Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File:                     71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier:          3CXkqT0gUpC4DfOmyeg4/6xLDgRWvQCvybfGXx5GG5s=
Subject key identifier:   EC:94:84:06:7E:B9:D5:02:4D:6D:BB:E5:73:5B:EB:6B:00:4D:61:B0
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer:       /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial:       019A13F21B5244E7CF881187717F3C2302D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number:          03D6
Signing time:             Fri 24 Oct 2025 02:00:25 +0000
Manifest this update:     Fri 24 Oct 2025 02:00:25 +0000
Manifest next update:     Sat 25 Oct 2025 02:00:25 +0000
Files and hashes:         1: 1-fBRUvj0NMR0jYou_89CipZTIMU.roa (hash: zjwBCEo1/BmGhuy+yca01uAYZvtUSaw+w4THN94MAc4=)
                          2: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: nDPhhKMb+rpupinr9duBWJZ+l1dBgLlj9Axha8zck/g=)
                          3: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=)
                          4: ZxWk3FF7G-mV4dvIh9xuINcMa3g.roa (hash: osnpqNECQOCJYS+g2GUaYHD48aPmIaJ8ifNTfYGelL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:13:f2:1b:52:44:e7:cf:88:11:87:71:7f:3c:23:02:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
        Validity
            Not Before: Oct 24 02:00:25 2025 GMT
            Not After : Oct 25 02:00:25 2025 GMT
        Subject: CN=ec9484067eb9d5024d6dbbe5735beb6b004d61b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:06:9b:b8:17:70:bc:84:ac:fd:c8:a6:88:
                    a9:e5:81:84:88:ef:69:92:df:0d:3b:af:12:69:45:
                    fe:43:ea:cf:96:83:78:ee:2f:05:28:2b:36:5b:7d:
                    85:eb:1c:bf:db:3f:0d:64:e2:40:a1:aa:c4:ed:6c:
                    17:12:4b:f4:4c:62:e5:8a:5c:46:7e:a5:f4:8e:d5:
                    da:2e:0c:5c:31:7f:1e:af:80:78:c1:79:60:7c:c3:
                    a6:a6:98:e2:26:d3:80:d9:6c:6f:5b:7e:d9:5f:24:
                    59:db:8b:d3:31:e1:97:cd:d5:b4:dc:81:f8:3a:63:
                    8c:9e:69:56:ae:53:c5:42:78:8e:f1:60:85:d4:61:
                    36:a1:b9:80:26:cc:b2:c3:7e:69:34:c5:93:a8:d6:
                    29:31:06:09:a2:f2:ce:1b:79:b7:bd:2a:bf:2f:e8:
                    40:03:96:c1:e0:8b:3a:8f:03:2f:1b:ee:0f:bf:e2:
                    a0:a5:01:79:f3:59:7b:1e:5a:77:a5:e9:63:28:6f:
                    e2:5e:e1:7e:0b:94:3c:b1:26:7b:da:11:62:17:27:
                    98:5a:62:5a:7a:bb:f4:52:19:85:26:8d:ea:93:33:
                    34:b0:98:46:a4:df:49:33:2b:0f:42:30:2a:ae:10:
                    dc:06:20:23:d5:d1:b1:6e:2a:df:15:49:2a:43:1f:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:94:84:06:7E:B9:D5:02:4D:6D:BB:E5:73:5B:EB:6B:00:4D:61:B0
            X509v3 Authority Key Identifier:
                keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d9:ad:ef:91:6b:bf:37:ea:5a:b1:2e:ce:20:77:20:8c:95:
         39:20:85:d7:9b:d3:19:49:9f:80:90:a6:c2:9e:ab:33:2e:2c:
         58:c8:73:e8:3c:60:1f:82:27:92:4a:69:58:1f:5d:36:a6:fe:
         63:d8:0b:d1:50:00:41:53:98:6d:75:c1:b0:a3:50:9b:15:0e:
         cd:70:40:7c:ea:66:e2:fc:77:10:76:25:85:a3:8e:d5:9b:89:
         fd:db:05:0e:dd:d8:3b:d4:f5:fc:e7:ee:18:fe:d7:3b:ee:fa:
         b0:66:a6:69:25:7a:37:55:5d:4f:04:ef:94:09:46:7a:f2:43:
         6c:d3:ff:f5:90:02:1d:77:98:e4:9e:23:23:31:fe:58:29:6b:
         56:c7:1c:46:b3:b8:1f:88:6e:d5:7d:75:61:08:58:d2:2e:ab:
         cf:4f:e4:a6:73:d4:0f:ea:24:5a:60:e2:9d:1c:f6:8f:a1:2d:
         1d:2a:44:1f:ae:6a:ea:d3:ca:62:39:16:38:ca:be:f8:01:93:
         e2:39:ae:39:a2:08:d5:2c:81:6c:31:89:cf:11:4b:92:84:82:
         1c:79:b3:44:9c:5b:29:32:11:aa:dc:0d:f6:68:41:9d:9b:2f:
         9e:50:20:65:e5:68:fa:5b:07:24:9b:18:ca:44:3e:4d:c3:46:
         3a:ae:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 08:19:34 2025 by rpki-client