Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
File:                     0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json)
Hash identifier:          bluoG61/QRCjj4WNe5V2UiSEgpkcUZLZAzXzaYLZ7HM=
Subject key identifier:   D8:84:45:E4:3D:E0:08:31:25:6F:E8:52:30:69:EC:47:DB:0D:C9:2A
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Certificate issuer:       /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial:       019A503DF5D8DDA55370EBB8D9A6D55103DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
Manifest number:          169E
Signing time:             Tue 04 Nov 2025 19:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:29 +0000
Files and hashes:         1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: vqOgRUcLFc8otv9MdCmBnz9+KcBWnebkvI2GR7PEoNg=)
                          2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3d:f5:d8:dd:a5:53:70:eb:b8:d9:a6:d5:51:03:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
        Validity
            Not Before: Nov  4 19:00:29 2025 GMT
            Not After : Nov  5 19:00:29 2025 GMT
        Subject: CN=d88445e43de00831256fe8523069ec47db0dc92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:73:a5:11:60:1f:da:95:eb:6f:0f:7d:ca:
                    e7:7d:aa:19:c8:9f:c4:e4:2a:bc:f5:bd:d5:01:16:
                    0b:fe:52:72:56:35:b1:59:17:4e:81:40:20:26:52:
                    71:d5:9e:23:75:cf:fd:0f:15:59:f2:78:7c:e9:0f:
                    a5:bc:ec:47:60:d6:c4:75:c1:e3:51:1e:f7:3f:ea:
                    63:69:4d:82:e4:8a:c4:d7:7c:73:e7:48:f9:8a:84:
                    d4:84:44:52:75:0c:19:fe:37:6e:79:21:e8:20:f2:
                    ad:74:2e:bf:62:60:84:30:e8:64:09:ee:6b:24:fa:
                    e2:ca:93:eb:68:86:0c:89:eb:d1:bb:86:c2:86:b3:
                    a6:38:ed:5d:33:e5:57:7f:60:d7:a0:9f:0c:67:ee:
                    b9:b2:6a:eb:8b:26:69:66:a7:bd:e9:c0:23:07:6a:
                    b6:fc:16:e5:9d:e0:75:b0:48:47:bb:cb:c1:b9:04:
                    c1:81:6f:9e:ae:4c:ef:1b:3b:31:b0:f9:ed:c5:5d:
                    39:0d:c2:33:37:eb:6f:fa:17:47:9e:58:9a:a8:e6:
                    a3:d3:c2:62:9e:91:76:a6:15:fc:1f:e7:d2:f8:06:
                    bf:0b:16:b0:9e:ac:9d:60:70:57:ad:ca:70:bc:66:
                    ee:d7:b3:dc:74:4d:17:43:dc:33:1e:7f:50:5d:b1:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:84:45:E4:3D:E0:08:31:25:6F:E8:52:30:69:EC:47:DB:0D:C9:2A
            X509v3 Authority Key Identifier:
                keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:1f:60:b6:0b:02:0a:6f:bc:bf:4a:cd:21:cb:73:18:ed:
         08:d9:40:20:e0:ec:60:ae:98:66:51:9d:22:bf:0b:8d:2c:54:
         f2:07:21:3e:11:f7:9c:ce:7e:75:76:2c:f2:8a:d2:19:cd:27:
         53:cd:11:8b:2a:d0:de:df:bc:d2:f9:cb:b3:3a:4c:95:57:b2:
         66:41:41:38:1d:2a:a2:2e:a7:55:8d:78:76:37:7f:e5:68:0d:
         30:09:70:99:cd:f1:43:13:79:1c:a1:cd:11:6f:e3:c6:1c:74:
         33:2a:f6:ac:ce:05:15:75:2b:45:31:0b:2a:d9:9b:31:d3:02:
         f0:0a:61:d2:90:b2:8d:ac:45:9c:4c:9c:65:b9:79:71:5d:5a:
         74:5d:f4:0e:c5:99:6e:92:61:04:fc:81:cc:f7:b8:98:f4:34:
         13:a9:83:43:3b:f6:8d:59:16:00:7c:68:45:65:9b:4b:b1:fa:
         d1:74:14:ea:06:da:35:30:50:0e:46:37:8e:b1:5b:84:5f:b6:
         a3:a4:ce:b8:5e:5b:81:2a:c2:c4:55:0c:3f:03:58:06:42:16:
         84:c4:34:a0:2e:03:37:d7:07:27:b1:6a:af:1f:76:14:a8:a1:
         f3:b9:d8:42:20:9d:17:4a:29:8a:cf:1d:eb:68:fc:9f:bc:3b:
         11:44:d6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:27 2025 by rpki-client