Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          OMbcbdy48MckWUuaZGoT2/nA3+98N+huQsPnJf/sf+k=
Subject key identifier:   E3:3A:34:BA:BF:FA:06:16:60:8F:83:53:A4:9D:61:27:D3:FD:3D:DB
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       0199FBEB9EC581E1E15BF199F775CC368501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 10:02:26 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:26 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:26 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: VrDWXWe0mQZoGVFaRmBNpebIKEOYwFJfPt9WHjULrV4=)
                          2: DIiJmhkGPOYoFSzKU5OJGHxPZv0.roa (hash: wVFQMX+v03An5N7stfoX0LOfftlraoV2nDd1HWqmadg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:9e:c5:81:e1:e1:5b:f1:99:f7:75:cc:36:85:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Oct 19 10:02:26 2025 GMT
            Not After : Oct 20 10:02:26 2025 GMT
        Subject: CN=e33a34babffa0616608f8353a49d6127d3fd3ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:80:86:80:c0:4f:15:49:5a:06:1f:7d:1a:8b:
                    75:d2:75:bd:0a:d8:3a:ba:54:b1:32:a2:ef:6f:62:
                    94:19:96:74:0f:b2:d8:f4:1b:05:69:8e:d7:67:bc:
                    f1:c8:19:7c:ac:22:11:7b:ed:83:8f:bd:c8:26:af:
                    53:57:0b:bb:4d:88:7e:ec:cd:22:65:c4:44:ce:9b:
                    4f:2c:45:24:62:b5:3a:d6:e8:f2:8d:61:e0:27:b7:
                    2b:38:40:96:1f:2d:32:35:51:70:25:4b:c3:08:a0:
                    9e:ad:32:58:49:c2:89:c5:72:b0:28:30:d4:d1:d3:
                    a0:3a:d2:9d:58:66:b4:45:44:44:2d:f4:92:88:36:
                    fa:d7:4a:5d:ca:6a:18:8a:a8:b7:45:91:ef:c1:ec:
                    7d:53:e2:54:04:7d:45:b2:19:89:e1:a3:82:be:db:
                    c9:de:f9:44:3f:9c:97:7f:59:52:d0:38:49:2c:e2:
                    e7:dc:0b:63:fe:ed:32:3e:b6:20:5d:f2:32:d3:be:
                    1d:c3:23:ea:c0:4c:f7:b5:83:9f:0c:f6:de:bf:f4:
                    3f:d1:88:ac:37:f9:65:12:83:c4:ec:78:95:49:a2:
                    1f:24:54:16:88:e7:03:39:bd:e1:35:e4:26:50:ac:
                    35:4f:00:6e:e5:b3:d1:80:51:86:48:c5:27:09:e0:
                    6d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3A:34:BA:BF:FA:06:16:60:8F:83:53:A4:9D:61:27:D3:FD:3D:DB
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:51:b9:fb:c6:71:0d:bf:62:e6:03:12:d9:de:d1:27:ff:30:
         aa:64:88:5d:e7:52:a6:fd:cc:80:4f:69:c5:03:64:d0:2c:70:
         e1:6f:04:8a:5c:91:94:e9:b3:a7:6f:ca:6d:72:a6:33:23:c2:
         ba:c7:bf:6b:f7:56:bd:ee:47:01:ed:7b:02:a4:3d:99:32:71:
         09:16:ab:95:89:ce:55:1a:f1:3d:d1:96:e3:b6:6b:47:c8:ff:
         be:c5:65:8d:43:63:f0:e5:9b:57:d3:b8:c9:29:c7:97:8e:ef:
         86:ff:f3:e4:33:df:38:74:bd:48:cb:24:18:c7:33:b7:ba:08:
         ba:f4:03:15:17:b6:ba:fc:a6:1d:14:05:6b:12:85:10:d0:5e:
         aa:d4:ce:2b:d4:90:80:61:dc:64:79:51:59:30:2e:9f:ef:57:
         e5:8a:96:90:47:3c:b1:b1:20:da:65:58:e8:55:ae:56:9f:66:
         de:bd:d2:35:01:a1:e1:4e:bd:66:0f:8b:8d:9a:bf:6c:3e:47:
         dc:03:e1:db:b8:96:46:a9:3b:c5:9f:f7:e0:b8:21:bf:ac:73:
         4c:8f:84:1a:e2:a9:38:66:65:f5:7f:2e:3c:b9:d6:9e:29:9b:
         d7:56:f7:52:fb:0e:b2:55:89:c2:5c:19:55:bf:b9:d6:c8:54:
         63:5c:25:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:29:39 2025 by rpki-client