285ccbc1da13393b783305
Certificate serial:       0199FCFD6C7FF463369684C7691528B6FB66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
Manifest number:          10DA
Signing time:             Sun 19 Oct 2025 15:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:30 +0000
Files and hashes:         1: MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl (hash: 2uWBTqozsmWy+eLoe8ViF7ePqtuf4vECcVDhoPSFfN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:6c:7f:f4:63:36:96:84:c7:69:15:28:b6:fb:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330bc8fd949e651d93285ccbc1da13393b783305
        Validity
            Not Before: Oct 19 15:01:30 2025 GMT
            Not After : Oct 20 15:01:30 2025 GMT
        Subject: CN=cb04f0ef1bc38d5a01d47f5a65e5bcefaea8a17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:02:68:62:00:4d:0b:4c:ad:a7:71:01:2c:
                    ae:f8:36:5f:1d:b3:b6:74:f6:7a:6f:1e:8e:64:13:
                    5b:67:30:70:62:ca:51:1d:d7:a5:94:0c:ad:be:5f:
                    0f:d8:a4:a7:89:d5:4a:ec:c4:b2:7a:d0:9f:a9:99:
                    7c:b8:52:85:0a:94:62:81:2b:7d:01:09:a0:8e:5e:
                    41:65:20:f3:38:28:f6:34:0d:df:9e:21:8b:dc:65:
                    3d:48:4f:c2:0a:7f:12:02:c2:e3:df:4b:8b:ef:49:
                    f2:db:35:ad:b0:3f:5f:45:9f:ee:07:f9:a5:5f:d5:
                    52:1b:03:0d:05:cc:b5:f9:f5:22:0d:d6:bb:c1:fb:
                    c0:8e:61:91:13:a3:69:d4:da:51:b8:05:9d:b9:2c:
                    03:11:e4:3c:0b:91:b1:29:f7:e3:91:73:ff:05:c9:
                    6a:7e:a7:2d:ae:ac:2e:c7:ec:0b:e5:96:6c:53:0a:
                    97:f0:da:2a:e8:47:5b:23:4f:47:52:0d:c7:a7:4a:
                    6b:d9:12:a4:0e:5a:d7:86:0f:5a:cd:0a:80:18:59:
                    48:39:dd:7f:8f:a7:8a:72:b1:f7:1f:5c:ca:1f:10:
                    a8:7c:10:fa:6f:a6:44:58:a0:d5:63:09:b8:a1:d5:
                    61:a5:76:41:ca:1f:d9:dd:09:2a:23:5c:a6:ed:9b:
                    89:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:04:F0:EF:1B:C3:8D:5A:01:D4:7F:5A:65:E5:BC:EF:AE:A8:A1:7C
            X509v3 Authority Key Identifier:
                keyid:33:0B:C8:FD:94:9E:65:1D:93:28:5C:CB:C1:DA:13:39:3B:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/46615c-a7df-425b-9590-d21e143f75b2/1/MwvI_ZSeZR2TKFzLwdoTOTt4MwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:b0:a3:7a:1b:2e:ba:85:7d:32:41:11:3b:8e:1b:58:90:3a:
         79:54:17:8a:7f:c3:94:f2:fc:fb:f1:ed:d7:44:59:38:f5:9e:
         c7:03:f6:64:52:8f:2d:ab:05:f2:b9:d3:c0:20:86:eb:e0:6b:
         e3:9c:d7:8a:88:44:30:4f:fa:ce:87:57:c3:34:de:d0:eb:f6:
         42:37:b9:bf:8c:6f:c7:77:f2:f7:5a:12:14:da:28:4b:5d:03:
         38:b5:12:ff:f1:f6:53:b7:96:be:4b:75:a2:11:23:b9:65:6e:
         d2:b5:67:71:0b:8a:b4:4a:44:38:8b:08:e3:04:36:0a:b8:64:
         aa:43:11:c6:54:3c:cd:b4:16:5a:79:0c:58:74:81:44:41:72:
         f2:ee:52:c1:6e:ce:cf:a9:68:c6:33:38:c9:fb:47:23:c9:dc:
         24:43:6f:f4:aa:61:66:ee:ef:ec:7a:0e:cd:d3:06:8d:0b:13:
         2e:19:81:af:1c:df:e1:be:10:88:3d:5f:c5:41:18:ae:dc:03:
         94:7e:20:0b:3c:6e:3a:5d:23:26:28:f2:4e:1c:a6:a8:d7:7d:
         bd:11:57:4f:cf:0c:47:86:16:b8:2e:cf:28:8d:a1:a6:9b:73:
         f1:5a:34:cb:58:7d:5a:b8:c9:10:5a:b9:00:35:ca:36:cf:bd:
         95:da:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:49 2025 by rpki-client