Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
File:                     dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json)
Hash identifier:          jKWicM03zTEzgQtKPcz3jeToCxzICc0HgE2uBGsJQP8=
Subject key identifier:   E6:88:80:07:90:B6:6D:32:3F:95:AF:22:9E:0B:92:09:6E:69:30:48
Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94
Certificate issuer:       /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
Certificate serial:       019A4F626A2612DDBA9C457D8A9AAF3697D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
Manifest number:          0521
Signing time:             Tue 04 Nov 2025 15:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 15:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 15:00:40 +0000
Files and hashes:         1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: I21F2UnNTaL6taklTMs2c65dJlQz9/XWs+WqOulCWms=)
                          2: lEeX1Eg0Z-W1kOpICD-OcFxqe18.roa (hash: oHYZvay6jraEH9M8mxk8k8IOPDuHNAZIsTWqM0koag4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:62:6a:26:12:dd:ba:9c:45:7d:8a:9a:af:36:97:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94
        Validity
            Not Before: Nov  4 15:00:40 2025 GMT
            Not After : Nov  5 15:00:40 2025 GMT
        Subject: CN=e688800790b66d323f95af229e0b92096e693048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:ff:e4:90:80:f5:a2:78:5d:1a:11:e2:de:
                    c8:8a:ad:63:73:7b:03:1b:21:56:f8:96:4d:8f:bc:
                    de:f4:ea:15:2d:4f:e2:3f:7d:1d:34:3c:d4:47:93:
                    29:1f:63:9b:3b:f6:0c:7e:1a:94:15:be:29:86:8c:
                    f0:00:17:81:1f:f1:3d:b6:e4:fa:87:a3:c2:65:2b:
                    1f:59:18:fa:92:8d:65:22:0c:eb:26:3d:4d:ba:34:
                    17:03:de:f2:22:3c:55:dc:45:de:6d:6f:f0:22:80:
                    1b:0a:8d:12:3e:ab:3a:5e:18:bb:5a:11:2d:e2:10:
                    3c:8e:4f:07:01:e2:53:6d:7b:4a:fb:8d:4a:47:2a:
                    3f:79:9d:aa:2e:d1:b3:86:31:4c:01:65:22:01:70:
                    a8:a5:0d:33:be:1f:e7:6b:7f:0e:ce:32:8b:4f:f5:
                    40:15:60:4a:b1:24:be:8c:21:8a:65:16:ae:00:ea:
                    5c:24:2a:da:49:35:15:bf:b6:ba:dc:02:ea:ed:00:
                    72:1e:94:d9:a2:8e:d2:c1:07:63:65:44:af:00:66:
                    23:d3:1a:23:99:03:71:7d:5e:eb:4b:68:51:5d:fb:
                    64:47:25:8f:f9:62:59:e9:8a:24:76:43:df:4b:c3:
                    aa:ac:d2:09:a4:18:a5:3b:8c:ab:96:10:bb:80:8c:
                    50:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:88:80:07:90:B6:6D:32:3F:95:AF:22:9E:0B:92:09:6E:69:30:48
            X509v3 Authority Key Identifier:
                keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4c:62:0b:b8:89:85:fd:58:4e:37:ec:7d:73:72:c5:ba:97:
         27:fe:ad:9f:eb:11:8e:a2:ab:c9:e5:1d:18:41:42:e3:51:65:
         a8:9f:15:0c:88:88:9f:c2:82:ad:51:1a:44:24:3f:91:a0:74:
         ed:b2:57:93:5a:2a:e6:ba:5f:c5:e1:59:53:90:e0:06:92:8f:
         71:d5:ff:3e:ed:f7:8a:89:43:f6:c0:ee:48:ca:e7:bf:9c:7d:
         2e:df:54:7a:87:8c:41:1a:16:6d:46:21:6c:43:df:e0:59:68:
         bb:ff:11:cb:95:5a:7b:f7:19:dc:03:fe:be:8e:49:d6:d1:54:
         17:b1:b2:dd:ae:d7:68:38:3c:77:b6:84:d5:18:e9:3a:16:9f:
         5c:89:da:95:e1:9c:04:82:7c:ed:61:e6:34:6b:16:b8:e3:ed:
         bf:49:46:aa:1d:00:64:b1:d7:07:8e:f8:74:49:03:d1:f7:3d:
         dc:54:cc:00:09:a0:d0:03:71:3d:f8:1b:63:a9:d5:72:e3:72:
         18:e2:ca:1b:1c:fc:db:7c:b3:ca:2b:97:1b:7e:1a:9a:33:77:
         b5:7b:bb:f5:cc:21:61:f9:32:0d:c1:f5:c5:f3:d5:a9:c0:a3:
         14:0f:e0:4f:51:d2:2e:e0:ed:99:87:ac:4e:24:4a:55:4e:48:
         b3:0a:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:57 2025 by rpki-client