Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File:                     DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier:          yWMDm5e4s1gQ7pVWCNnur49KGm1hTqis5W7uS972SCM=
Subject key identifier:   96:28:41:FD:A4:DD:52:F7:D6:56:A3:41:89:62:D3:14:C3:A7:C2:52
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer:       /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial:       0199FC21675DFDB2CE517103B8B4C7E8F0AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number:          1410
Signing time:             Sun 19 Oct 2025 11:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:11 +0000
Files and hashes:         1: 69ehIxwfed5HZyZV9c2Bvvjf_kA.roa (hash: ZxU5cKBsS8xLFH6sctBsWlQRFFqOiJR2279n4TmOSw4=)
                          2: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: CzIiNjsvLyAPyhoRBsXuMEYpe04PwNemb5laUYYxnHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:67:5d:fd:b2:ce:51:71:03:b8:b4:c7:e8:f0:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
        Validity
            Not Before: Oct 19 11:01:11 2025 GMT
            Not After : Oct 20 11:01:11 2025 GMT
        Subject: CN=962841fda4dd52f7d656a3418962d314c3a7c252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:88:f1:3a:18:18:61:3a:45:14:21:8c:87:
                    98:9c:38:fa:22:52:4d:4f:a6:65:b0:7a:18:36:f8:
                    5f:a7:10:b2:20:49:b5:69:4f:d9:55:6e:1a:87:42:
                    ef:e8:72:71:a3:c0:d9:e0:4c:ce:d0:6b:62:eb:8f:
                    10:3b:aa:d2:81:47:b3:b6:79:fd:9a:c4:2a:ea:c0:
                    e2:43:d2:70:dd:d1:7c:c9:48:d2:f1:cd:7b:7d:dc:
                    6c:b8:54:36:02:d0:f6:9f:7d:78:83:2e:28:de:86:
                    63:d5:bc:1f:b7:b4:cb:64:2d:44:3c:a1:75:79:66:
                    bc:c6:38:88:a9:3e:8f:a1:fc:88:fc:9d:82:d4:8d:
                    e2:a9:61:cd:e1:9d:d9:2a:b7:75:c7:49:43:4d:d3:
                    54:f6:15:01:7b:7c:46:0d:f4:22:f4:2f:6f:5f:8f:
                    84:81:75:8f:51:e6:80:63:bc:1b:da:5b:bf:d8:0d:
                    dc:81:2b:6e:b1:9e:9d:69:71:cb:aa:88:39:44:8c:
                    56:b9:7f:5e:b8:31:b7:de:36:93:3a:eb:aa:13:0a:
                    21:0c:39:81:17:e5:be:77:f5:42:8c:2e:87:fa:d9:
                    a4:bc:6a:64:1b:36:fd:ea:02:20:5c:38:33:b0:7a:
                    65:84:f1:84:aa:c0:f3:20:69:a5:74:74:de:c2:2b:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:41:FD:A4:DD:52:F7:D6:56:A3:41:89:62:D3:14:C3:A7:C2:52
            X509v3 Authority Key Identifier:
                keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:e3:23:b5:7f:0d:47:c4:35:0f:d4:c1:18:6e:d8:42:a6:
         01:c1:45:12:23:fb:07:47:5e:0c:db:dd:7b:45:f1:13:fd:77:
         81:9b:90:80:f8:bb:cd:2f:69:e8:6e:11:04:7a:57:7b:d8:77:
         64:4d:6a:99:46:54:71:af:02:da:56:b3:61:48:4f:ac:d5:5e:
         5e:bd:e2:3b:21:48:3c:02:be:52:5d:87:65:8d:85:f5:30:1d:
         75:24:e7:2d:49:24:d2:7f:3a:25:be:f5:fe:b2:18:36:dc:83:
         da:60:65:fb:80:d9:4b:92:c4:01:e1:04:8a:ca:68:59:f0:52:
         40:00:2c:f2:24:6d:06:47:d5:7c:47:92:d6:56:03:d1:3c:a8:
         e5:e5:20:4b:d9:e7:c9:94:89:a8:dc:16:13:8d:df:97:49:cd:
         06:71:ff:ea:ad:42:1d:ad:4f:63:f0:26:3f:e3:a3:6d:33:cf:
         94:a5:93:ef:2f:62:0c:30:69:9d:db:c3:34:b2:fd:b9:96:27:
         4a:10:37:44:01:29:fe:b5:81:b6:5e:76:fa:ad:60:ac:49:13:
         91:cb:db:32:5f:f9:f2:f5:c2:49:03:36:70:f2:45:bb:d4:07:
         38:33:a5:f5:67:09:9c:43:01:ba:b2:80:7e:95:82:36:ce:b9:
         e1:79:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:45:23 2025 by rpki-client