Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          bxFupRAW0VnHBY6DdSFLt33BPQ3x4dsL9CpbuOPgXFU=
Subject key identifier:   ED:D5:B0:CE:A6:FA:89:A0:B1:76:82:FF:52:3B:CD:FC:2C:D9:CF:14
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       0199FD3499F094A21E7965663292273472DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0BB8
Signing time:             Sun 19 Oct 2025 16:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:46 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: +dpJ1GxFNRgzTidOmOjfBpWZjSCH7hckm24xLUYzu74=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:99:f0:94:a2:1e:79:65:66:32:92:27:34:72:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Oct 19 16:01:46 2025 GMT
            Not After : Oct 20 16:01:46 2025 GMT
        Subject: CN=edd5b0cea6fa89a0b17682ff523bcdfc2cd9cf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:49:b5:fd:12:c6:d6:43:2e:29:a1:ac:d9:
                    b7:3d:da:66:ea:66:2d:df:6c:3b:61:b4:c5:f0:b8:
                    45:0a:02:c2:75:23:a0:b4:c0:55:53:37:32:22:40:
                    e1:77:86:48:cd:cc:51:e3:9d:b3:fd:de:b5:81:a7:
                    22:aa:c9:02:64:ff:c6:82:0f:99:71:d4:04:15:2b:
                    aa:ba:21:a8:1a:8b:4c:87:ae:95:74:e5:5c:e1:0f:
                    40:0f:8f:8a:a5:bf:aa:f1:83:5d:ee:76:45:d8:0c:
                    09:7b:f4:07:85:6f:69:b5:21:c3:60:de:61:dc:bf:
                    0f:a0:44:60:d1:c4:69:3f:c1:45:f6:8b:3b:70:0a:
                    d8:eb:1c:2c:a3:24:b7:3c:43:f0:9d:6d:ed:e8:ca:
                    84:c1:ee:9c:24:67:a9:94:b5:93:cd:e0:a3:82:f0:
                    43:08:49:96:dc:0a:9c:ce:6a:50:98:79:19:14:9f:
                    97:af:01:66:be:08:17:50:9a:55:c2:29:ef:a1:9c:
                    08:3e:3d:b0:0b:e8:16:b7:36:7a:03:fc:fb:ef:dd:
                    72:06:1b:3a:22:07:37:2f:e2:35:27:65:26:d9:14:
                    4e:84:a6:77:af:be:72:a9:a1:b3:d2:19:43:13:96:
                    d4:af:75:09:9f:a2:3c:50:fe:78:ce:d5:bc:93:a0:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D5:B0:CE:A6:FA:89:A0:B1:76:82:FF:52:3B:CD:FC:2C:D9:CF:14
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1f:6d:56:35:ea:8b:53:fd:1d:5e:59:69:72:f9:8e:35:72:
         f5:70:0c:f9:71:7a:58:27:01:c1:8d:4a:e6:73:33:ce:92:84:
         1c:16:26:cf:3e:8a:5d:b7:f9:9f:44:34:f2:30:b9:bd:6c:39:
         9c:f9:2c:33:ad:fc:f6:f1:78:32:66:e6:e6:21:6e:3c:27:03:
         c1:25:9a:bb:c9:2e:9b:bf:b7:1b:99:8a:61:34:e8:f3:93:a0:
         ee:9b:fd:08:43:cd:72:61:fe:1f:b6:0a:66:ea:e6:e0:84:ec:
         b2:26:4f:29:3e:4b:73:86:22:0e:bd:dd:8b:36:8f:3c:69:80:
         d8:74:3e:f5:84:df:19:9e:d2:6f:b7:78:84:4b:fe:e3:18:08:
         0b:5e:7a:a9:30:68:d6:0e:e2:e6:c4:42:e2:d3:79:a0:84:e5:
         99:90:5b:8d:95:e1:ef:7f:b5:37:cd:b9:e6:57:cd:20:ed:74:
         13:5e:d1:ad:53:66:a5:f1:53:8c:e8:90:8b:ca:bc:fe:83:2b:
         46:b6:9f:01:74:9b:58:7c:57:1e:16:f3:1f:6b:5d:e8:91:7a:
         d3:9d:d7:ac:f8:44:9d:a9:f3:fe:af:21:a6:df:8c:5f:16:fb:
         22:d4:e4:7c:b8:e4:3a:5c:bb:b7:b1:80:a3:7c:1f:51:29:6f:
         90:01:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:05:54 2025 by rpki-client