Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          eC+VS65M9iuwdbRmNioPnX5ftMsDcZH0Co+J0lOnw3w=
Subject key identifier:   F8:CF:43:90:12:9E:0F:B8:96:55:33:F4:1C:52:CB:4B:3B:F4:16:79
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       019A4EF4BB9F25C56F2D6C3A8448696F6EB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          0DB1
Signing time:             Tue 04 Nov 2025 13:00:52 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:52 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:52 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: mat5OY4zaSEC8CBYk9P5AACQ0/WwowuBnq3QXPZsxcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:bb:9f:25:c5:6f:2d:6c:3a:84:48:69:6f:6e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Nov  4 13:00:52 2025 GMT
            Not After : Nov  5 13:00:52 2025 GMT
        Subject: CN=f8cf4390129e0fb8965533f41c52cb4b3bf41679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:fa:da:c4:a2:97:c7:19:8b:58:8a:8c:76:
                    bc:43:56:c6:48:48:40:6d:f0:c5:9c:88:69:5c:e2:
                    ee:f7:95:ba:23:dd:89:4b:49:82:58:22:11:44:20:
                    67:44:25:93:5f:46:c5:83:c5:e8:e5:b1:a0:ba:2d:
                    71:12:23:91:8b:fb:78:92:33:ff:6c:56:bf:43:fd:
                    80:c5:6a:96:4f:06:a1:c6:9a:53:ac:15:af:f4:7f:
                    a2:0c:3d:6e:a4:31:65:3c:2a:ea:2d:fc:fc:6c:07:
                    b5:a0:1b:1f:fa:02:55:70:aa:16:09:db:d3:78:25:
                    82:ba:21:7f:f5:a1:46:9d:d8:d1:0f:a6:8c:88:bd:
                    d0:32:d0:60:05:52:46:6e:52:e2:31:4c:ae:03:33:
                    dd:41:79:1f:15:9e:a4:86:75:6e:6e:c7:a4:75:8e:
                    7d:a5:41:4b:83:43:9a:38:14:95:18:31:18:81:8e:
                    64:2b:0a:18:69:01:0c:61:20:dc:5b:6a:b6:bd:de:
                    8f:b9:7b:26:5e:7b:ab:92:bd:51:24:a4:ab:ad:b1:
                    74:8c:57:56:0f:17:58:2e:39:63:a2:48:ab:eb:cf:
                    88:c3:1b:a1:ee:55:41:90:0e:17:4d:5d:3d:b3:5f:
                    0f:42:93:48:e3:ff:2e:f6:9c:36:16:2f:20:8b:0d:
                    52:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CF:43:90:12:9E:0F:B8:96:55:33:F4:1C:52:CB:4B:3B:F4:16:79
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a6:8d:b6:3e:72:e4:0a:79:92:6f:2e:e9:54:1f:a9:c0:aa:
         ff:bb:8f:17:1a:bd:69:da:fb:9c:67:33:e3:d2:b2:4d:43:2e:
         6a:10:a8:27:82:41:02:22:36:e0:0d:92:8f:b2:c0:e7:4a:33:
         2e:77:d4:9c:b4:41:74:da:3b:da:65:6a:af:10:95:3e:87:fb:
         1d:f6:c8:e7:e2:25:86:22:38:ad:d6:b5:5d:13:d3:68:74:48:
         2c:10:13:e6:17:f0:eb:75:92:fb:a2:75:af:dc:0f:7b:38:60:
         67:04:53:a6:5f:4a:13:43:da:4f:1d:87:17:b1:3d:35:cf:13:
         5a:36:30:87:52:9d:4c:e1:ae:f2:e9:b6:35:23:5e:79:3c:52:
         f1:f0:6c:f3:c1:79:6a:33:15:b1:4d:be:3f:df:e9:88:80:c9:
         fd:7b:17:9c:8b:5a:e2:d3:12:78:10:48:db:cc:a5:35:f6:e2:
         64:cb:dc:68:34:03:18:1c:49:03:5d:02:18:eb:8f:5a:8b:21:
         92:c2:1e:44:38:d0:96:22:57:62:40:fd:7a:32:d6:7a:03:5d:
         a9:9d:87:23:0c:65:40:99:f9:ba:e5:78:94:e0:96:e8:ce:06:
         0f:53:bc:d9:93:cd:1b:57:61:1f:26:0c:86:cc:77:89:53:c7:
         0d:0f:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:35 2025 by rpki-client