Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
File:                     2dYxVsGDbxbDtDDv-7cqxpky6ps.mft (raw, json)
Hash identifier:          Xa14mq3ZYsU0uduUc2peVOjix9WvYmSXKbkOLogzcaw=
Subject key identifier:   82:9B:EB:55:FC:9A:9C:48:7F:2C:2B:6D:63:06:43:91:08:89:ED:51
Authority key identifier: D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B
Certificate issuer:       /CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
Certificate serial:       019A1AD0A8D06294BBA2CCB3B871214E91C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
Manifest number:          136D
Signing time:             Sat 25 Oct 2025 10:01:13 +0000
Manifest this update:     Sat 25 Oct 2025 10:01:13 +0000
Manifest next update:     Sun 26 Oct 2025 10:01:13 +0000
Files and hashes:         1: 2dYxVsGDbxbDtDDv-7cqxpky6ps.crl (hash: 3f0bultnGyqDtB+9UplWBaMydfdHP7KB9Ev9by4IKuk=)
                          2: Jfj9dSZw93m0LgWLC-5cHZtQPbI.roa (hash: oiCigciFJOGI1kCvszmmuaaLh0TPamcLgyxjc9J3FC4=)
                          3: M_Z-VhDZc2uLCtQfe10yHlwcSGg.roa (hash: AB/qLdUMcV196Xzj3vZ4mE4S8cay+jmGliBEUDalnEc=)
                          4: f_1g2Z_O5AiL3yW6mcyUEsXnVQ8.roa (hash: d0LuTF/iwiSUpGBh2NLV29ONLEQ7pXLVwvq/UHuDiNA=)
                          5: m7iDzlCGf343P9LUMQ7CzCNMpq8.roa (hash: 25V4vL1hxRuT+EiKGjaMOxdCAH/Rao4IMyItMWn6Kn4=)
                          6: wuWM0Bqfn2DOTXAQfUUvKBidXpo.roa (hash: m6fPdbSddi0hJ1qwurB1jCC8tnof8GXCRJUIPf5vVWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:d0:a8:d0:62:94:bb:a2:cc:b3:b8:71:21:4e:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9d63156c1836f16c3b430effbb72ac69932ea9b
        Validity
            Not Before: Oct 25 10:01:13 2025 GMT
            Not After : Oct 26 10:01:13 2025 GMT
        Subject: CN=829beb55fc9a9c487f2c2b6d630643910889ed51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:22:46:9e:22:1e:bb:db:8b:37:1c:71:3d:
                    5f:7e:db:ae:f1:98:20:15:5c:c9:c8:e7:26:1d:48:
                    f1:92:dc:10:e1:c9:e4:9c:2b:0f:0a:41:1d:b1:ab:
                    37:3a:0c:b6:b6:d0:f6:03:db:4f:70:73:a3:ee:00:
                    98:06:2f:78:af:c4:21:d1:a6:86:2e:36:3d:50:54:
                    e2:52:20:fd:41:2a:0d:b8:9a:d3:39:54:2b:01:26:
                    8d:a2:c0:bf:88:59:4c:e3:2c:f4:6d:1d:db:71:1d:
                    22:51:99:4b:32:14:18:30:1f:ea:c3:ef:5d:db:78:
                    28:a7:b8:88:25:4e:e8:d8:54:78:19:15:80:cf:85:
                    17:c1:58:ce:34:d0:3f:53:b1:46:4a:35:c5:78:78:
                    4c:b2:0e:db:1a:a8:e2:e1:d9:be:cc:3a:8f:3d:ae:
                    88:38:47:54:8b:56:d2:d7:86:5a:24:62:31:f9:4a:
                    22:cc:ef:31:01:f9:4d:8f:40:60:f9:1b:84:e6:ec:
                    1b:15:1f:01:d9:a1:bb:df:81:a8:38:f9:e1:9d:c5:
                    32:87:c5:78:6a:61:b0:f2:46:41:bb:97:8e:dd:27:
                    70:5d:2d:e9:59:97:97:b3:b0:2e:19:5a:00:4c:52:
                    19:e0:c2:bd:75:42:17:64:ca:eb:38:20:d5:fa:f8:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9B:EB:55:FC:9A:9C:48:7F:2C:2B:6D:63:06:43:91:08:89:ED:51
            X509v3 Authority Key Identifier:
                keyid:D9:D6:31:56:C1:83:6F:16:C3:B4:30:EF:FB:B7:2A:C6:99:32:EA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2dYxVsGDbxbDtDDv-7cqxpky6ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/2dYxVsGDbxbDtDDv-7cqxpky6ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:31:d7:ad:5e:7e:01:13:d3:a5:37:9f:62:16:e9:f9:93:e3:
         cf:0b:09:4b:d5:20:22:5e:ac:87:03:e3:18:1b:58:43:aa:6a:
         13:43:31:0c:9b:00:1a:eb:77:b4:8d:b8:79:43:45:3e:7f:e3:
         96:f2:a4:2b:33:4a:0d:a9:76:f5:b7:cd:3c:da:9e:39:5b:a6:
         e4:cb:ce:32:2f:81:72:6c:e7:03:fd:66:7c:ee:0d:ff:60:6f:
         ab:79:08:18:b3:66:97:a3:c9:95:c4:dc:60:1d:5c:36:0e:4c:
         7e:4a:0d:54:19:5a:a1:66:82:e1:7f:db:a7:83:05:34:a2:09:
         b5:f2:b6:a9:fc:b0:a8:8d:c6:bf:6e:c8:12:3e:f6:29:59:ad:
         70:2e:97:b5:fc:f7:3d:b3:ef:c1:a8:75:0b:a8:6c:29:4b:94:
         22:7d:13:ea:74:59:29:b7:ab:fc:54:8c:ef:9a:7f:5c:1b:a9:
         e9:53:7d:70:64:f2:33:a3:91:34:67:1d:62:a9:4a:70:9a:9e:
         78:88:ee:6c:e2:15:f8:98:5a:be:67:47:ab:cd:13:1e:ef:e1:
         8e:71:9e:04:b4:be:25:bd:a9:27:a9:c8:d9:2d:90:6c:57:12:
         c5:c6:5c:c4:3e:df:60:48:c1:9f:80:f9:0c:a2:da:06:16:43:
         77:66:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 14:26:30 2025 by rpki-client