Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
File:                     PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft (raw, json)
Hash identifier:          7MvTBoExTW9Ni78Qm0KdN825EKXeSN6RxLMWDcVPpCg=
Subject key identifier:   B7:F6:30:99:2C:E2:28:47:1D:F2:7A:28:FF:F6:D5:F7:93:0D:4B:30
Authority key identifier: 3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA
Certificate issuer:       /CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
Certificate serial:       019A71B89A919AE35DFE298454CFF3E7753B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
Manifest number:          0E90
Signing time:             Tue 11 Nov 2025 07:01:54 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:54 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:54 +0000
Files and hashes:         1: FYDxNKC7eVGhTXJyh7DYdQpF13Q.roa (hash: QGlq0akFOdxYp0jPfxez742IAGFVAdJ6BpKN9aAo6FU=)
                          2: PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl (hash: lbMiHdA/7rbAwFCbKj39g0v8Gh5tC8Pe5x1m1z9OTes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:9a:91:9a:e3:5d:fe:29:84:54:cf:f3:e7:75:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ee9110b85fdde3eb6e4462541babc3236e8ba
        Validity
            Not Before: Nov 11 07:01:54 2025 GMT
            Not After : Nov 12 07:01:54 2025 GMT
        Subject: CN=b7f630992ce228471df27a28fff6d5f7930d4b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:11:05:a4:a3:d6:4f:c9:a9:75:08:90:7c:
                    f9:49:73:31:d4:6d:ab:7e:13:60:92:45:eb:99:88:
                    02:36:4f:5a:42:b1:9c:8a:62:cf:eb:64:f6:9f:da:
                    09:e6:40:ed:1b:2c:ee:d4:a2:7c:14:c0:fd:a6:32:
                    f3:0c:23:47:8a:0f:8b:2c:6f:1f:e0:a1:04:59:db:
                    12:b4:18:fa:4c:0e:c3:cd:6a:f9:b4:64:6f:0c:89:
                    11:c8:60:9a:b8:08:6b:8f:22:f1:cc:4b:53:41:03:
                    0d:a4:ca:6c:46:33:95:28:47:5b:a2:02:47:e2:24:
                    8b:d7:f5:94:f4:7e:03:f6:5b:d5:29:9f:ee:fc:1d:
                    e1:88:33:39:1e:00:fe:ac:de:90:dd:6b:a8:c3:1d:
                    3e:b7:11:06:81:cb:74:83:94:1b:77:79:3c:fc:cc:
                    ad:a6:09:1d:84:4a:74:ac:f5:b3:d0:e4:5a:dc:2f:
                    f0:e0:a1:68:91:df:85:4c:24:1d:df:e0:03:52:eb:
                    fa:d1:f8:5b:49:73:d8:7d:2c:24:98:ee:39:fe:06:
                    4f:16:90:4f:7a:15:53:07:77:eb:c7:45:87:db:e9:
                    11:df:f8:17:cc:5e:4d:4a:ce:d5:54:49:cf:d4:ab:
                    57:28:d8:41:20:73:54:c7:df:b4:20:27:18:e9:07:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F6:30:99:2C:E2:28:47:1D:F2:7A:28:FF:F6:D5:F7:93:0D:4B:30
            X509v3 Authority Key Identifier:
                keyid:3C:4E:E9:11:0B:85:FD:DE:3E:B6:E4:46:25:41:BA:BC:32:36:E8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7pEQuF_d4-tuRGJUG6vDI26Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dd18d0-d1a2-46d4-8464-c94a8f2e3230/1/PE7pEQuF_d4-tuRGJUG6vDI26Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:96:93:dc:82:59:1d:31:a5:3a:6e:2e:bd:9f:40:ca:f0:60:
         b8:e1:6a:78:5f:af:62:86:46:e2:ca:35:9b:5e:3d:85:78:6f:
         73:1c:e3:ad:50:c4:aa:c0:de:93:26:27:eb:dc:3f:a6:26:e2:
         50:fa:c7:29:d1:49:b8:12:25:7d:af:a8:e9:5b:e2:15:9c:ce:
         a6:be:37:23:99:25:ea:a9:2a:0f:81:c0:9b:cd:30:cf:85:15:
         32:61:a0:20:bd:80:2e:f9:89:46:c9:1c:cb:c5:80:e3:87:fd:
         1e:c3:62:a1:58:88:53:66:37:f2:3d:34:30:b7:b1:a9:0d:5f:
         a6:84:62:b3:57:91:f3:9a:ce:d4:87:7c:ba:05:7b:ba:a0:cd:
         0d:0e:c2:27:0b:56:ee:12:04:37:23:e0:76:84:f4:e4:11:dc:
         2c:3e:13:92:8e:d8:d1:db:a4:af:39:8a:53:4c:8f:d0:78:49:
         69:ef:b5:bc:0d:2f:87:4d:2d:95:95:17:74:ae:c3:98:7a:ae:
         da:ff:18:c1:0d:e4:f9:1d:c5:3b:65:28:e1:e3:f6:17:44:de:
         48:78:f3:97:f2:12:95:58:bb:64:4a:83:1d:45:5d:4a:13:17:
         6c:06:81:ce:bb:27:a7:d0:7d:81:78:aa:65:58:70:6c:62:34:
         48:6c:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client