Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File:                     15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier:          Q3vHcDOazL08x3oVkoqqL7+rQ9wASex5LpXCbUnn/vI=
Subject key identifier:   7B:F0:F2:CD:C7:CE:76:B8:07:6D:F5:45:7D:03:D4:2C:5D:BC:BC:6A
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer:       /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial:       019A4D73E5B1B0BE4224555F28907A233529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number:          0F10
Signing time:             Tue 04 Nov 2025 06:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:32 +0000
Files and hashes:         1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: toPycnZH/GKo025uoh0CZhu7LQm3QCogB18LmlVCcn8=)
                          2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:e5:b1:b0:be:42:24:55:5f:28:90:7a:23:35:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
        Validity
            Not Before: Nov  4 06:00:32 2025 GMT
            Not After : Nov  5 06:00:32 2025 GMT
        Subject: CN=7bf0f2cdc7ce76b8076df5457d03d42c5dbcbc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:7f:13:b6:94:62:92:32:d0:4c:04:de:18:1e:
                    40:7c:72:a6:1e:e9:bb:18:95:ae:bf:3f:7f:16:ab:
                    c9:42:de:4b:b3:f7:7d:2c:db:bd:2a:7f:4f:d9:d0:
                    96:df:88:fa:1b:9b:64:69:17:bf:00:11:e6:d9:19:
                    3d:e0:a5:31:1c:48:89:40:ae:7b:ac:eb:02:70:dc:
                    9b:f7:84:a5:08:be:be:51:bb:e6:5f:b5:29:13:9c:
                    e9:09:b8:70:7d:7a:86:88:3e:ac:b1:f3:da:27:20:
                    92:cd:a9:9e:18:b2:03:c0:6c:ae:3a:1a:ec:30:e9:
                    73:f8:04:e8:a0:00:b8:ff:2f:16:f8:eb:3d:db:ff:
                    3b:63:79:51:fa:e2:22:60:56:4f:62:ba:e4:c1:56:
                    3d:cd:2d:33:e4:ce:b5:5b:e0:00:3e:c3:d5:c8:d0:
                    c7:3d:e4:50:8d:a6:8f:78:4c:aa:d0:70:f2:47:03:
                    8a:b2:85:86:c8:0e:8d:3e:29:fa:bd:e0:ef:f0:18:
                    4f:8d:68:82:6e:f1:5d:9c:10:3a:28:1f:aa:e0:be:
                    44:87:b4:45:70:04:c8:d5:e9:ee:2c:0c:11:a8:13:
                    b8:2c:32:db:10:7e:19:e6:08:ca:d9:02:22:c7:07:
                    1c:80:8b:a5:c8:45:01:d7:f0:a2:2f:55:11:4a:ca:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F0:F2:CD:C7:CE:76:B8:07:6D:F5:45:7D:03:D4:2C:5D:BC:BC:6A
            X509v3 Authority Key Identifier:
                keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:12:f4:e3:30:01:72:f4:2e:ef:14:bd:ef:4c:57:b7:0b:d0:
         af:8a:85:5e:a3:d1:c4:62:f8:28:d7:ee:8c:12:2e:80:78:59:
         e9:b8:34:5a:11:ac:f1:69:46:62:72:72:21:ea:f8:ce:2b:31:
         e8:fc:b6:da:c9:8d:30:db:22:bd:87:5c:fa:5b:1a:76:73:af:
         e9:d0:57:b8:da:c6:48:ad:9e:9b:ea:86:85:48:84:ba:3a:64:
         58:77:e2:7b:d1:41:9a:d1:0d:39:61:ea:62:ea:51:7c:53:25:
         a4:93:66:ef:bd:d0:9e:8a:68:7f:a2:c5:c6:34:90:91:33:cd:
         87:d9:d9:64:ba:b2:bd:2f:68:ac:be:ba:ee:4b:10:e6:2a:9b:
         6c:10:0c:ec:fd:2d:7b:60:ac:22:4c:00:22:3a:05:69:01:d4:
         18:b7:5f:59:87:44:b3:43:b4:ad:bf:b7:6a:1b:e8:75:da:2f:
         1e:37:9b:c0:cf:e6:7e:06:ea:6e:e4:07:2b:6f:b4:98:82:88:
         83:b7:21:ec:c9:43:9b:5d:c1:59:ba:ec:40:62:82:69:bd:17:
         7d:06:16:df:56:85:45:53:98:64:c6:96:95:26:94:87:0b:dc:
         b8:f3:a1:42:a5:4d:80:61:ac:1b:66:22:d6:63:49:1d:9b:4f:
         bf:6a:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:23 2025 by rpki-client