Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
File:                     rdJhytDf8tm7L4x60Nsm7Vcw090.mft (raw, json)
Hash identifier:          M6/Nvul70MXaANkQH/MidDAcEVJIcxco9aSPXZSBejM=
Subject key identifier:   8F:02:E5:F9:E3:B7:FD:C5:26:F6:03:EF:99:F7:33:AE:11:1C:23:90
Authority key identifier: AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD
Certificate issuer:       /CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
Certificate serial:       019A21AE20BDE06EA88C8EFEC160F824446D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
Manifest number:          0DC7
Signing time:             Sun 26 Oct 2025 18:00:50 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:50 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:50 +0000
Files and hashes:         1: rdJhytDf8tm7L4x60Nsm7Vcw090.crl (hash: pIprWBx5Ugjrz7opq2T5NKQ7B+qJlSLeB+Mnq0cQ40Y=)
                          2: tNraF_vYfkVNYT3rk3dbIhzsa14.roa (hash: Cyq1XU96xKn0Vjeuoq5f1b6ik1hGAwtTzIf0Tu199FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:20:bd:e0:6e:a8:8c:8e:fe:c1:60:f8:24:44:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add261cad0dff2d9bb2f8c7ad0db26ed5730d3dd
        Validity
            Not Before: Oct 26 18:00:50 2025 GMT
            Not After : Oct 27 18:00:50 2025 GMT
        Subject: CN=8f02e5f9e3b7fdc526f603ef99f733ae111c2390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9e:2d:e0:2a:38:d4:e2:76:18:40:7a:6a:9f:
                    04:b1:d6:a1:92:c2:cb:c2:49:40:6f:4d:0d:16:df:
                    9e:c3:0c:48:d9:84:44:0c:44:db:62:fa:6f:d3:b5:
                    65:af:6b:60:bd:a3:ca:57:06:48:1d:fd:f1:68:8b:
                    aa:52:89:1a:dc:50:aa:57:c9:1a:50:d7:d2:95:fe:
                    3e:e6:19:90:eb:eb:11:46:d9:cf:84:cc:c4:58:87:
                    72:8d:f1:9c:75:71:16:7f:ec:3f:61:26:8f:d7:bb:
                    8a:77:58:36:da:7f:e4:3d:8d:2a:40:79:df:9e:80:
                    ff:28:a0:17:f6:08:08:57:20:bc:d8:eb:ce:81:77:
                    75:7d:77:eb:e6:61:ee:33:49:22:a7:e3:bc:49:95:
                    23:9d:14:eb:3a:d8:c7:a3:dd:8f:57:1c:c9:59:08:
                    75:f1:b8:75:58:1e:81:65:1b:9c:c0:87:48:ca:5c:
                    fc:f1:31:54:a4:51:17:95:b0:79:cc:d4:53:f2:1e:
                    b4:a7:fb:6d:c2:cf:bd:aa:7a:de:04:cd:01:2a:ca:
                    94:fc:93:47:3f:b1:32:d6:2c:a0:2c:ff:ad:5b:64:
                    c7:8f:8a:cb:5a:dc:49:0f:2e:b7:b7:30:fd:90:37:
                    3c:27:80:48:23:c9:da:7d:5c:cd:46:f7:71:81:40:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:02:E5:F9:E3:B7:FD:C5:26:F6:03:EF:99:F7:33:AE:11:1C:23:90
            X509v3 Authority Key Identifier:
                keyid:AD:D2:61:CA:D0:DF:F2:D9:BB:2F:8C:7A:D0:DB:26:ED:57:30:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdJhytDf8tm7L4x60Nsm7Vcw090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0a434a-eb2f-4026-bcc8-7bc42d5d4072/1/rdJhytDf8tm7L4x60Nsm7Vcw090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:96:86:03:98:72:7f:e3:01:4f:86:a5:f1:f4:b7:28:ca:8f:
         b9:4e:1f:ce:6d:1e:14:0a:f6:0e:a2:86:96:50:b7:40:96:12:
         8d:6a:43:a9:ba:9c:f3:da:54:68:10:5c:5e:1c:ee:3e:67:f9:
         e2:56:07:c8:45:b2:a2:8b:41:48:90:8b:2d:16:7e:36:99:d7:
         fc:37:e0:c2:38:59:9b:cb:e0:94:48:6b:90:7e:68:dc:0f:e3:
         d4:e6:f4:48:02:8e:ed:6c:b7:c0:07:09:e0:b4:9b:35:1d:da:
         6c:18:71:52:92:85:27:3f:dc:80:12:b9:d4:c1:f3:27:4e:90:
         3b:f0:da:7d:16:38:a7:fb:ad:0a:27:5d:71:e7:ad:ea:a5:28:
         2f:b2:c7:b7:0a:45:86:4a:fb:52:9c:7d:65:3d:d6:d7:ab:e9:
         9c:d9:ac:56:35:c6:80:08:7e:16:b9:59:3d:7b:33:5e:ca:3b:
         13:33:a0:ee:d3:8b:2a:3f:8b:40:05:18:69:b5:59:b0:95:41:
         f3:32:49:3c:6d:5c:2e:cd:f3:b3:25:d2:f3:96:da:fc:0d:f9:
         2a:a2:af:72:61:ee:3c:0e:e6:ee:9e:43:7c:03:1e:a9:61:6e:
         70:6d:6a:9a:ce:67:c0:fe:02:35:ff:a2:c5:f4:49:2f:10:d6:
         31:6a:f1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:24:37 2025 by rpki-client