Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
File:                     7E-wYalCbk-yiF2CKGdXKhtYpMA.mft (raw, json)
Hash identifier:          Fv9qK3kMgHgUVHhJEXqa3L1CsCRBGzVIBeEmgqs+bz4=
Subject key identifier:   9D:71:89:58:D5:69:72:8B:E4:FC:7F:D1:81:1D:F2:E0:CC:79:70:46
Authority key identifier: EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0
Certificate issuer:       /CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
Certificate serial:       019A0A1340CBE3DB504B053C76D712ABC7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
Manifest number:          170A
Signing time:             Wed 22 Oct 2025 04:00:25 +0000
Manifest this update:     Wed 22 Oct 2025 04:00:25 +0000
Manifest next update:     Thu 23 Oct 2025 04:00:25 +0000
Files and hashes:         1: 7E-wYalCbk-yiF2CKGdXKhtYpMA.crl (hash: NL1wup7LrUZ7tCnwZL5U96au88q9zw/KsjIF9UpCpiY=)
                          2: GEPdl2OUeL05DmzNrEcRVPqqDx4.roa (hash: cS7ko6IsOhid7OeMb3wmb0UyLO3IwFElsJZGiNuQYl4=)
                          3: O4G8Oy8WXn03ntoUxCRHejsTASA.roa (hash: +xEpXad5VkxTIKpDB4MRGFxb/Xqo2YExKflblesjHtU=)
                          4: ObT7tYrwBXFRyjbdmNfMJqZI2Ac.roa (hash: d6dwZMctMoLW/PwYpxpTj6NAHKpbh3tEazNMZcoj5WA=)
                          5: PHFVTcG4KZjwKJOE7_73HHVKLFs.roa (hash: WE0SQ9SvcesHSizaa+Bf2w3NFhcVw1y/r+SFqq3s8Og=)
                          6: RQrFYttaYZP7w79BBGpHWoy0Vf8.roa (hash: +Cg1kkFKtdIbI/uOI/tqhmwLFs4Hzpn4OanpQq8QmfU=)
                          7: U179jHYVg_Z0xMvsOH7RWHRV0JY.roa (hash: qAq8gQtVLON1xEsw96nwghWB+2IEvnYNGoYOTtsqD5E=)
                          8: qvuGFKt-1_HJPs870oUBe_CLaIg.roa (hash: SFdkk9jZfyDBmDVWNujyzZ/7MM9kJxQh2emgCYl8kTA=)
                          9: xz8xILYuPCJsOo5-xxPZe0m8iY0.roa (hash: Nym9WSsF7iPFJyaeeaq8rTQr459/3AIDriLd5s5IRiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0a:13:40:cb:e3:db:50:4b:05:3c:76:d7:12:ab:c7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec4fb061a9426e4fb2885d822867572a1b58a4c0
        Validity
            Not Before: Oct 22 04:00:25 2025 GMT
            Not After : Oct 23 04:00:25 2025 GMT
        Subject: CN=9d718958d569728be4fc7fd1811df2e0cc797046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:ef:b1:36:d6:d7:0a:52:4f:e7:bf:9f:d3:
                    b4:30:a5:6c:0f:65:94:14:9d:60:2e:65:9d:fd:70:
                    40:ae:e1:6c:84:f5:10:f9:21:4c:34:05:b5:a0:37:
                    0b:50:7a:5e:5d:59:52:ba:8f:67:55:c4:c8:e5:33:
                    5e:7c:79:fb:08:f8:c6:93:a1:87:f3:2d:0f:67:c1:
                    fc:40:1d:02:a4:48:a5:5b:db:87:8e:aa:e0:61:ea:
                    cd:0d:8d:b8:a6:95:bd:9e:48:c0:a4:84:8c:7d:19:
                    f5:8d:8e:4d:0b:d5:5c:67:61:60:d3:01:42:d3:0c:
                    6a:bc:61:3c:b8:3c:67:6e:6f:f0:6b:88:3a:2a:ae:
                    fa:90:fd:5e:6b:74:fc:de:82:64:aa:49:73:53:e9:
                    0a:e4:61:92:e3:b4:71:bb:39:37:fb:07:5f:59:22:
                    b0:8f:5c:ff:95:6e:4e:f2:dd:e6:7f:a0:95:e3:ed:
                    3e:05:81:db:b5:3b:3a:70:e4:57:ca:06:e6:b4:cb:
                    24:db:6b:0a:b8:13:e0:aa:f9:29:8a:71:2b:99:1f:
                    cd:67:40:eb:bf:dc:0b:a6:61:6a:28:5e:94:d6:43:
                    d2:af:f4:84:83:ba:d7:83:1b:2b:16:17:5f:d4:60:
                    18:8d:2f:73:80:59:1d:ea:4c:dc:29:be:7e:a2:df:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:71:89:58:D5:69:72:8B:E4:FC:7F:D1:81:1D:F2:E0:CC:79:70:46
            X509v3 Authority Key Identifier:
                keyid:EC:4F:B0:61:A9:42:6E:4F:B2:88:5D:82:28:67:57:2A:1B:58:A4:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7E-wYalCbk-yiF2CKGdXKhtYpMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7bc3ab-d9b6-4ae4-bcd1-ce57150695a9/1/7E-wYalCbk-yiF2CKGdXKhtYpMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:4e:e7:3f:85:70:e7:25:11:f7:12:3c:a1:1a:3d:2d:8d:9f:
         6f:a1:a5:86:20:af:e5:e7:86:44:a7:0e:b1:77:36:b8:72:18:
         2b:c3:3d:f3:f3:5e:c2:65:c6:46:ed:be:25:6c:91:f9:c3:fe:
         61:b5:7f:26:e1:2f:3e:07:a4:85:31:dc:27:eb:25:55:32:c4:
         b2:0b:14:27:8e:74:0d:24:e7:5b:9e:45:f3:9c:f3:c5:a9:07:
         83:7c:40:ae:18:84:1e:fb:e5:63:55:1a:0a:9d:2b:b5:96:eb:
         2d:3c:8f:02:90:d0:1e:82:a6:26:46:61:3f:eb:ad:f2:e2:9e:
         9a:f5:c1:df:d8:18:09:d8:d1:c5:06:ac:50:9f:be:bd:9b:89:
         5d:5c:7d:15:c6:27:23:4c:cc:5f:b1:01:25:7c:2c:ec:26:18:
         ba:fa:f4:0d:71:4d:32:fe:1e:63:b5:3a:08:19:45:73:26:dc:
         6c:db:7f:9d:ca:e7:42:f0:4e:66:fb:61:d8:06:96:0c:98:0f:
         a1:9c:78:26:e7:83:58:c9:43:e4:0e:b3:dc:19:43:fa:77:bb:
         13:f3:ec:5f:54:c3:15:22:b2:4e:94:c1:79:81:b8:61:4d:2c:
         d8:15:21:0d:f6:4c:c8:dc:6b:d5:d3:82:b8:dc:7e:0a:e9:ed:
         0c:10:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 09:22:18 2025 by rpki-client