Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          gw4seWsoW6wUeLn5oYLXZAMuXFSAltabhbcjWiM0Wec=
Subject key identifier:   40:B0:87:B8:76:B3:83:62:60:71:91:0B:86:CF:02:76:0D:D1:F3:30
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019A5007165E37D0E6DCD431E763CA430F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          0F71
Signing time:             Tue 04 Nov 2025 18:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:32 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: jkSGJ6bolxqeVuFhJLJtJqBykcmIyIAFMJk5KZe66Xs=)
                          2: FTB2RyPwfjD_cA2wvA-ZB14zb1I.roa (hash: xxP3anqPTVsDNIot0W1weEkTT3WAnTHsLSQ+pzdPwvs=)
                          3: G2wclPtQ-NTyFu49JfeZRSYyyxY.roa (hash: X+HR6/7YVlIIqv7OyveCmM7668weB9c1FsbPbUXjZ6M=)
                          4: Ng244YNQbxE3TMeamv03jApwIcU.roa (hash: JyhveyeGRjifQQUL2oBTXMpr9SaWtVHTXLlb3SDxmUY=)
                          5: NpWg16tSB0bbGWCf98-f1HysUn0.roa (hash: UHlOnF4x1qLBxz+eemzBJIEm+L3e+yuVLdeMDUxm9Ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:16:5e:37:d0:e6:dc:d4:31:e7:63:ca:43:0f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Nov  4 18:00:32 2025 GMT
            Not After : Nov  5 18:00:32 2025 GMT
        Subject: CN=40b087b876b383626071910b86cf02760dd1f330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:0f:d3:24:cd:12:0f:f4:10:0c:3d:43:5b:
                    f8:9c:ac:f2:ac:95:9f:22:36:9e:c2:cb:46:ef:f9:
                    47:ae:1e:66:a9:a3:fe:15:61:c7:96:82:d7:e1:78:
                    f9:e0:ed:38:ea:38:9b:1a:24:f4:c9:8c:6f:ea:82:
                    d3:ae:b5:13:40:69:ce:45:13:45:3c:df:bd:60:81:
                    4e:44:47:59:dd:33:1e:21:2d:aa:eb:88:c9:1b:cb:
                    97:cf:0e:6a:48:e9:22:d8:6c:c2:d0:d7:9d:7c:fd:
                    88:85:0c:d1:73:0b:5f:49:46:4f:28:ef:6f:e7:ac:
                    aa:da:c3:ba:d4:91:c7:4f:53:c3:40:6e:55:45:42:
                    ac:9d:58:0a:65:50:99:61:13:9d:df:db:06:bc:16:
                    73:01:38:ef:ba:a1:0d:57:df:d8:6c:a7:2c:57:8c:
                    b5:2b:a3:e3:3b:13:4d:8d:af:fa:2a:5c:9b:e7:3e:
                    65:85:63:f2:dc:da:0b:9f:f5:5b:a6:cc:57:4b:98:
                    7d:41:f0:1d:5b:68:71:3d:e7:fd:34:da:cf:83:40:
                    28:b5:44:6f:fe:84:58:13:ce:1d:e1:88:ca:fc:e9:
                    f9:c6:47:10:92:37:da:47:45:c1:6e:19:f1:09:6a:
                    6b:c1:ae:4e:8e:2a:74:cd:59:77:49:ee:85:ed:17:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B0:87:B8:76:B3:83:62:60:71:91:0B:86:CF:02:76:0D:D1:F3:30
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:9e:aa:ff:c2:a7:24:f5:59:15:b4:98:1a:58:c1:5e:b8:71:
         8a:4a:85:d0:7a:50:5a:44:12:ec:3c:64:09:51:ac:0b:b3:00:
         5f:d2:0e:11:6d:86:77:3f:d3:ee:d0:a0:35:db:6d:57:05:37:
         f9:c6:ff:35:fd:4e:d5:31:80:3d:9c:dd:4c:f0:23:ee:bb:10:
         e7:61:8c:62:43:34:da:fe:ad:0c:7d:50:fb:28:08:b9:db:9b:
         bb:f0:5e:7f:49:67:4e:de:98:74:cf:50:4f:f3:85:87:f4:fc:
         ca:e8:da:c2:c5:ee:cd:73:d4:f1:9c:2d:b9:8f:d0:fc:5f:6b:
         5d:e2:6e:98:59:ee:7c:b1:f8:99:53:56:74:3a:69:b5:f6:6a:
         ce:8a:bc:2c:6f:4a:7e:22:80:f4:37:c8:4a:88:90:f8:8d:9c:
         7b:12:ad:1a:86:d2:55:af:37:77:44:b4:3c:5f:5c:d8:01:5d:
         7a:f4:7b:dc:d1:41:19:08:63:0d:3d:0d:2b:56:09:c4:ae:65:
         e7:b7:a1:e5:30:43:32:d7:f0:79:82:38:ce:34:53:63:0b:2f:
         1b:0c:fe:9f:c3:a4:53:40:38:51:d7:14:8f:9c:89:f4:98:d5:
         ed:26:8b:36:b1:80:87:a0:b0:0d:78:2f:e7:e6:d6:7c:d9:9a:
         48:67:01:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:28 2025 by rpki-client