Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File:                     _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier:          Qo6jF0BvU+S4dkl8DVw7tMEUwBDP3esZY45BL6RweA0=
Subject key identifier:   91:2B:E6:86:E2:84:51:AE:89:1F:1B:AC:87:A2:4C:F1:56:35:77:C2
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer:       /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial:       019A228A55D4085CD02A500E5C9B7F93CCDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number:          16F8
Signing time:             Sun 26 Oct 2025 22:01:22 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:22 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:22 +0000
Files and hashes:         1: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: 6wmDFrAkM8pzD7B/JIzcT6bmF2MYQWLAI0IeUgffG8g=)
                          2: fwhTjjRIhEdJ6uOffHkJ9IbiBcc.roa (hash: uAg9kNvS0wjEdBKrNfsh4Pl1caTWWUTWPoPoJJEyRFk=)
                          3: tmBvyCU9dS1RGbck9AhZ77ixbZ4.roa (hash: LYRTheb+KiohViLX8r9l59ZvW37F3uyl1qPERmyYOaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:55:d4:08:5c:d0:2a:50:0e:5c:9b:7f:93:cc:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
        Validity
            Not Before: Oct 26 22:01:22 2025 GMT
            Not After : Oct 27 22:01:22 2025 GMT
        Subject: CN=912be686e28451ae891f1bac87a24cf1563577c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:c4:a9:f2:c5:ac:40:7a:c9:18:50:ca:23:
                    a9:1c:2c:d1:c6:4a:54:7f:5f:e7:e3:9a:90:ac:2f:
                    3d:6b:cb:9c:1d:5e:62:ae:a0:12:74:19:d3:93:96:
                    fb:4d:24:87:56:b5:43:e3:c9:40:ea:52:b3:06:ec:
                    0c:95:f3:99:6b:fa:4f:0a:eb:e6:cb:12:ad:93:c7:
                    6b:8c:98:98:1a:d2:0a:ee:18:b9:6b:06:40:05:fe:
                    1c:f3:08:6f:92:a7:4c:6c:cd:91:30:fe:98:b2:82:
                    e9:34:e5:d8:6f:a7:a7:d7:56:cd:9a:b4:03:b2:4c:
                    23:b5:09:74:90:fd:aa:c7:81:b3:e4:cc:f9:4c:06:
                    c8:1b:86:c3:87:71:7d:d1:5f:cc:a8:20:12:a2:c3:
                    06:99:1c:8d:41:1e:84:a1:e8:da:46:ef:47:0a:87:
                    66:d8:b8:67:5f:e8:44:66:ea:98:bc:36:da:b8:3c:
                    b9:d2:a3:a8:e2:2f:d3:61:cc:20:b2:a9:99:e2:d5:
                    26:62:9c:a5:75:24:59:06:08:94:7c:4b:f4:f3:4a:
                    c2:65:4b:2b:73:cc:f2:bd:1c:99:ed:6d:5d:d5:c9:
                    02:63:99:c3:eb:ea:58:5e:51:ff:ff:d4:d7:8a:77:
                    32:ef:50:71:d0:cc:f4:5a:61:77:0c:93:c6:8e:b1:
                    75:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2B:E6:86:E2:84:51:AE:89:1F:1B:AC:87:A2:4C:F1:56:35:77:C2
            X509v3 Authority Key Identifier:
                keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:85:a1:10:35:fe:59:7b:89:f7:39:1b:33:b1:ce:98:9a:
         59:9b:71:fc:5c:72:7c:38:89:6c:65:ce:e3:79:3b:39:5e:58:
         d5:37:48:d1:2a:65:9c:f7:34:89:55:50:ed:cd:33:18:c4:9c:
         99:21:e4:88:27:34:f0:e9:24:72:51:1d:7f:4a:13:46:4e:82:
         e9:81:e6:83:69:8d:f1:5f:bd:2c:29:e2:81:80:bc:3c:49:1d:
         8e:34:f4:47:c8:da:5e:7e:a4:c2:db:29:f7:06:ce:4d:a0:ee:
         0c:19:ae:eb:8b:88:da:63:b6:7c:ec:35:2e:90:19:f8:da:a2:
         af:80:08:da:af:f3:90:3e:9c:f9:bd:55:93:01:bd:9c:27:72:
         66:94:bb:10:2c:9d:01:81:23:54:5d:32:bd:d9:2b:ac:e5:f1:
         f8:4a:21:fb:03:69:e7:f9:1e:91:14:81:c3:6c:f6:4e:c5:cf:
         82:24:f5:aa:8c:ab:8e:7a:b9:ae:95:07:13:ab:bc:07:55:d1:
         8d:15:c0:41:f6:a1:c9:8b:11:12:6b:5c:e5:08:0c:38:a3:1b:
         cc:3a:d6:97:e1:50:86:50:3d:5e:af:b4:71:bc:67:e3:e5:ba:
         72:69:02:5a:e9:08:85:32:56:ad:0a:f8:0c:a3:c5:67:5d:63:
         6c:30:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:24:37 2025 by rpki-client