Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
File:                     dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft (raw, json)
Hash identifier:          6QL1sDNRUYvNujalXxwS3BXtw3X5/Z63UZbN4hZIgAk=
Subject key identifier:   52:22:F6:FD:B0:D8:F1:4A:BB:48:32:10:F9:3C:F3:03:01:4B:54:B8
Authority key identifier: 75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7
Certificate issuer:       /CN=754c57866e97aadaad75decc69d0df072d506ee7
Certificate serial:       019A7113352A6D535CBC0F914C744AF280C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
Manifest number:          01FB
Signing time:             Tue 11 Nov 2025 04:01:15 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:15 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:15 +0000
Files and hashes:         1: dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl (hash: bxYdLLBGC3vJMuwLrDiiMyp3KBYa0pJ95OiHOTGU9DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:35:2a:6d:53:5c:bc:0f:91:4c:74:4a:f2:80:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754c57866e97aadaad75decc69d0df072d506ee7
        Validity
            Not Before: Nov 11 04:01:15 2025 GMT
            Not After : Nov 12 04:01:15 2025 GMT
        Subject: CN=5222f6fdb0d8f14abb483210f93cf303014b54b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:5b:fd:05:40:4f:64:af:a2:48:2c:57:14:
                    53:9c:19:5d:58:d4:35:9a:44:27:28:45:2f:ff:26:
                    47:9a:dc:6d:9b:49:24:d1:22:f1:a2:c1:ef:a7:20:
                    9d:75:96:29:dc:ff:da:b2:3d:b5:9f:38:4c:c3:b4:
                    a3:fe:7d:e6:f5:8a:7a:da:66:1f:dd:a2:c9:72:79:
                    75:2e:d6:78:17:6d:72:aa:05:8b:28:02:96:ad:0c:
                    86:2f:11:de:70:29:37:71:dd:84:a4:f8:05:cb:2d:
                    cf:9f:f7:f4:86:54:58:01:bd:df:cb:5c:32:c2:99:
                    53:51:5f:2a:90:50:23:89:2c:6d:e8:c8:2a:57:6f:
                    0a:97:4d:d6:bf:c9:c2:8f:de:98:7c:cb:a5:af:96:
                    c3:26:d9:b9:fe:d9:64:92:fe:37:86:95:93:96:12:
                    8d:24:4e:9b:72:04:6c:fe:f0:d1:71:48:5d:0d:34:
                    2e:72:9c:0b:60:87:ec:5c:47:d2:ef:b2:f4:64:70:
                    77:7a:cc:06:61:29:23:51:0d:01:db:29:83:a7:9a:
                    4f:b0:9f:d8:3c:aa:4d:e0:80:f3:f5:06:f6:ab:1e:
                    ce:25:24:fb:3e:fe:fc:cb:5c:21:f2:ca:8d:87:63:
                    92:a9:ea:cd:e7:8c:a8:b8:a8:ce:f2:c7:94:ea:b3:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:22:F6:FD:B0:D8:F1:4A:BB:48:32:10:F9:3C:F3:03:01:4B:54:B8
            X509v3 Authority Key Identifier:
                keyid:75:4C:57:86:6E:97:AA:DA:AD:75:DE:CC:69:D0:DF:07:2D:50:6E:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e3bbdf-9585-46e5-b5cc-f68a59d2fe0d/1/dUxXhm6Xqtqtdd7MadDfBy1Qbuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:ed:c1:56:09:49:44:f7:f8:08:40:c9:e0:74:70:5d:20:39:
         4a:2f:df:c2:e8:de:d6:c7:79:a5:10:82:48:6a:1c:fa:ac:5b:
         88:c6:c6:a1:1d:2b:ba:e8:d1:0a:93:5c:1a:fc:ee:8a:c0:0f:
         55:49:94:12:8a:b1:1a:f9:cf:7a:62:32:c2:71:1e:5f:d8:a2:
         23:41:2f:af:a2:db:f9:67:4a:c1:7d:df:30:02:16:ae:11:e9:
         9a:e0:7c:3d:51:4a:54:1d:c3:e4:f2:05:e8:d6:ca:c1:b4:48:
         d3:da:90:c1:d0:98:39:75:b5:93:cb:12:b8:ac:e9:71:2d:af:
         e9:3b:09:a5:08:ef:4f:d5:1b:28:a5:94:39:db:e8:38:06:63:
         50:f2:df:7c:7a:fa:b8:3d:1c:3d:56:c0:f9:64:54:ad:fa:b8:
         02:a8:77:e9:7b:e1:04:6d:b6:82:1e:5e:27:49:25:96:b6:bd:
         ff:e5:51:51:5a:c4:ec:2f:b5:17:bc:69:f6:a8:30:98:bc:f1:
         13:48:4e:ab:82:2c:cc:48:6d:9c:e2:3e:12:4e:04:05:a3:5b:
         83:06:a6:b6:99:14:06:40:0b:e5:c6:37:ba:52:fd:15:30:81:
         72:78:97:a6:4d:4e:0d:f1:ff:15:10:de:67:a4:ad:51:b6:d0:
         01:1a:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:54 2025 by rpki-client