Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
File:                     e33o0TUz0eNrETWl0umm_zmFzaI.mft (raw, json)
Hash identifier:          SLgYnfNAc3wNVspxAin2CITKoTKDiaU7ilARyZ0o6S8=
Subject key identifier:   0C:EB:C8:CF:1D:F3:E2:AF:E5:0A:FC:F5:47:2F:72:6F:E8:82:23:78
Authority key identifier: 7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2
Certificate issuer:       /CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
Certificate serial:       0199FBEB92654D702EF6CAE79D9276B215A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
Manifest number:          06D2
Signing time:             Sun 19 Oct 2025 10:02:23 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:23 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:23 +0000
Files and hashes:         1: NT721vdDTZnxgWmRGJzwBYHYDA8.roa (hash: yzcBhHIQBnCYtohSTAdo4tLB3EtiVC078q9jsnknm8I=)
                          2: e33o0TUz0eNrETWl0umm_zmFzaI.crl (hash: rCGdgSbFU+7uHRtCv4jjM23mwsw9XFiBTxaAVtiVl3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:92:65:4d:70:2e:f6:ca:e7:9d:92:76:b2:15:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7de8d13533d1e36b1135a5d2e9a6ff3985cda2
        Validity
            Not Before: Oct 19 10:02:23 2025 GMT
            Not After : Oct 20 10:02:23 2025 GMT
        Subject: CN=0cebc8cf1df3e2afe50afcf5472f726fe8822378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:32:81:83:0e:02:7f:81:46:6b:ce:a4:fb:
                    26:cd:fe:73:e3:4b:e0:19:62:80:37:79:9f:53:58:
                    df:2d:98:b0:72:56:c5:4e:61:76:b2:1a:68:5a:6e:
                    a2:95:ba:11:e2:74:6e:3e:68:0f:87:f1:34:be:50:
                    fe:c2:23:6a:af:50:d9:a8:37:6d:6c:9b:cc:fc:46:
                    f2:50:9b:79:d0:32:79:bb:9e:7d:58:89:d8:67:41:
                    3c:bc:33:00:84:1c:c0:60:b8:24:5d:09:21:da:27:
                    a3:b0:f0:01:b5:db:18:50:70:77:ea:df:34:93:0d:
                    fc:ef:ef:ec:ed:ae:53:d8:d9:c3:5f:15:81:18:39:
                    2a:f3:77:a2:ba:65:40:be:3e:c4:2c:de:5b:8b:89:
                    7a:40:ac:8b:cd:e1:8f:28:7d:db:27:3a:a1:26:95:
                    b3:af:a9:44:81:e1:d0:de:69:3e:cd:9e:f3:58:c8:
                    96:5d:82:a9:48:36:58:53:45:1d:c7:08:e2:4e:0f:
                    ab:0d:70:17:10:00:62:b8:2b:70:b0:36:cc:02:19:
                    24:9e:f1:a7:46:2f:99:58:d2:39:67:4e:4c:08:4f:
                    2b:4f:e1:a2:45:e4:2f:6a:c0:0c:3f:6c:b1:fb:94:
                    8d:6b:a3:e6:67:9a:3e:88:a2:09:c7:a6:9e:84:a3:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:C8:CF:1D:F3:E2:AF:E5:0A:FC:F5:47:2F:72:6F:E8:82:23:78
            X509v3 Authority Key Identifier:
                keyid:7B:7D:E8:D1:35:33:D1:E3:6B:11:35:A5:D2:E9:A6:FF:39:85:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e33o0TUz0eNrETWl0umm_zmFzaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/51d177-9bb4-4dae-983b-2e9b2d88d547/1/e33o0TUz0eNrETWl0umm_zmFzaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:40:8b:6f:b1:b0:b2:3a:11:38:d8:76:02:d1:59:6e:2e:42:
         8f:97:d0:b6:ea:ec:46:f9:b1:48:2b:b4:3f:ff:b3:5e:63:50:
         76:75:a8:dd:a8:e7:87:d7:f5:c8:6e:40:1d:b3:80:51:59:f8:
         71:84:b2:cf:d7:a6:ea:18:f7:dd:6e:d7:37:a0:7d:93:e4:39:
         df:6f:7d:c6:bb:cc:8a:0e:19:c1:e7:e1:54:9e:ce:fd:34:2b:
         44:d9:f2:24:9a:87:44:45:65:52:7b:59:5c:ad:a8:c6:83:b3:
         8b:34:05:e3:df:03:e7:d0:a0:34:ab:91:db:6f:83:3f:99:d1:
         f1:b6:03:18:4b:b1:7b:41:57:15:1e:e9:7c:10:3f:39:6b:22:
         37:31:28:6e:31:94:5c:53:dd:fd:99:1d:1e:fe:33:45:fb:8b:
         a5:32:9b:e1:39:8d:b5:56:66:71:4c:44:12:7b:c4:36:6e:91:
         c5:f6:ef:5a:96:68:b1:03:df:3b:b4:90:86:59:8b:b0:28:3c:
         89:b7:e1:a9:ac:23:ef:06:78:34:db:95:d7:39:50:45:0d:00:
         2d:39:e5:76:1b:7e:79:7f:52:4a:b6:ab:b3:30:8b:b1:08:a0:
         11:ee:1c:86:41:ca:c4:f5:d3:58:67:6d:3f:98:08:93:98:ec:
         89:71:e4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:45 2025 by rpki-client