Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
File:                     83UsEPGw0HtfSOV539FONycT-0c.mft (raw, json)
Hash identifier:          nwMyorvvrAtKtiiS7nBC89bp0WpiB+UvhN1XKpXa6lA=
Subject key identifier:   63:A2:62:46:98:8B:A0:83:4C:AC:75:5B:63:64:A7:05:DA:A1:25:C5
Authority key identifier: F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47
Certificate issuer:       /CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
Certificate serial:       019A228A845DDF0B763B270682F2D7F3FC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
Manifest number:          0A31
Signing time:             Sun 26 Oct 2025 22:01:34 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:34 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:34 +0000
Files and hashes:         1: 83UsEPGw0HtfSOV539FONycT-0c.crl (hash: SGMB8jJq69BOmd3Db6uTTAmNlG4aCoZTFqK+cV5USM8=)
                          2: kDhp1dHjDBAXX9BsUPItX2dtNTc.roa (hash: PynDqUC0SP3COf4tmeohMx6MacUGS0U4TVEP+3iExHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:84:5d:df:0b:76:3b:27:06:82:f2:d7:f3:fc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3752c10f1b0d07b5f48e579dfd14e372713fb47
        Validity
            Not Before: Oct 26 22:01:34 2025 GMT
            Not After : Oct 27 22:01:34 2025 GMT
        Subject: CN=63a26246988ba0834cac755b6364a705daa125c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b2:9b:ca:8f:15:28:e5:61:cd:7d:21:f4:72:
                    4f:e9:0a:49:78:1d:be:99:bc:59:8f:1b:8c:0e:3c:
                    71:f1:0b:5d:2e:aa:a9:0e:05:89:ad:1d:b5:5d:95:
                    0a:cf:8f:6b:91:40:ec:60:39:42:ba:3b:74:99:9e:
                    c9:2f:37:77:20:0a:2b:dc:ef:0c:35:ab:41:ff:33:
                    58:bc:53:7b:64:a1:6a:39:40:94:65:19:10:c7:93:
                    65:97:b5:08:b8:f9:f2:88:c2:bb:52:1d:70:21:e2:
                    ac:a3:20:41:7a:8b:5d:c8:77:1e:d2:e6:7c:15:3e:
                    37:cc:5a:8b:e0:e1:0a:f4:86:c9:73:0d:ff:2d:83:
                    93:b8:4f:e0:71:6d:fe:e9:2e:a4:d8:cf:6a:46:a5:
                    37:39:d2:3c:18:96:5d:80:e3:37:72:df:34:aa:a4:
                    01:c5:41:71:6a:01:ef:1e:30:35:b3:25:c2:cc:48:
                    f7:e6:78:6a:76:7e:bd:68:95:72:0b:d4:1f:de:6d:
                    d2:3d:64:b3:46:d2:49:9a:39:c5:41:dc:4a:8c:03:
                    05:f1:3a:12:26:f1:28:82:46:2f:7e:19:de:19:4c:
                    63:0b:db:6f:c1:f4:65:cf:b3:cc:35:9d:0f:80:96:
                    ee:7f:2b:76:21:24:9b:bb:f2:4f:fe:47:60:49:91:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A2:62:46:98:8B:A0:83:4C:AC:75:5B:63:64:A7:05:DA:A1:25:C5
            X509v3 Authority Key Identifier:
                keyid:F3:75:2C:10:F1:B0:D0:7B:5F:48:E5:79:DF:D1:4E:37:27:13:FB:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83UsEPGw0HtfSOV539FONycT-0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4bc2af-4f6d-45bd-aa10-e8702ea59016/1/83UsEPGw0HtfSOV539FONycT-0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:de:b9:85:33:e2:a4:bc:96:ae:b9:0c:99:97:68:0a:65:06:
         b3:1e:fc:42:e4:de:a0:e9:cc:e1:7a:81:b6:62:2d:ff:3e:b1:
         8c:6f:d9:ea:d2:a7:0a:a4:37:c9:fd:35:ae:44:56:f3:d9:09:
         ad:24:69:9e:d9:f8:9e:cc:da:4c:f1:b7:da:71:71:03:cf:80:
         a9:00:81:b2:52:96:66:93:a9:5e:ba:9a:c5:e6:3e:96:ef:22:
         8c:a9:84:95:04:86:a8:47:a6:9b:a7:47:5f:8c:5f:0e:61:e9:
         bd:d9:64:0a:f0:c7:79:82:3e:35:93:e5:15:92:20:68:f9:5f:
         26:f9:2f:f7:b8:3a:76:d1:66:ef:91:1a:d5:4a:e4:3d:96:ee:
         e4:3a:48:d0:62:f1:46:19:03:b3:86:c9:05:77:db:57:81:0a:
         96:6e:2f:61:fa:80:64:54:b6:28:f7:f3:97:6e:ab:0f:26:e9:
         8b:d0:16:e3:ad:e1:87:fc:93:57:c0:1c:aa:36:ae:5b:2a:4c:
         96:fd:c3:5c:02:c6:04:4e:64:a5:63:be:a7:db:66:ad:fd:c3:
         56:14:ad:33:6b:7b:7c:b1:ce:a3:69:36:df:29:7f:33:d6:a7:
         7b:65:dc:a1:8c:17:3a:92:44:eb:4d:e9:47:6d:8f:8a:a0:f7:
         63:62:fb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:11 2025 by rpki-client