Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
File:                     Xpidr2T6291TSPfdIm7Mn-_ARRU.mft (raw, json)
Hash identifier:          gZ0cQPtsl2zJ2aNs/ooIBf0GnJm8tX11PL/mH/5jsdQ=
Subject key identifier:   47:8A:BE:1B:D1:52:0B:FB:BF:06:38:82:35:CE:E4:AD:82:89:08:C7
Authority key identifier: 5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15
Certificate issuer:       /CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
Certificate serial:       019A0C38A57D961FB2BB67A95052552750DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
Manifest number:          0B90
Signing time:             Wed 22 Oct 2025 14:00:30 +0000
Manifest this update:     Wed 22 Oct 2025 14:00:30 +0000
Manifest next update:     Thu 23 Oct 2025 14:00:30 +0000
Files and hashes:         1: Xpidr2T6291TSPfdIm7Mn-_ARRU.crl (hash: RM7go955xEGVTPeDAiFXfPPdfn9a7xu8u1ryD94arAw=)
                          2: Zv3Kf7_a7bi1ycJZnLN86MJoQ6Q.roa (hash: opNzDV4dKyFm82stIdxe2eWVlw9lr6MHF0M+Y7Sxna4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0c:38:a5:7d:96:1f:b2:bb:67:a9:50:52:55:27:50:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e989daf64fadbdd5348f7dd226ecc9fefc04515
        Validity
            Not Before: Oct 22 14:00:30 2025 GMT
            Not After : Oct 23 14:00:30 2025 GMT
        Subject: CN=478abe1bd1520bfbbf06388235cee4ad828908c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a9:a5:f7:93:3e:ce:82:6e:a5:de:dc:b8:4e:
                    f1:d6:6e:71:be:4a:7e:44:62:a6:83:b8:68:f3:ed:
                    02:bd:39:6e:f3:1f:19:d2:4a:09:36:27:f9:4a:4c:
                    12:80:3d:82:b6:8b:23:59:18:74:53:7d:42:ab:d7:
                    88:29:03:75:e3:29:7e:5a:ce:39:c9:53:d8:7a:ee:
                    a7:73:12:2e:21:2e:d6:54:39:97:f8:00:b6:80:fa:
                    ca:fc:00:da:40:24:a7:c2:0d:74:57:26:38:7f:bd:
                    fa:da:ae:2d:2d:cf:30:bb:8a:fb:ee:7e:00:fe:01:
                    e6:9c:60:cd:ca:64:be:de:24:46:d8:de:c4:cb:89:
                    b4:63:d7:41:eb:cf:f6:a5:6a:81:04:15:27:6f:18:
                    21:76:d3:60:83:10:76:26:26:0f:0e:a6:ab:05:32:
                    84:73:d5:cb:ae:75:2c:80:7a:eb:b1:55:40:ec:e7:
                    33:5d:2b:f8:60:9f:6e:eb:9e:ac:8b:9e:cf:ba:14:
                    34:8c:1d:0e:6b:81:30:9f:98:11:6b:59:25:33:e2:
                    15:eb:2f:5a:cf:90:bb:39:ee:77:e3:6d:5c:99:67:
                    c6:22:da:4e:ee:70:3a:c7:d5:24:88:71:9e:09:cf:
                    1f:fe:29:04:52:ed:96:32:f9:4a:2a:b8:29:e4:b7:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8A:BE:1B:D1:52:0B:FB:BF:06:38:82:35:CE:E4:AD:82:89:08:C7
            X509v3 Authority Key Identifier:
                keyid:5E:98:9D:AF:64:FA:DB:DD:53:48:F7:DD:22:6E:CC:9F:EF:C0:45:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xpidr2T6291TSPfdIm7Mn-_ARRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/74881d-ea9f-453f-bb51-88b238e5bb80/1/Xpidr2T6291TSPfdIm7Mn-_ARRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f9:a2:75:79:d6:e1:62:4c:5a:b2:1e:ed:13:4f:61:4f:cf:
         81:8e:f2:1a:17:10:e9:d4:32:ba:ba:b9:98:be:3d:68:3f:ef:
         e2:df:26:26:6a:87:27:b0:8a:27:3c:a4:0d:db:de:53:63:fe:
         73:50:a6:7c:67:d6:94:0b:cb:e3:b4:3b:7b:40:2c:21:d6:6c:
         fb:2a:c6:9d:34:7e:70:af:f1:5a:13:60:4f:e6:3e:c3:5a:fc:
         5d:3f:63:6b:e3:01:e1:46:e4:59:43:e9:ad:8f:28:f5:ef:89:
         73:2c:52:ba:78:85:cf:6f:7d:0f:e4:19:03:a2:30:ff:fc:76:
         b1:05:00:e0:c4:6c:1f:b8:76:81:ed:7a:8e:f6:20:55:91:c6:
         2b:9c:66:56:6a:d1:f9:1a:98:cc:f7:9f:3a:cd:91:95:17:dc:
         85:7c:99:58:bd:1e:7c:1b:a9:bb:93:14:11:c3:c4:ed:a8:54:
         67:52:d6:5d:b5:6d:eb:b9:9f:33:26:42:b6:a9:a1:e1:87:59:
         9a:d3:9b:48:d6:e6:4e:45:b1:66:f1:3b:4e:5e:e6:42:06:6d:
         ba:b0:d7:1c:5e:07:75:ed:df:cb:f7:87:50:02:3c:21:44:05:
         ca:64:c9:40:20:6b:bb:ce:a2:e2:d5:cc:6c:94:b7:70:ac:f4:
         90:c5:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 20:28:00 2025 by rpki-client