Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
File:                     7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft (raw, json)
Hash identifier:          2WnWdhmdjy3mJgCH64uYFUS2o1XTUyveXNoqPa29NHs=
Subject key identifier:   0C:38:6D:50:F6:75:A6:36:AA:21:50:38:2D:7B:24:7A:D8:2C:92:BB
Authority key identifier: EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6
Certificate issuer:       /CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
Certificate serial:       019A228A6D0030454C94A2B6F3778C4048CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
Manifest number:          0E3C
Signing time:             Sun 26 Oct 2025 22:01:28 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:28 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:28 +0000
Files and hashes:         1: 7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl (hash: Pla1jSKaxZLrCp3hjVs9PVMkwsAZPZRbp1ruWqecl3Y=)
                          2: ZJw_Jukbo_heQPRMAmDWcBlKQaQ.roa (hash: bPVF2gLa5okAyNdgsZQT7rjoKFmL6l2YkqA4bzlxF0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:6d:00:30:45:4c:94:a2:b6:f3:77:8c:40:48:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe15341d2afc6a857a584199fc7fb07c1701fc6
        Validity
            Not Before: Oct 26 22:01:28 2025 GMT
            Not After : Oct 27 22:01:28 2025 GMT
        Subject: CN=0c386d50f675a636aa2150382d7b247ad82c92bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1c:48:da:8a:8a:ef:99:a0:87:33:44:da:b8:
                    ce:09:93:84:e2:4d:e3:9f:ee:50:63:8f:55:43:e2:
                    a5:3d:0f:02:85:07:83:be:f4:d5:2c:07:9f:3d:35:
                    d7:70:42:bc:2e:1b:b3:13:e1:68:74:40:24:e0:58:
                    22:89:d7:4b:63:94:a9:15:05:9b:a8:e4:af:7b:1a:
                    cf:7b:d5:f7:f7:e5:57:48:6f:6a:09:d8:65:00:ab:
                    ab:36:02:f6:41:dc:d8:7d:ce:1f:c7:7e:cb:ce:6b:
                    0b:c7:b8:0e:ce:ec:4d:27:24:41:b2:83:49:f9:0c:
                    1f:e7:df:80:5b:dc:2e:3f:f4:3d:d4:61:4e:c7:44:
                    ca:4e:68:ee:f2:7f:4f:19:c4:a9:e1:3c:db:d8:88:
                    fc:16:ba:e8:a4:0b:75:d8:0c:d3:f9:4b:b1:50:32:
                    fc:1a:61:fe:2a:ad:0d:cc:01:1d:0d:2d:61:88:87:
                    7a:80:78:fd:ff:62:6e:75:ca:c6:97:79:08:ef:89:
                    f3:ce:74:8d:4f:55:9c:19:74:36:57:06:f6:1f:68:
                    b3:66:d1:61:0b:f8:6d:d7:4d:d2:fb:90:17:09:9c:
                    53:43:7a:2d:f8:91:46:d1:dc:93:87:50:9b:ce:ee:
                    b8:68:3d:1d:62:de:dd:b6:92:ba:b7:56:29:2d:44:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:38:6D:50:F6:75:A6:36:AA:21:50:38:2D:7B:24:7A:D8:2C:92:BB
            X509v3 Authority Key Identifier:
                keyid:EF:E1:53:41:D2:AF:C6:A8:57:A5:84:19:9F:C7:FB:07:C1:70:1F:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/81e945-7696-416f-af2f-65b0733fedd3/1/7-FTQdKvxqhXpYQZn8f7B8FwH8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:57:1c:f6:a8:9a:ac:34:05:fa:5c:a0:68:63:34:72:74:
         2e:46:a3:fb:d3:92:f2:b8:47:b9:e2:cd:7d:89:58:f9:3a:fa:
         bd:42:4a:42:77:55:ad:b0:ac:b3:83:b9:8b:fb:39:d1:25:ce:
         9b:9d:00:f3:be:26:21:e3:73:cb:bc:6f:2e:fb:44:ab:4c:63:
         0c:9b:22:f6:c2:a1:4e:1a:8b:52:cd:23:91:06:1f:7c:05:1d:
         61:1e:66:a2:8a:f3:50:9c:33:08:f1:c1:4f:ba:76:30:cd:47:
         db:52:08:d9:06:d3:fc:9d:b3:c6:ea:5f:68:9b:c3:9e:45:3b:
         e0:06:ff:b6:f8:c6:18:a6:50:1d:39:b4:e9:5c:78:11:69:af:
         7b:ef:1c:1b:58:fa:cf:67:b6:60:b6:05:10:62:11:02:91:71:
         fd:47:36:e5:5d:a3:c0:8e:04:41:4c:5c:4d:77:ef:ca:47:9d:
         50:a1:fa:3e:42:30:ee:00:6f:c3:ca:6d:f3:d2:1e:2b:b5:15:
         e0:10:20:86:be:1d:88:a6:0c:e5:8a:fb:e4:74:4c:80:e1:e1:
         a6:f3:0a:20:1f:05:51:a2:17:c9:7c:27:9a:1e:9a:7a:09:7a:
         62:ae:6d:5f:5c:0e:88:a9:47:d8:e3:f9:6f:e1:d9:21:07:a5:
         22:4f:7c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:35:22 2025 by rpki-client