Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File:                     rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier:          g+GNP2tMhRA7QRZowQ4Yk0T+jS40vSq4Y/DmaqygHNQ=
Subject key identifier:   DB:A5:6C:E6:05:DC:C3:80:B9:F9:AD:75:15:F1:A7:8A:D2:01:B5:B7
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       019A52D121F6ADAC7E988DE4C298CE4C925C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number:          0DF5
Signing time:             Wed 05 Nov 2025 07:00:28 +0000
Manifest this update:     Wed 05 Nov 2025 07:00:28 +0000
Manifest next update:     Thu 06 Nov 2025 07:00:28 +0000
Files and hashes:         1: 1-boXqKY_Hyoe19Z5JIZ3K6AJj94.roa (hash: a5qc0h3BhqmeqSpAZh7GFmd10hjtqvPl4/lqfepgblo=)
                          2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: 9yNeSO02BowfaUW+Vo59kq5qBTHco8piOmBvF7zdRro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:21:f6:ad:ac:7e:98:8d:e4:c2:98:ce:4c:92:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: Nov  5 07:00:28 2025 GMT
            Not After : Nov  6 07:00:28 2025 GMT
        Subject: CN=dba56ce605dcc380b9f9ad7515f1a78ad201b5b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:b7:44:66:68:83:15:5d:b8:6c:ec:19:41:
                    02:21:8f:ef:91:8c:41:93:7c:7a:8f:8d:7f:5f:47:
                    df:f8:69:67:c5:b8:52:fa:2b:7c:24:c8:dd:ca:a4:
                    ec:f7:70:b3:2f:c9:93:94:04:55:5c:39:22:45:90:
                    3e:04:2d:dd:11:a6:66:f6:59:5e:08:32:94:1c:f5:
                    de:83:75:54:8c:3b:2d:d9:81:22:9e:5f:57:49:15:
                    3a:07:4e:99:3e:ef:0b:97:5d:a9:d3:2c:14:3b:35:
                    15:93:1b:05:36:8e:b0:3f:3e:d7:a1:74:ca:c6:6a:
                    f4:25:71:8b:4a:27:18:d7:a8:f1:a1:36:7b:c4:d4:
                    53:f1:81:9a:95:c1:0d:8c:81:3a:b3:a0:c0:2e:44:
                    b1:76:76:c3:ca:02:3f:71:b2:ac:00:11:5e:7f:da:
                    1c:f9:78:a1:74:1d:90:d8:be:1e:3c:f2:20:87:ca:
                    8c:27:26:6f:68:cb:81:fa:fd:6f:94:4c:1b:52:30:
                    f0:d4:cf:6c:4f:c3:48:3e:37:de:3b:39:59:b0:06:
                    66:2a:32:3e:8c:c1:25:eb:1c:d4:a5:48:f5:2c:a4:
                    51:16:f0:8a:5d:c1:c6:4d:0a:fb:54:fb:18:88:09:
                    f7:55:3d:37:89:ce:da:5d:a6:61:65:74:34:0a:f7:
                    ee:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A5:6C:E6:05:DC:C3:80:B9:F9:AD:75:15:F1:A7:8A:D2:01:B5:B7
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:57:83:6c:68:27:ef:80:c3:21:69:74:0a:ba:f8:a3:73:20:
         d8:73:66:c4:7e:5d:93:4a:82:1a:d1:59:f2:ad:aa:80:7d:9e:
         65:5a:eb:f1:da:6e:44:0c:cc:f0:d6:8b:99:96:c9:93:22:e0:
         51:e6:47:b7:92:0d:b1:b9:c1:e4:43:ae:79:77:f7:3b:02:03:
         11:c0:21:82:10:0a:e4:cd:e3:62:30:73:4f:d6:ee:66:90:16:
         29:65:0a:08:b1:d7:f7:ec:f6:0d:8e:41:d9:56:e2:6d:72:9e:
         39:21:a9:6c:53:5e:fa:2b:3f:79:4b:0d:00:4c:c4:8d:8e:ff:
         70:95:b4:7d:a6:e3:18:c1:6a:e1:0e:40:6f:b5:b9:aa:df:19:
         93:fe:47:e6:d0:05:fa:49:63:eb:ad:20:d9:e7:3b:a3:c3:3e:
         ce:c1:ca:67:0a:ec:4e:e0:56:fe:e3:4d:9f:19:45:26:d1:2b:
         92:e8:30:5a:08:6f:cc:dd:58:20:85:2a:a5:0f:20:ad:f8:a0:
         0e:16:42:7b:c7:23:00:5c:07:4f:06:17:7e:7c:e0:97:93:95:
         1b:fc:ba:fc:21:2d:0d:54:41:a1:22:9d:a6:cc:0e:4b:68:f1:
         85:59:35:c8:55:ae:16:57:98:e1:0a:a9:c8:c6:c4:27:33:e2:
         e7:c7:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:30:00 2025 by rpki-client