Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File:                     4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier:          tVyDHJLClEIO2IFglwujlpT04T+IdGzUqiK+l7OyX5E=
Subject key identifier:   F3:33:F7:29:FC:CF:7C:B3:AB:A5:00:C7:CF:BC:9F:30:F5:2C:3D:74
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer:       /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial:       0199FC21467FB07CF2FD962C332D6A696A96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number:          0B85
Signing time:             Sun 19 Oct 2025 11:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:03 +0000
Files and hashes:         1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: GbO7eXJ8NG0tQHrvGGL55NRaNEW/bVguR3syNQwmuH0=)
                          2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:46:7f:b0:7c:f2:fd:96:2c:33:2d:6a:69:6a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
        Validity
            Not Before: Oct 19 11:01:03 2025 GMT
            Not After : Oct 20 11:01:03 2025 GMT
        Subject: CN=f333f729fccf7cb3aba500c7cfbc9f30f52c3d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a3:41:a1:7b:f6:73:e7:22:d8:b9:1d:ac:c5:
                    ef:cb:e7:b4:f6:3a:16:24:0f:f0:2f:da:d8:70:ea:
                    ab:81:66:01:66:bd:51:72:e4:8a:85:fd:80:65:58:
                    c1:be:2d:78:1d:3d:d3:7f:c5:f8:2b:51:a8:ad:b9:
                    9d:36:0a:ea:39:fd:c4:69:b5:8a:f0:89:cd:37:66:
                    c9:df:45:d6:69:88:c0:53:27:f6:56:85:e5:d4:b8:
                    33:3c:df:53:d1:ec:5c:b0:64:61:5c:ae:31:8f:7f:
                    96:1a:d7:15:de:7e:53:40:a8:0e:67:6e:c6:be:0d:
                    c1:4a:b7:3c:a0:eb:39:e8:69:2a:01:13:94:32:79:
                    77:9d:7b:72:58:02:7c:ae:6f:9c:b7:9c:93:24:51:
                    8b:0f:14:23:05:c2:97:94:b1:0c:bd:d8:3e:4f:5a:
                    5f:65:97:70:6f:33:69:4a:db:10:32:d0:a9:59:cb:
                    14:43:4f:de:c5:03:f5:08:32:46:89:6b:2f:d1:0c:
                    4a:00:8d:04:41:b1:61:ae:1c:09:63:09:75:b9:62:
                    63:a3:a9:38:e2:e3:d6:8d:86:53:b0:dd:5a:ae:e0:
                    d4:eb:0b:f7:af:15:71:06:6f:76:8d:20:ec:1f:5d:
                    30:ee:e4:97:cd:52:b3:5e:52:ca:14:19:eb:90:df:
                    e0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:33:F7:29:FC:CF:7C:B3:AB:A5:00:C7:CF:BC:9F:30:F5:2C:3D:74
            X509v3 Authority Key Identifier:
                keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:13:c2:3f:c5:f1:55:07:ae:25:e9:31:e0:ec:a2:0b:2a:83:
         b7:ea:29:d8:20:81:1b:ea:37:8f:8a:96:47:88:3f:5b:7f:06:
         44:81:bb:63:a9:b2:08:a7:6c:b9:a2:22:b1:73:4b:53:e1:e1:
         cf:cd:5a:58:ad:22:e9:88:e9:84:6a:b3:db:d9:fd:57:ed:53:
         22:66:1e:28:e6:2a:3a:cb:c5:f4:ee:7a:d0:6a:e0:14:29:6c:
         a7:9b:41:ef:95:97:fe:76:66:80:fa:46:fc:e1:f2:60:ea:ee:
         58:5d:99:41:f8:b0:ea:b1:55:b7:04:d5:31:a7:c1:e0:1b:b9:
         7f:fa:3f:19:52:fe:3e:d1:0c:2a:87:c5:26:8e:42:4d:2c:53:
         69:a8:50:c7:2f:37:d8:64:e2:d7:31:bc:6f:41:e6:d4:e0:1b:
         04:aa:21:2b:be:69:74:3e:9d:fc:75:04:c5:8b:cd:24:bd:19:
         3e:6c:73:38:b1:24:27:33:78:96:e3:72:da:91:56:3c:7f:66:
         ac:62:5f:a5:e8:44:6c:ab:5f:6a:d9:53:6c:d3:60:fd:2f:22:
         b5:5e:54:3b:df:90:38:2e:71:b8:88:c1:05:f6:09:14:3e:f6:
         48:a4:ff:47:32:40:fc:c4:ca:5f:0c:78:dd:25:e4:0f:76:e6:
         91:d4:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:18 2025 by rpki-client