Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
File:                     Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft (raw, json)
Hash identifier:          8htyhi1i3zxYzrbLcupjLjw/B9Hf6F7Chz/Kyee54io=
Subject key identifier:   7D:46:77:A2:2F:60:1D:8F:EA:3B:CF:A1:3C:00:75:84:14:71:7C:C2
Authority key identifier: 2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D
Certificate issuer:       /CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
Certificate serial:       019A6357538E8FC397FA88001726DA3AD730
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
Manifest number:          082F
Signing time:             Sat 08 Nov 2025 12:00:58 +0000
Manifest this update:     Sat 08 Nov 2025 12:00:58 +0000
Manifest next update:     Sun 09 Nov 2025 12:00:58 +0000
Files and hashes:         1: Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl (hash: lqW1Zol6OUphxyMVIFWEzsMmP/XVib+TmsCFBCzPLLQ=)
                          2: Ovla5EJUgy9GZRovhELArfkHbLc.roa (hash: 1ZYYi0oYPWoj0xBQr1HbwZ7BRAZOIkZmTAi9EvpW7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Nov 2025 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:63:57:53:8e:8f:c3:97:fa:88:00:17:26:da:3a:d7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddfdca73cd64d75e656dd0a3a4427ed61982a3d
        Validity
            Not Before: Nov  8 12:00:58 2025 GMT
            Not After : Nov  9 12:00:58 2025 GMT
        Subject: CN=7d4677a22f601d8fea3bcfa13c00758414717cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:0b:a5:9b:3d:86:72:f1:98:f1:08:85:48:
                    d2:8d:27:39:1a:87:6f:c7:8d:7e:92:53:e7:74:e8:
                    b7:a1:94:06:f1:ab:67:20:c5:86:11:55:1b:1e:08:
                    bf:67:6a:a0:e7:02:0e:ee:b5:da:d2:85:4a:5d:b5:
                    92:c9:70:d8:be:18:3a:c5:f9:48:98:cc:fc:99:c9:
                    91:a1:4d:22:c8:09:e1:d3:c4:a3:17:99:90:90:8b:
                    e6:20:17:b1:d5:97:1f:84:e9:af:54:59:51:2f:3b:
                    c1:aa:70:a5:82:47:8b:7e:7b:be:46:58:77:bd:67:
                    79:83:21:f0:dd:20:26:f1:d2:c9:f7:8f:73:d8:13:
                    30:92:ab:c2:f9:ac:7e:5d:70:d5:45:65:91:f0:aa:
                    16:d3:44:3c:e2:5e:8f:d4:5a:93:71:d6:83:3a:ca:
                    a5:ec:a1:6f:fe:10:89:03:6a:cf:72:75:f5:e6:4e:
                    1f:b2:77:87:2e:46:05:55:89:7d:70:51:c6:a8:e5:
                    40:90:8e:03:86:d1:7b:56:d1:5b:04:ab:6b:e5:e7:
                    fb:12:f2:0a:8b:8f:54:54:39:a2:98:5b:ba:40:a5:
                    73:84:2d:03:03:65:0d:e3:f1:c1:d4:62:54:8c:01:
                    2b:72:98:13:cc:ef:11:e2:59:66:b0:dd:44:b9:9d:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:77:A2:2F:60:1D:8F:EA:3B:CF:A1:3C:00:75:84:14:71:7C:C2
            X509v3 Authority Key Identifier:
                keyid:2D:DF:DC:A7:3C:D6:4D:75:E6:56:DD:0A:3A:44:27:ED:61:98:2A:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/d41c4a-9bef-4737-95a1-08f17c410765/1/Ld_cpzzWTXXmVt0KOkQn7WGYKj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5d:0b:1b:14:d5:6b:98:38:50:2b:5b:c0:eb:0b:1b:ad:5e:
         31:4e:0a:9e:8a:84:7a:d9:56:4e:b7:d4:3f:5e:67:a4:d6:0d:
         cb:8a:81:91:73:2f:d2:86:f3:0c:8f:a3:f8:06:46:b1:d4:ca:
         95:75:fb:8d:e8:50:04:5d:ef:3b:5f:8c:5b:56:f9:66:f1:03:
         06:3a:6b:59:63:ba:e0:31:ab:0b:58:93:11:35:7e:fd:2b:19:
         b1:e8:07:26:57:e4:36:63:03:db:85:71:0c:13:16:bc:4d:a4:
         35:9c:97:f0:c2:e2:b4:c7:04:02:cd:5c:77:17:42:94:2e:4e:
         4a:16:4f:91:fd:97:b0:ba:fe:ef:15:bc:8c:73:61:0b:a9:49:
         aa:0f:99:9f:69:4b:98:af:50:e6:50:dd:00:f5:38:53:af:08:
         5c:69:1e:40:87:57:47:50:06:a9:85:fd:16:8d:45:81:7a:44:
         f0:62:a8:07:14:e4:24:07:b9:58:a2:90:ff:60:44:60:02:54:
         84:50:ba:b4:37:15:ba:35:e4:3a:4f:fa:d4:ec:aa:c6:50:84:
         93:29:b3:84:a3:de:0b:4b:39:36:34:50:8e:cb:39:52:12:09:
         a1:50:e4:78:d2:6d:56:12:a5:d7:cd:25:c8:03:2d:8f:3a:18:
         ed:c7:a6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 8 21:40:29 2025 by rpki-client