Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          qcoQ/N2NTDTo/FO8PF4oi/m3Rrx2536EMun0cZUf2/I=
Subject key identifier:   00:6D:C6:39:0F:F0:1A:64:36:5D:E1:2D:A8:5A:F8:C8:79:EC:A2:35
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       019A4E86502DDE684BF038CA986263BBCCA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          13FC
Signing time:             Tue 04 Nov 2025 11:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 11:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 11:00:16 +0000
Files and hashes:         1: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: uGk3ResM8IKw9YaSI7M8qEKR/XxbhsByeqP80dN50fM=)
                          2: Hhl_Ps8o2QGnYco4FO1OXr5ijFU.roa (hash: 6fvLi0/fqupKmxDBTFAgP5SGIqAO7BfwicUQEAWog9E=)
                          3: Nkr_GlprDZw9lnWd52PmBmd7vrQ.roa (hash: 9YHLm9DxE2hQJ58if++TORCN8vsnbZqNWmb+Zklfpt4=)
                          4: YG7S_BKbYfU6SUjYOo1Qwa6UIis.roa (hash: Jrnsr/C5NjCKGrVhAZ6DhSLYahtukJ6T9Dv6tWtZGv4=)
                          5: ZXngKU01a_kjXn9mpqf40kcafVA.roa (hash: 8RfkCh0AjrRQHRpm6NpNuh0rqzoYMIsu54leaUMRXA4=)
                          6: c8o0B4Kc0K00BPoNjWfCYKoQvYg.roa (hash: UmQmGO4jozhIbdSa6hU/VftLF6XoNAfjEHYNN7++TiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:86:50:2d:de:68:4b:f0:38:ca:98:62:63:bb:cc:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Nov  4 11:00:16 2025 GMT
            Not After : Nov  5 11:00:16 2025 GMT
        Subject: CN=006dc6390ff01a64365de12da85af8c879eca235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:91:47:0e:60:ad:f8:4b:3e:0b:56:d2:6b:
                    b9:85:5e:01:95:86:9b:26:a3:06:61:e8:e2:19:f7:
                    f6:7a:80:f3:0f:42:87:6a:ec:8d:e7:c8:20:22:84:
                    79:34:24:1c:27:91:94:d9:b6:47:b1:7f:24:e9:ac:
                    be:01:7c:9f:32:d9:da:30:2b:e7:0e:48:d4:8c:85:
                    82:db:50:30:b5:c1:d7:15:ce:08:3c:fd:e4:0d:a8:
                    b7:6c:09:64:94:10:70:01:d1:31:8b:32:6b:cd:8a:
                    da:f1:25:0d:0a:5c:d1:bc:1c:5c:af:28:c2:de:e2:
                    a0:2a:87:fc:d8:93:b8:c8:87:38:8f:d4:86:a5:a7:
                    14:66:b1:a7:42:ba:e8:c5:b4:d2:da:06:02:c6:a4:
                    88:2d:1c:30:ef:e2:ab:75:5a:4e:7c:d0:7a:89:3e:
                    9c:38:9b:41:3f:af:3f:fa:77:9c:6f:ff:ca:70:46:
                    77:4a:16:41:1a:75:1e:0d:b2:69:89:9a:91:6a:d1:
                    a5:02:6b:9a:a2:4d:61:cc:cc:b3:ec:a5:6f:02:61:
                    ef:52:bb:de:bd:29:a4:33:61:ca:2d:ca:b1:80:c7:
                    ea:7c:8d:ee:96:c9:3b:41:45:14:32:cc:43:18:c1:
                    a6:46:35:1b:73:8f:d7:ca:27:ff:d7:64:2c:35:65:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6D:C6:39:0F:F0:1A:64:36:5D:E1:2D:A8:5A:F8:C8:79:EC:A2:35
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:30:11:66:49:d8:80:75:9d:9a:d6:46:eb:3b:43:08:2f:
         87:f1:5e:21:3c:d6:70:d7:d2:00:aa:ec:12:72:9c:c9:6b:d1:
         60:41:0c:8e:ce:6b:ec:d9:1b:49:ca:b6:d6:5c:49:16:14:2c:
         80:6f:22:af:86:23:c9:ba:c2:70:64:24:b3:50:e2:43:9b:c0:
         91:05:6f:78:fa:68:cf:f8:3d:57:e7:8b:3b:ab:1b:d4:b9:4a:
         78:87:7c:0c:61:45:42:f9:d0:30:fd:cb:30:77:eb:03:e1:a4:
         d4:6f:61:42:bd:71:51:72:82:8e:c6:0c:9f:d2:ec:8d:0f:ec:
         ce:cf:ea:56:8e:ff:82:3e:a1:17:77:0b:b7:7c:c6:d6:6b:02:
         65:e1:6f:f5:c7:7f:b4:21:1c:52:da:d3:70:a5:09:dc:47:11:
         e5:f8:0a:f4:01:ae:31:35:57:b8:d3:0c:dd:ff:26:16:80:e6:
         f2:c7:ca:05:e4:bf:b8:ad:87:51:01:c8:2b:bb:71:d2:27:04:
         50:af:ed:c4:be:5c:66:3c:c2:75:a5:c5:30:e8:e1:7b:a1:b6:
         f8:c1:40:2e:11:38:25:94:10:8e:89:7f:fb:32:7f:65:ba:2a:
         ef:3c:78:53:02:21:d5:8b:b9:be:65:1a:4a:1c:64:03:1d:bb:
         0b:b6:d2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:41 2025 by rpki-client