Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
File:                     Zdxu-msTax5F4h5DToWaKS0uXhQ.mft (raw, json)
Hash identifier:          8VWmLrhYqEktwZ5OYe1nAMUoOhtSforkm0yORlvbjp0=
Subject key identifier:   C7:07:8B:A3:2C:54:28:7C:12:F5:7C:D6:EB:D5:69:5B:13:E5:87:DA
Authority key identifier: 65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14
Certificate issuer:       /CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
Certificate serial:       019A71EEAEFE56BBE77498B0E15F113D1C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
Manifest number:          0EE1
Signing time:             Tue 11 Nov 2025 08:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:58 +0000
Files and hashes:         1: Zdxu-msTax5F4h5DToWaKS0uXhQ.crl (hash: Ufy12gDZA2p4A82azXgs9Ng6fF3DyEjETBc0OP5Uq20=)
                          2: lAxCqPMpI5f-sYorlBydxXXqa9k.roa (hash: VxF2LCupWm60GiRA2vF36Uh4A+3bCicud61D9T91IIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:ae:fe:56:bb:e7:74:98:b0:e1:5f:11:3d:1c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dc6efa6b136b1e45e21e434e859a292d2e5e14
        Validity
            Not Before: Nov 11 08:00:58 2025 GMT
            Not After : Nov 12 08:00:58 2025 GMT
        Subject: CN=c7078ba32c54287c12f57cd6ebd5695b13e587da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:35:3b:8d:5e:31:da:dc:64:6b:0f:70:a4:09:
                    9d:7e:69:26:83:d0:74:5a:cf:ce:ef:0d:e7:a3:e6:
                    cb:d6:45:8e:27:90:6b:8c:b4:72:32:52:2d:a7:64:
                    46:57:d8:16:74:73:54:b0:af:61:fb:47:8d:6b:78:
                    5f:ab:17:46:5e:e6:78:17:33:b2:8a:e8:a0:6b:d3:
                    bc:94:67:ed:55:a0:7f:4f:01:aa:5a:6a:15:4b:ba:
                    82:51:ba:33:e5:3e:75:1b:d0:b0:d9:16:a1:03:23:
                    69:1b:7a:20:c6:39:cd:41:0b:06:6d:3a:2f:f6:ad:
                    2d:97:8e:63:77:e5:e2:2f:20:a2:ae:78:9d:a5:da:
                    69:c5:bf:54:69:82:ab:00:7d:c9:87:b6:97:d4:79:
                    55:17:3b:45:71:74:94:1a:ee:bd:d4:29:f5:b3:4c:
                    44:82:0e:c3:a7:cc:7f:e6:5b:30:2d:f9:ed:5b:97:
                    5e:a2:99:cb:c7:29:e6:b7:d7:b0:99:66:73:df:77:
                    2c:de:b4:e9:cf:e3:4d:38:fc:4f:7c:81:01:a4:a2:
                    94:e4:cf:1a:09:f8:b3:2e:ad:72:60:e0:c8:6c:cd:
                    3c:70:f7:18:d2:04:aa:6f:e1:be:b9:c8:1e:6d:63:
                    52:5d:9c:10:d9:19:5e:ef:1a:b8:5e:b8:9a:7c:55:
                    8b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:07:8B:A3:2C:54:28:7C:12:F5:7C:D6:EB:D5:69:5B:13:E5:87:DA
            X509v3 Authority Key Identifier:
                keyid:65:DC:6E:FA:6B:13:6B:1E:45:E2:1E:43:4E:85:9A:29:2D:2E:5E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zdxu-msTax5F4h5DToWaKS0uXhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5afb3d-0f37-44b1-811e-46610fa8d56e/1/Zdxu-msTax5F4h5DToWaKS0uXhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:17:02:a9:e4:1c:f1:5f:ee:14:71:01:91:62:8d:62:bb:36:
         b3:8a:de:a8:75:a4:80:da:23:b5:6c:0d:38:bf:e6:90:d3:b4:
         ad:f2:36:84:3b:b2:bc:70:d8:00:cd:9d:a9:31:ac:c4:52:93:
         2b:fb:80:f1:71:44:66:52:22:db:e0:62:d0:ba:f2:e9:c5:47:
         8b:32:d2:9d:0c:ef:bb:86:33:03:ad:b9:dd:f3:96:bd:cf:f1:
         08:ad:66:50:64:c4:b5:56:7b:39:83:71:3f:27:88:c5:dc:e3:
         49:9a:9f:71:83:95:7f:d4:e6:b4:cf:99:87:67:6c:24:ab:6b:
         31:67:84:6b:3f:d2:50:49:27:63:0f:8f:c2:16:66:31:f0:aa:
         cf:16:ec:51:61:3d:52:ed:90:35:06:e6:1e:af:75:5d:2e:f5:
         4a:49:2d:18:0b:b9:8f:d2:e9:51:fc:72:6c:2e:26:66:90:23:
         61:62:77:65:f8:af:db:44:fd:5b:5c:52:e3:de:73:2f:2d:32:
         95:87:e1:c4:7f:c4:68:56:e7:b0:c4:8e:3a:83:43:a9:e1:3f:
         77:b3:58:06:8f:32:7c:53:37:5d:7f:1f:90:f9:50:4e:7f:67:
         00:eb:f9:98:bf:c1:4d:a0:db:e0:e1:c5:9a:10:a5:19:fa:a2:
         e9:63:f3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:32 2025 by rpki-client