Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
File:                     dkL9PzNs5u6Z5h-pdwSabGqSPko.mft (raw, json)
Hash identifier:          jVzzpQOsTyqQLUTImx8JYEZ4NpV3JKku+80HVyaAgcA=
Subject key identifier:   89:EC:33:93:71:C5:21:C8:FB:AD:04:75:7E:72:01:B0:EB:39:C1:A6
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       019A50E425D1CAFA4CB1DCBA3CD8FBD8705E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
Manifest number:          1792
Signing time:             Tue 04 Nov 2025 22:02:00 +0000
Manifest this update:     Tue 04 Nov 2025 22:02:00 +0000
Manifest next update:     Wed 05 Nov 2025 22:02:00 +0000
Files and hashes:         1: ILTLOyoWPc07Zu5uedVl9OoSM7g.roa (hash: rrMZtSbTq6ORLNPo8ZtTEklQIan0rtyS360P6d5+a8w=)
                          2: dkL9PzNs5u6Z5h-pdwSabGqSPko.crl (hash: GxqFdw5iu2CcmTDFnpYKwRNFpwxg9GzGmyKdmc99an8=)
                          3: pygSYveYfJ18y88VT99Py8VI8Ck.roa (hash: oWrjqJqkXBJagZmzia7A5lPs/2l0PT9MnEzwS9nzSRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:e4:25:d1:ca:fa:4c:b1:dc:ba:3c:d8:fb:d8:70:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Nov  4 22:02:00 2025 GMT
            Not After : Nov  5 22:02:00 2025 GMT
        Subject: CN=89ec339371c521c8fbad04757e7201b0eb39c1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f4:eb:df:b7:bd:42:ec:27:31:f9:59:c7:36:
                    61:42:4d:66:31:e1:4d:e3:cb:5d:1a:f6:73:13:d9:
                    4b:70:14:15:21:ca:d4:55:7d:33:aa:63:65:7c:a5:
                    86:7e:03:f3:a0:57:e1:19:47:f1:9f:99:b2:ac:9b:
                    59:d5:34:0f:31:4d:35:47:f7:24:ab:7a:46:f6:b0:
                    d3:0f:62:dc:ce:5b:74:40:b5:cf:1c:94:1a:2c:8c:
                    f9:4a:ad:22:f9:5f:54:99:cf:70:7b:fb:7b:80:55:
                    8a:ac:5f:fe:c2:11:1f:f7:d2:a6:75:c0:a8:5d:fb:
                    5b:bf:1e:2a:ad:9f:21:86:02:89:30:27:92:2f:f0:
                    89:49:22:af:77:80:bf:04:d3:66:98:96:ea:c1:61:
                    c6:c5:54:92:62:80:4f:22:e9:61:15:0c:a4:e1:e9:
                    33:7a:b4:88:54:1c:66:a2:16:02:b0:73:11:05:27:
                    2f:13:c8:b4:1f:3e:1f:ab:c4:cd:51:e6:c0:1b:b3:
                    d9:c8:f6:76:d9:55:24:06:c0:6b:32:06:38:58:d2:
                    ec:d4:2e:4a:f2:73:57:1b:62:ba:66:2b:59:76:b7:
                    52:89:ae:7e:72:c6:56:bd:5d:fc:c4:63:f8:38:76:
                    54:04:cb:f0:30:28:67:67:b9:73:19:18:6f:b0:cf:
                    42:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:EC:33:93:71:C5:21:C8:FB:AD:04:75:7E:72:01:B0:EB:39:C1:A6
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:ad:f2:7d:66:ba:c7:a2:55:d5:fc:0b:d5:8f:8e:94:91:
         1b:2f:51:13:c0:25:94:e4:44:87:27:b7:9a:df:9f:e9:1d:d0:
         f1:b9:11:28:f4:dc:d2:22:d8:e3:f9:8b:71:14:2b:d1:9e:b9:
         03:c1:f1:dd:db:c1:2c:52:6e:81:e3:76:73:2c:82:ae:5c:c2:
         5f:72:b5:74:3e:bb:bc:b7:ee:4f:bc:75:10:5f:9e:a0:cb:a7:
         11:0d:8b:60:2d:4b:17:27:6a:f3:b2:c3:33:46:bf:f7:8d:63:
         7a:3c:c0:9f:b5:1c:b7:86:c9:ac:74:b3:65:51:4b:d2:58:aa:
         eb:4a:cb:43:c9:ce:28:7f:5c:7c:31:12:c1:ef:6d:03:c3:13:
         10:9a:3b:a8:fb:e3:d4:c8:41:b7:46:8b:69:f3:3b:34:6f:fb:
         f0:91:6d:72:40:a9:b6:1f:c5:0f:fd:38:5c:49:e9:e5:8c:1a:
         a5:eb:d8:4e:62:94:1d:c4:96:8a:d6:54:34:9a:1a:83:e6:a4:
         b7:e1:27:ea:c6:93:5f:74:96:5c:80:ee:14:6e:a8:60:ab:96:
         24:c8:0e:c0:d5:88:4c:53:e9:8d:8c:05:77:16:bf:bf:9d:f6:
         16:1f:aa:f5:3d:d5:95:f4:eb:b3:24:5f:fe:24:8f:e8:84:99:
         38:dc:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:37:20 2025 by rpki-client