Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
File:                     2URo88w_OG8m5igbf6iww7sjagY.mft (raw, json)
Hash identifier:          HT6ecCvzuxAvvZDm/WfixVQo/gnaWNjDQ69yFOlEC1k=
Subject key identifier:   E6:4F:BF:19:41:7D:B4:68:93:A0:47:86:3C:CA:95:45:90:CD:CB:9A
Authority key identifier: D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06
Certificate issuer:       /CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
Certificate serial:       0199FCC60CF5DFE53C31E4CF7310219E98CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
Manifest number:          0108
Signing time:             Sun 19 Oct 2025 14:01:01 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:01 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:01 +0000
Files and hashes:         1: 2URo88w_OG8m5igbf6iww7sjagY.crl (hash: XsHQFZ5/Q7anIoM0Lqmsp1CnvcmPpaSFq9/3wHREmTk=)
                          2: YZaUjQlCbflfEUbT2gpPLo1ny_U.roa (hash: +SwgIn7dK0HQ0r746yPpM+Y8qQkIQQdi0ZZhu/E+a8Q=)
                          3: fYh0q4RbsUeD03dj0rwHGm4y498.roa (hash: jid4JrHLpAnwUEs/6cvvjiWubSMoSPBicHqzkJH71lY=)
                          4: jazd_sDkuEJsPouRMKWYSplW4JA.roa (hash: lJqelurOOYzLhv1ncckBta0UihDNfRX5VVhF47Vr6lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:0c:f5:df:e5:3c:31:e4:cf:73:10:21:9e:98:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d94468f3cc3f386f26e6281b7fa8b0c3bb236a06
        Validity
            Not Before: Oct 19 14:01:01 2025 GMT
            Not After : Oct 20 14:01:01 2025 GMT
        Subject: CN=e64fbf19417db46893a047863cca954590cdcb9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d0:63:02:76:51:9e:eb:53:61:19:11:60:1d:
                    2a:7b:43:ed:25:86:0e:49:f2:5e:53:d9:2c:c1:c1:
                    92:dd:79:8c:0a:ad:fb:27:f5:14:78:b0:ed:30:bc:
                    93:d8:b8:e4:2e:0c:66:f7:71:71:86:96:df:47:63:
                    a7:61:99:08:44:e2:3b:81:ba:cb:55:d4:7c:f5:c1:
                    2d:e4:36:cc:64:ee:36:96:cf:82:3b:2f:3b:c0:20:
                    46:4b:16:a2:9f:5e:31:3d:69:62:36:ad:5f:f0:c9:
                    61:ca:39:72:93:11:7f:7e:ef:fc:37:a7:aa:84:f1:
                    57:df:d0:fc:87:1c:59:82:05:7f:8b:eb:9e:9d:40:
                    e0:d9:89:3d:f2:06:fa:2b:05:d9:71:5a:61:d6:a9:
                    b6:7c:ce:90:26:1f:0c:b0:57:d9:52:4f:7a:a2:a3:
                    a3:57:f6:2d:af:5e:60:08:67:d9:d7:99:7f:ea:40:
                    7d:70:75:89:bb:e1:62:47:a8:d6:70:e0:b2:5f:c2:
                    45:4b:78:ca:8c:a9:e3:1d:b1:fa:d3:da:0e:43:81:
                    a4:91:ec:43:6c:9a:08:c0:2a:d5:e9:38:c7:9b:3a:
                    6b:98:4a:0b:78:51:a5:9e:41:ae:f8:32:d8:00:89:
                    ea:80:25:72:13:c0:8c:a4:c5:39:0d:ab:12:aa:82:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:4F:BF:19:41:7D:B4:68:93:A0:47:86:3C:CA:95:45:90:CD:CB:9A
            X509v3 Authority Key Identifier:
                keyid:D9:44:68:F3:CC:3F:38:6F:26:E6:28:1B:7F:A8:B0:C3:BB:23:6A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2URo88w_OG8m5igbf6iww7sjagY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/82871e-52a0-40df-ae3d-76fa515b4b6e/1/2URo88w_OG8m5igbf6iww7sjagY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:a4:f4:7a:e2:88:a3:3c:22:8e:96:bc:e9:6b:35:49:58:ef:
         89:3d:07:7f:d3:b6:bc:91:0f:fc:35:69:ee:e3:f1:d3:73:ad:
         64:99:22:d8:8f:cc:d8:32:5a:e7:14:bc:3d:b7:78:1c:0d:01:
         d9:59:06:28:4d:6d:3c:15:db:fc:24:59:08:b2:c1:49:b9:ac:
         57:e0:12:6b:25:34:47:b6:54:6f:24:d8:16:17:8f:c0:7b:41:
         76:67:b0:0b:cd:7f:36:27:0d:6f:fe:e3:2c:07:c4:d8:30:99:
         c7:9f:23:19:ef:24:07:94:49:fe:ee:a0:b8:90:d5:e8:60:d5:
         b5:8c:83:86:68:25:11:01:e7:86:ad:a6:3a:c2:d1:05:b3:d2:
         b7:fd:39:e7:9f:90:ef:49:79:c5:ec:53:8a:28:a4:aa:1a:ad:
         45:2a:e6:1d:4c:12:8c:08:34:2c:a7:aa:65:b1:e3:82:60:82:
         83:1e:82:36:f3:0a:ee:25:b7:f9:fc:92:e3:a1:45:5c:bb:a1:
         fe:49:25:57:ce:19:78:1b:44:d3:43:dd:69:5a:fa:0f:31:e8:
         e0:a2:71:98:5b:71:e7:d3:6e:bb:a2:9c:6e:4b:13:80:1f:2a:
         84:d6:42:a1:bd:84:8d:cd:88:18:c9:48:4b:9e:55:85:9f:0c:
         46:5a:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:01 2025 by rpki-client