Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
File:                     fWeULOCqD9J6DNy3MTTe_cxhROE.mft (raw, json)
Hash identifier:          nNFyoMKgMVf12VMuwTIDAwT+HUHjrq/9JMr3Ukg/ERc=
Subject key identifier:   33:D9:AD:4C:B8:7B:2D:F6:63:58:FD:6C:78:0B:74:A6:1C:64:83:38
Authority key identifier: 7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1
Certificate issuer:       /CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
Certificate serial:       019A1D631D69C8090E695645F3C25B2723AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
Manifest number:          06E6
Signing time:             Sat 25 Oct 2025 22:00:26 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:26 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:26 +0000
Files and hashes:         1: fWeULOCqD9J6DNy3MTTe_cxhROE.crl (hash: KHg0/ykUac4Wvwman/q8b3eoSzlgTTKpwZyQS0495ME=)
                          2: zA58kveqXgli4S_Gmvm71Z6gYvA.roa (hash: U7XAD6S0aMw4lkO5A8lwquVG5gdGFXidXMd3PA0M/Nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 22:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:1d:69:c8:09:0e:69:56:45:f3:c2:5b:27:23:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d67942ce0aa0fd27a0cdcb73134defdcc6144e1
        Validity
            Not Before: Oct 25 22:00:26 2025 GMT
            Not After : Oct 26 22:00:26 2025 GMT
        Subject: CN=33d9ad4cb87b2df66358fd6c780b74a61c648338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:32:c5:01:58:33:37:8b:ae:0f:7b:4a:95:
                    51:1a:2f:f8:48:83:1a:56:61:04:59:d2:af:97:eb:
                    cd:f6:c7:6f:4a:ed:4b:3e:4f:15:dc:48:24:8a:dd:
                    7c:9a:d7:65:e0:ad:ab:38:93:3d:b0:f9:73:de:13:
                    8c:7a:97:3e:91:a6:34:8b:c8:0d:80:49:ae:3a:39:
                    b3:35:02:8b:ef:86:e1:53:c0:c1:4d:c3:ff:f3:9c:
                    9c:bb:a7:8f:df:a1:f6:d0:4e:4c:aa:5e:7d:a5:9f:
                    a0:5b:1f:f7:43:fe:fd:1f:b2:35:d8:32:9d:c8:fd:
                    8f:4d:87:c4:d3:91:2a:7c:ae:dc:2c:c1:39:bb:69:
                    1d:b5:2c:44:af:26:33:4d:98:63:c5:e8:6a:d7:ba:
                    6b:d4:93:52:61:59:ee:ef:e9:33:4c:42:8b:24:25:
                    03:e0:3b:32:03:20:ad:cf:00:98:a6:27:dd:28:dd:
                    f9:9b:cc:1c:e0:54:52:9f:36:b7:14:76:33:3a:69:
                    48:a5:da:0c:d8:cc:11:64:81:35:74:9e:e3:de:c9:
                    f0:07:74:ec:30:f6:40:11:30:d7:e4:fd:dd:69:93:
                    0f:c3:f1:01:e6:ac:34:93:9d:42:92:02:fc:e0:60:
                    99:41:44:91:55:de:9a:c2:3c:4a:f9:7d:66:82:dc:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D9:AD:4C:B8:7B:2D:F6:63:58:FD:6C:78:0B:74:A6:1C:64:83:38
            X509v3 Authority Key Identifier:
                keyid:7D:67:94:2C:E0:AA:0F:D2:7A:0C:DC:B7:31:34:DE:FD:CC:61:44:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWeULOCqD9J6DNy3MTTe_cxhROE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d3e393-d8e8-4906-9177-1e0b1f7ca6cf/1/fWeULOCqD9J6DNy3MTTe_cxhROE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:d0:d6:11:ac:99:ba:be:17:54:91:78:66:b3:87:36:f9:
         a3:8b:57:7f:88:4e:74:0b:fc:57:d2:0c:90:e7:7d:fd:ba:23:
         8f:81:8f:80:cd:5b:71:07:1d:f7:8d:1a:a3:0d:4d:b1:7a:9f:
         6b:6a:f8:e7:fd:f8:e0:f7:f9:44:35:19:05:17:8d:76:59:bd:
         5d:25:0e:94:9e:bf:11:dc:87:e2:b0:64:57:17:d3:9e:44:e3:
         fd:90:e1:90:5e:b5:9c:f7:6f:45:df:88:8e:4a:72:e3:e8:01:
         4f:2e:06:be:7c:c3:13:17:f2:28:e3:4f:20:54:08:9c:69:8b:
         02:24:45:53:16:e7:bd:93:48:71:32:41:e9:9f:08:f2:57:7d:
         3a:99:cb:64:e8:4c:15:3f:83:24:d2:b1:61:e1:dc:e7:f9:5e:
         db:32:b8:09:fb:41:ee:4c:39:01:40:3d:ee:19:c6:2c:f6:11:
         1c:4e:8b:72:54:7f:57:35:38:da:ca:ab:04:a4:f8:f5:67:ee:
         f6:8d:ae:0b:c7:0f:b5:f1:bb:f6:1d:a6:7f:1d:06:10:fb:40:
         0f:68:29:ca:32:78:d8:75:e8:07:03:f2:ff:11:f2:0f:74:c1:
         1f:36:c2:67:77:36:01:fc:d2:a1:a2:99:cb:6c:91:f7:29:bb:
         b3:52:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:31:17 2025 by rpki-client