Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
File:                     7qArGX269963Tgon2dTs0_rh6O0.mft (raw, json)
Hash identifier:          UYPkP+HOGWG9/pV0ZFGHF75+W195tyjtHzqJAV0KC3M=
Subject key identifier:   0E:D0:8D:18:0B:F9:8D:0D:5C:21:9D:04:46:F4:41:8A:D8:26:5C:42
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Certificate issuer:       /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial:       019A1EADDD9322796A610643C640C632658F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
Manifest number:          171D
Signing time:             Sun 26 Oct 2025 04:01:42 +0000
Manifest this update:     Sun 26 Oct 2025 04:01:42 +0000
Manifest next update:     Mon 27 Oct 2025 04:01:42 +0000
Files and hashes:         1: 7qArGX269963Tgon2dTs0_rh6O0.crl (hash: Zid52G70gVeDYFEy9U50BZWigh0ryDkfaUoyRWzpZlQ=)
                          2: Bk90iRHQbjjUJbXbIoCrmIUPVKg.roa (hash: 2vZbpJ5kGWmtCTPNu+LnDVtMf49vjpIIGHq8bmC5+kQ=)
                          3: NxsBpjDsWy9v0RWMdQHyTsw07lc.roa (hash: leheEhbDI4XfsGyTiSLU6x5xDwKD07q9ll4YmYgHG4Q=)
                          4: WTb7P4C0931XSbDIiqAz4cDY9mI.roa (hash: xFj/i+eABnhO22wPWIMR3rft6jLIhQKTC7nIWvYvnkg=)
                          5: aD4ioP8gjb0hx8YQDXC5SNzMzUs.roa (hash: yU020JUGihSFwGMLXiDxQbplODmP3bvw7D4/kPZyPGs=)
                          6: qQy4Ff0I-RFPojOvRzqGsJ28eg8.roa (hash: KF47TtbdP48u62TLuuhtCoJv1ZVOVKI3VHzg8tm8ZpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ad:dd:93:22:79:6a:61:06:43:c6:40:c6:32:65:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
        Validity
            Not Before: Oct 26 04:01:42 2025 GMT
            Not After : Oct 27 04:01:42 2025 GMT
        Subject: CN=0ed08d180bf98d0d5c219d0446f4418ad8265c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:39:88:78:7b:49:e2:7f:30:77:f9:2a:f9:
                    0c:ee:88:a0:7e:b8:fe:8e:15:48:a6:be:7c:47:88:
                    82:fd:bd:8a:06:06:0c:24:f9:d4:62:2a:4d:19:64:
                    f6:02:cf:b5:f1:37:4e:cd:8b:ef:c3:c1:ac:9c:82:
                    c0:b7:a9:42:d8:af:fb:78:c5:b2:52:69:c7:a3:b3:
                    f4:22:70:8b:e6:16:36:a1:19:d8:d8:d7:fa:b4:14:
                    98:2a:ce:ca:a0:67:55:a3:b0:d2:2d:90:59:01:d3:
                    0b:44:95:bd:1f:b9:d7:eb:4b:e2:df:6e:b0:6b:0e:
                    d8:48:55:d3:01:1b:e0:56:f6:58:34:ec:a9:61:f9:
                    ae:0c:15:7f:14:30:f5:d2:c1:8f:ab:eb:34:d2:a0:
                    b1:d8:5d:b4:84:cd:4d:af:74:55:d9:09:09:98:4e:
                    bf:68:e6:d7:63:93:ae:77:af:72:b8:ef:11:54:14:
                    12:4f:c1:0e:7d:fd:fb:a5:c1:31:82:ef:cc:10:e8:
                    8f:d5:d2:67:15:3e:fe:01:52:e6:1e:d2:e2:dc:cf:
                    d2:52:86:62:62:c4:b7:16:e4:3d:db:41:99:1a:5a:
                    55:3b:d7:a2:30:bf:5a:43:20:54:24:9e:66:b6:dd:
                    d9:c0:12:80:50:a9:d6:20:01:b6:5b:76:19:fd:dc:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D0:8D:18:0B:F9:8D:0D:5C:21:9D:04:46:F4:41:8A:D8:26:5C:42
            X509v3 Authority Key Identifier:
                keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:40:e1:72:21:6c:5d:81:86:9b:57:fe:c0:3e:32:c2:b5:b5:
         2b:55:2f:1e:51:8b:9c:01:d4:7f:c4:78:25:6c:52:4a:ff:87:
         35:54:02:da:ac:d6:17:10:c7:e7:7d:6b:7c:f8:54:16:9e:2f:
         55:8f:1a:df:5f:49:2c:95:4e:94:93:31:9f:d9:a8:46:7f:12:
         83:f9:fb:c2:bf:01:8b:bf:0e:b0:78:78:ce:ba:b1:18:79:bc:
         01:69:f1:24:04:27:8d:ff:46:fb:c7:8a:da:64:8b:1b:c2:20:
         a2:61:fc:46:7c:75:90:5d:59:fe:fd:4d:1d:cf:97:84:d7:a7:
         ee:98:12:65:85:64:73:e8:56:49:54:0a:12:34:5e:be:65:14:
         bf:a4:d9:c4:50:66:34:58:a3:18:00:97:e6:25:59:b2:4a:e0:
         13:b0:e1:c5:2f:a7:fe:9e:88:b1:39:52:62:df:e5:f0:9f:b1:
         eb:0b:2b:fd:9f:da:c4:7a:a5:54:23:bf:05:1f:ac:37:3b:ea:
         9e:06:00:b8:0a:1a:80:fb:15:02:d6:6d:3f:96:92:9b:2c:ea:
         4e:b1:35:0c:87:da:f6:81:eb:ff:11:91:dc:93:3f:16:e1:6f:
         ce:01:67:27:28:12:be:98:4f:41:96:f3:88:c5:0d:f8:cb:fa:
         79:f3:7c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:21:05 2025 by rpki-client