Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
File:                     7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft (raw, json)
Hash identifier:          hLKzUq459/At2BOe8vqno41+abdppY9oFgORl2loHFM=
Subject key identifier:   CF:18:6A:8E:6F:A1:1C:A9:99:F2:D8:51:F3:A7:80:05:3F:35:8D:4E
Authority key identifier: EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2
Certificate issuer:       /CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
Certificate serial:       019A7112C3ED93860763554BD30E3BF181FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
Manifest number:          3C
Signing time:             Tue 11 Nov 2025 04:00:46 +0000
Manifest this update:     Tue 11 Nov 2025 04:00:46 +0000
Manifest next update:     Wed 12 Nov 2025 04:00:46 +0000
Files and hashes:         1: 7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl (hash: MwWzriAwsQjm1X/d4ga8cVCeMgxgIuO1/KJGaxIH+YM=)
                          2: Kipa3kLLXBexBMJFIr2nzsJGfAQ.roa (hash: MEzxz1fu8r8OcAfHUpLMgUbApSNH2jwTj14hFHpw51I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 04:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:12:c3:ed:93:86:07:63:55:4b:d3:0e:3b:f1:81:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec09f0e88663f83a5b6f84f1fee6b42c35c0f8f2
        Validity
            Not Before: Nov 11 04:00:46 2025 GMT
            Not After : Nov 12 04:00:46 2025 GMT
        Subject: CN=cf186a8e6fa11ca999f2d851f3a780053f358d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:aa:86:9b:dc:32:2e:c2:3a:41:60:a3:d4:
                    53:a7:7d:49:40:cd:39:83:78:fd:3b:93:e5:ae:71:
                    61:b6:7f:17:84:59:67:0c:f7:0e:b3:5b:d3:6b:57:
                    2a:a5:1b:9c:51:e4:bd:51:0a:4c:38:b2:8d:ee:6f:
                    f5:a5:b1:8a:e2:c2:2f:2c:1d:a4:36:92:d6:fd:a5:
                    57:d1:df:78:8d:94:9a:b3:66:44:2a:c2:6c:c6:8e:
                    1a:0d:b6:fb:32:8f:b8:a7:a5:5d:a3:1a:9a:dc:57:
                    dc:47:11:69:a1:af:1c:8e:86:fa:4f:35:59:b6:b1:
                    cf:3e:58:71:26:7f:94:57:79:86:b2:79:b7:9d:0d:
                    b7:a4:34:b4:e6:02:94:15:82:8c:fb:f5:81:91:d8:
                    cb:3f:3e:df:75:e2:52:f1:5a:c3:16:3e:b6:36:cd:
                    45:f8:67:ad:fc:2c:5a:26:80:2c:22:19:91:bf:c1:
                    8b:4e:3b:f6:57:8d:1e:35:20:3c:69:ad:9e:92:4b:
                    eb:89:3a:40:5b:c3:61:cc:fd:77:2f:85:2d:d3:24:
                    91:cd:44:e2:7c:b2:df:51:be:bb:a3:11:b0:70:da:
                    90:08:76:d8:6f:d7:52:6a:5b:6a:1c:f8:59:eb:e7:
                    e0:41:63:88:f4:24:88:20:65:ea:85:ac:c5:99:f7:
                    8e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:18:6A:8E:6F:A1:1C:A9:99:F2:D8:51:F3:A7:80:05:3F:35:8D:4E
            X509v3 Authority Key Identifier:
                keyid:EC:09:F0:E8:86:63:F8:3A:5B:6F:84:F1:FE:E6:B4:2C:35:C0:F8:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/96c040-6109-4221-8cad-36b5680ac368/1/7Anw6IZj-Dpbb4Tx_ua0LDXA-PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:db:e9:8f:c7:b9:e1:7e:56:28:04:ae:15:11:82:fa:41:
         a2:70:2f:f8:33:d9:00:b0:9e:85:a3:01:db:93:db:8e:36:fe:
         54:10:f5:ac:27:fb:17:a6:5d:a5:52:af:9b:61:76:c3:5c:42:
         82:c9:0e:3f:b4:17:e2:84:69:15:33:3b:d6:d1:96:35:f8:4a:
         e8:c6:91:5c:ac:5c:86:c9:a1:b0:fb:29:76:fe:aa:67:d2:f0:
         45:63:9d:25:8a:0e:fd:51:29:37:76:4f:1b:b9:1e:4f:d0:33:
         30:7d:c1:81:b7:70:78:34:f0:09:29:bf:ef:0e:8a:25:86:69:
         26:bb:83:24:20:78:56:d3:e3:00:b4:f0:c4:ef:0f:e1:c9:16:
         0f:39:d0:8a:65:f4:ec:45:23:cd:91:88:73:36:3f:11:c7:f2:
         ee:b7:2a:e0:53:47:27:0a:e1:0b:cf:b5:9f:56:55:a0:ae:c8:
         c5:c1:9f:c8:84:68:25:9d:15:a2:57:3d:30:1f:07:41:22:c1:
         e2:9d:7d:1d:c5:21:bf:a8:69:82:c4:de:62:af:ad:6c:6b:f7:
         5a:b5:65:9a:ac:a7:59:d5:04:66:e1:0e:5b:2e:d8:53:58:9f:
         37:5a:af:aa:7e:26:51:cf:5a:47:60:9b:5b:a0:ec:7f:3e:70:
         ed:6e:23:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:53 2025 by rpki-client