Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
File:                     RPMwC82ETWB1L-Xfst4pmWbpuPY.mft (raw, json)
Hash identifier:          yPmq84v0CxG34dcxSJ8zMhGrh8c5w5AjUjN/fMoBgrg=
Subject key identifier:   AD:84:90:99:6C:7B:3E:B4:74:16:29:A5:3E:92:D9:29:B3:01:19:0B
Authority key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Certificate issuer:       /CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Certificate serial:       0199FDD92B67C2D2023D42D7B44182289464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
Manifest number:          0CCD
Signing time:             Sun 19 Oct 2025 19:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:31 +0000
Files and hashes:         1: RPMwC82ETWB1L-Xfst4pmWbpuPY.crl (hash: p4H1EFHmpgwMQLFvqmE8rTlI599YdPVJCkZGjTRMjsg=)
                          2: vqjdm1KiZFUuymq7gFNn9nu1xeI.roa (hash: n5Ik+8X2gw4ASROPfXrEyi/m0Dt0d0dYMw901zfQlQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:2b:67:c2:d2:02:3d:42:d7:b4:41:82:28:94:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
        Validity
            Not Before: Oct 19 19:01:31 2025 GMT
            Not After : Oct 20 19:01:31 2025 GMT
        Subject: CN=ad8490996c7b3eb4741629a53e92d929b301190b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:b9:52:4b:1b:ce:70:6d:e9:e9:2e:12:95:
                    22:20:26:09:8e:24:12:b1:92:21:0f:e7:48:6f:21:
                    63:8f:8e:f3:3f:84:06:a2:28:9c:9b:fc:7d:48:53:
                    14:76:a3:7c:de:12:31:6c:cb:07:a6:25:d6:56:65:
                    cd:80:dd:b1:4e:2a:bc:3e:08:3a:cd:18:5f:1b:7a:
                    f4:4d:d0:4d:41:cc:28:72:71:9b:2f:83:78:aa:90:
                    07:ed:ba:23:00:b6:de:73:16:a5:8c:f0:f8:1a:d1:
                    23:ae:0b:af:be:01:7f:69:93:4c:d1:b9:0d:7d:01:
                    73:a2:b5:8e:bf:99:5e:c7:c7:db:f4:fd:bc:d8:3c:
                    49:db:d8:6b:6a:30:4d:b0:b3:d8:b1:43:fa:04:b7:
                    e0:f7:82:0b:1f:69:d2:8c:48:d7:af:46:d4:44:f5:
                    f8:05:91:4c:bc:71:ed:12:46:30:fd:2b:5e:19:6d:
                    21:72:a1:b3:9b:f0:26:f6:ea:9d:51:ca:5d:91:0c:
                    40:b8:d3:54:eb:16:e2:b3:45:19:94:43:6b:1d:1e:
                    ae:d7:c0:76:16:99:34:c4:e0:8d:42:27:ae:c1:d0:
                    a6:3a:59:ea:f8:cf:8b:61:72:72:5c:46:9d:6e:d4:
                    e7:f6:81:46:86:36:04:86:03:7e:0e:1a:12:97:8c:
                    4f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:84:90:99:6C:7B:3E:B4:74:16:29:A5:3E:92:D9:29:B3:01:19:0B
            X509v3 Authority Key Identifier:
                keyid:44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:28:b5:6b:6e:3e:6f:fb:54:3c:6a:f8:27:65:c7:b3:d8:76:
         66:05:15:16:10:29:9d:86:ba:27:06:0c:33:75:60:1a:65:2f:
         48:9a:79:78:4c:c5:db:62:1c:71:9b:10:c8:99:ff:2d:a1:a2:
         e4:8a:3b:81:74:a0:7a:f0:b0:41:78:7b:31:09:4b:16:47:03:
         b4:b7:ee:e9:ae:fd:84:92:3e:12:c7:22:a8:3f:cd:b8:3b:a6:
         47:91:55:1a:a8:24:e8:28:98:58:70:58:22:0b:f2:d6:82:ca:
         a6:ec:74:fa:da:85:e3:a3:a4:e2:da:1b:6a:8e:a5:bf:b1:dd:
         7f:71:4d:fb:8f:34:71:68:7e:54:9c:04:41:21:cb:bb:af:95:
         3e:18:d8:aa:e4:15:8e:7a:ec:a8:74:1d:93:a8:df:56:05:db:
         4b:ab:69:c2:4e:08:56:7b:3e:40:12:17:4a:d4:01:ae:32:ed:
         47:75:db:1a:48:f2:ca:51:f9:0b:1b:ec:f8:9e:95:85:57:66:
         81:2f:82:92:9b:64:ce:1f:95:c4:00:5c:b9:f8:fa:7c:82:08:
         cf:3e:40:d5:cd:89:5e:69:40:5b:05:8f:ac:a8:54:26:eb:8d:
         a9:7d:85:ee:3a:02:e0:3d:86:0e:99:af:5a:f1:1a:39:30:02:
         ba:e3:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:09 2025 by rpki-client