Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
File:                     F6yAsO71cIxkOQVF0acTkCRLbRs.mft (raw, json)
Hash identifier:          Wfi7DTyz5HkRIyf2HQrpeHC2Bm4FEsuEpe3NelNolYo=
Subject key identifier:   8D:35:C8:9F:87:3B:60:3A:21:0C:BC:64:EC:75:87:9E:86:CA:DA:70
Authority key identifier: 17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B
Certificate issuer:       /CN=17ac80b0eef5708c64390545d1a71390244b6d1b
Certificate serial:       019A71132C856EECCB14C0556D04F60864DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
Manifest number:          1447
Signing time:             Tue 11 Nov 2025 04:01:13 +0000
Manifest this update:     Tue 11 Nov 2025 04:01:13 +0000
Manifest next update:     Wed 12 Nov 2025 04:01:13 +0000
Files and hashes:         1: F6yAsO71cIxkOQVF0acTkCRLbRs.crl (hash: 5dpV18RAKGULrhpgpVfJCXmBXedfJgRitIWg7l5kAXg=)
                          2: zSUjlVA_3mzAMpyrhKZAaPLaNJs.roa (hash: 72zL3nwgCvbu+myGvWOjXCnDMo56NxzjVOkIDgx8eQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:13:2c:85:6e:ec:cb:14:c0:55:6d:04:f6:08:64:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ac80b0eef5708c64390545d1a71390244b6d1b
        Validity
            Not Before: Nov 11 04:01:13 2025 GMT
            Not After : Nov 12 04:01:13 2025 GMT
        Subject: CN=8d35c89f873b603a210cbc64ec75879e86cada70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:87:88:e9:4a:99:43:02:1e:90:83:83:04:0d:
                    e2:33:1b:0d:67:fd:bb:d5:66:a1:a6:50:8d:3b:20:
                    42:e2:fb:b8:d9:29:39:14:cb:3d:bc:fe:b2:79:85:
                    8e:2a:07:9a:9d:b7:1e:d0:14:a4:54:8f:7d:31:68:
                    43:33:16:c0:dd:66:25:7c:ff:da:74:71:62:b4:a5:
                    a4:8b:f0:09:ba:2c:18:9e:f0:67:7f:3a:97:93:ad:
                    2c:1e:6b:01:fd:2f:57:34:3b:bd:fa:93:1a:da:5b:
                    0a:8c:6f:81:27:1e:56:24:34:c4:db:5a:f0:43:56:
                    66:a0:a0:10:3f:8a:c7:f1:0e:d3:1b:57:19:67:81:
                    a6:d8:d5:51:0b:e9:cf:1d:a9:ad:92:0c:6a:b0:65:
                    f8:35:ca:b6:15:57:bf:20:53:55:cc:39:d6:7b:ca:
                    9c:1e:83:f0:60:50:d8:e0:f1:ef:0e:66:02:68:ce:
                    fb:f6:38:c3:4b:95:a4:7d:db:4a:52:89:79:09:33:
                    9b:c0:4a:a1:25:15:3f:71:a3:87:fe:5e:08:6e:a9:
                    e4:7b:a4:93:2c:c2:6d:de:f6:ba:53:c1:e8:7f:f2:
                    b1:da:40:ad:fe:c9:57:f6:06:56:2f:d4:3e:75:41:
                    2f:fe:6f:c2:d3:9d:ec:6a:35:e2:4f:e6:3f:8a:4b:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:35:C8:9F:87:3B:60:3A:21:0C:BC:64:EC:75:87:9E:86:CA:DA:70
            X509v3 Authority Key Identifier:
                keyid:17:AC:80:B0:EE:F5:70:8C:64:39:05:45:D1:A7:13:90:24:4B:6D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6yAsO71cIxkOQVF0acTkCRLbRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7e2ada-0dc1-4f3e-a58d-a29e814b9b29/1/F6yAsO71cIxkOQVF0acTkCRLbRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:83:93:cb:f2:18:2a:dd:ea:0e:20:d1:25:0d:c8:55:4c:
         c4:e0:23:53:b8:b2:78:f4:01:a4:fe:cd:f5:96:fd:52:7b:50:
         98:ba:39:3c:c0:42:70:a2:4a:4f:9d:f0:e9:49:1b:62:4e:54:
         ce:43:7c:bf:0d:e4:35:93:02:7c:71:2e:76:bf:1a:16:00:2a:
         ed:44:01:06:c3:63:06:d7:d5:6e:37:25:e4:a2:54:dc:94:33:
         6c:e7:93:41:b7:54:84:f2:46:48:05:bf:2f:0a:3c:db:fd:71:
         16:24:23:80:00:0e:7c:4a:d0:9a:53:85:5d:44:a2:66:60:2a:
         51:c6:76:c5:bc:7b:0e:82:39:81:52:13:00:11:c6:65:31:b1:
         8b:65:4b:34:06:10:ca:70:44:5c:2d:53:e4:31:11:3b:00:fd:
         a8:12:4d:91:ea:fb:77:36:20:84:eb:a2:5d:2e:55:23:a3:12:
         6e:d7:47:56:47:c6:9a:6f:c2:90:c4:b1:56:5e:a1:1c:ef:aa:
         c6:38:0f:60:85:e3:83:cb:d2:f7:a0:28:04:57:be:8c:59:ab:
         d7:c9:26:0d:55:e7:ac:8d:d6:89:4c:b2:d9:6f:1b:fc:3f:87:
         c5:3a:e1:d0:00:a3:60:5d:2b:c5:18:55:97:e5:5c:1b:1a:7a:
         56:f0:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:39:04 2025 by rpki-client