Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          zNw6HYaZPnCXg5gjyJj2fqdX/lIfNPzLBdlYARt6XLM=
Subject key identifier:   D3:78:7E:B8:60:9C:1F:19:8B:1F:72:D6:3F:D0:8B:7E:B0:26:A1:4C
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       0199C569AA15071982657DB9B25A935C727C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          1127
Signing time:             Wed 08 Oct 2025 20:01:00 +0000
Manifest this update:     Wed 08 Oct 2025 20:01:00 +0000
Manifest next update:     Thu 09 Oct 2025 20:01:00 +0000
Files and hashes:         1: 7GFUUPQe5X4o8br9pIJdHkkRXtg.roa (hash: 4KUOaFluZqET8tORnDH6HMaQ2V49mBLgUsZvrKGZ4Yk=)
                          2: QruSm__TwUr_yHAYXjuNZoojNTM.roa (hash: 3QNaGA7ZG6uoQs8cjkKS1muqAr2cgCC2owbsQ1FitJQ=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: KovSTlDdtIu+9Mnlj+twVt9FuJPUrd483efS9h9evOw=)
                          4: qQ7iOR4Ssn9YuOR2RGcWRIhX7kw.roa (hash: wQiE3t4T6OAM43VIDSTCvTQoMR/uz5WRMJgjbw+3Glg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c5:69:aa:15:07:19:82:65:7d:b9:b2:5a:93:5c:72:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Oct  8 20:01:00 2025 GMT
            Not After : Oct  9 20:01:00 2025 GMT
        Subject: CN=d3787eb8609c1f198b1f72d63fd08b7eb026a14c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:3d:41:8f:d0:88:62:e2:ea:38:00:08:12:
                    0e:d0:4a:47:f7:5a:03:8a:57:f7:f2:94:53:9b:af:
                    87:90:2e:54:5c:a6:60:fa:71:30:d1:cd:42:35:b0:
                    82:08:7f:0e:8a:b3:f4:6b:b5:c2:71:b0:4b:57:c4:
                    9a:24:39:e9:92:2e:84:df:59:7a:bc:e8:42:4a:48:
                    08:2f:81:9c:60:ae:93:9a:1f:2a:68:4c:b1:9e:11:
                    e5:77:f4:c6:e3:cf:42:8c:8b:2a:33:fe:03:da:aa:
                    02:e4:ef:5a:ba:ca:98:57:df:77:b5:da:8e:25:30:
                    f7:6a:46:48:3e:88:97:4b:dd:4c:80:ea:3e:97:b0:
                    74:64:28:ce:28:0b:f2:c9:5a:b7:27:94:12:77:a3:
                    44:9a:3f:3c:3d:2c:98:a1:c0:af:92:9e:cf:39:0d:
                    6f:e6:d1:39:4b:8f:cf:ef:59:80:f9:55:f5:0a:6e:
                    92:9a:55:42:1d:a1:2f:89:40:ea:7a:08:0e:32:44:
                    52:fe:8b:a1:48:03:f5:fc:23:61:46:ba:9e:98:7b:
                    78:10:ff:a0:99:d9:bc:03:74:a8:10:e2:ac:de:eb:
                    c2:fe:43:e8:3b:6f:0c:08:ff:41:5e:38:44:f7:7d:
                    6a:48:98:44:db:75:af:ad:8c:13:42:8f:24:c9:f3:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:78:7E:B8:60:9C:1F:19:8B:1F:72:D6:3F:D0:8B:7E:B0:26:A1:4C
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:53:5f:22:b8:9e:92:99:bb:f5:22:c5:d0:cd:f3:3f:db:b9:
         2f:c5:4e:fe:d5:34:1f:49:d8:ff:8b:de:50:df:60:8a:fc:da:
         cb:11:a4:b1:85:1e:4d:41:35:71:db:a0:a2:94:90:39:b6:d3:
         80:e5:27:2c:98:8b:e7:4d:b2:3a:4a:90:f7:98:a4:51:06:0b:
         ea:df:b4:be:1c:24:2e:22:7e:54:2b:e8:a6:be:1c:82:e7:ad:
         b5:f8:79:f1:54:39:d8:ed:f0:24:12:73:ac:2d:fb:81:f6:64:
         63:41:01:5c:4e:94:b7:c5:82:af:91:09:30:9a:3b:97:66:79:
         fc:8c:94:88:11:e7:04:c6:63:f7:45:60:a8:d6:bc:66:53:ef:
         a9:af:32:c1:d4:8e:40:43:4c:3c:e1:07:f7:95:71:11:49:40:
         96:b7:38:ac:06:ca:a6:f3:98:06:e0:80:69:65:d1:48:63:f6:
         79:e1:31:06:3f:b1:fc:f3:b2:07:f1:a1:3b:89:54:45:fc:20:
         c0:ef:e2:d2:f2:4a:00:03:91:0d:3b:d4:f6:0a:10:0b:2f:da:
         74:d3:83:98:13:88:e7:ea:b9:94:72:12:b7:55:2d:c5:17:b4:
         89:c7:18:9a:0d:7a:cb:29:1b:24:3c:73:80:6f:9d:be:f5:3e:
         9c:df:df:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:19:36 2025 by rpki-client