Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
File:                     jRvvcwUnquHs-PswhWWdb9_u15c.mft (raw, json)
Hash identifier:          /GUjkH+Uz6DyibiAlLHLeVPBebB0H3q+Grk7JCb0854=
Subject key identifier:   AD:94:70:D7:0A:89:3C:79:69:7B:1B:7F:EE:25:E0:5C:CF:CE:23:C5
Authority key identifier: 8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97
Certificate issuer:       /CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
Certificate serial:       019A6D6D596E78428ACD38762F0F38D2955F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
Manifest number:          073F
Signing time:             Mon 10 Nov 2025 11:01:14 +0000
Manifest this update:     Mon 10 Nov 2025 11:01:14 +0000
Manifest next update:     Tue 11 Nov 2025 11:01:14 +0000
Files and hashes:         1: WOkyiKZXyZb_JE15v4JPZZ7_uas.roa (hash: uCxh+/x66loEAoXJHeu6h1m3ZKFFNdiPZwnHjwWElmQ=)
                          2: jRvvcwUnquHs-PswhWWdb9_u15c.crl (hash: 2QeuCXp4Dnze0Fzsedx579gIZ3ea3erkQmx0ed5tfRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Nov 2025 08:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:6d:6d:59:6e:78:42:8a:cd:38:76:2f:0f:38:d2:95:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d1bef730527aae1ecf8fb3085659d6fdfeed797
        Validity
            Not Before: Nov 10 11:01:14 2025 GMT
            Not After : Nov 11 11:01:14 2025 GMT
        Subject: CN=ad9470d70a893c79697b1b7fee25e05ccfce23c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1d:37:c7:37:9f:f2:54:de:d4:25:a9:61:e8:
                    78:9e:ef:66:6b:4a:3e:67:42:1b:72:f7:f3:7d:2d:
                    83:28:65:21:c3:42:e9:b8:66:37:06:4e:7d:4c:90:
                    7f:d6:8d:0e:5a:0c:ac:b2:01:5e:1a:bb:cb:89:49:
                    6d:c1:62:4d:c3:f0:99:e7:0d:b6:c7:bb:af:5e:39:
                    a8:65:c2:20:d9:cf:08:44:e5:13:0c:bd:1f:18:53:
                    30:4d:fe:87:c7:68:fc:80:7f:62:09:25:d3:9e:70:
                    db:ee:9c:f9:1f:d6:a0:04:75:18:36:d9:b0:c4:3d:
                    2a:1e:57:e5:63:4d:73:e3:94:57:9c:0c:c3:2f:8c:
                    de:bd:08:cd:c8:43:31:fe:e7:ad:5e:a7:49:bd:52:
                    dd:47:ac:8f:ff:10:5c:9e:e1:a0:ea:e9:17:d8:7d:
                    b2:78:bf:95:d5:0c:fb:06:f4:76:1e:f8:2c:2e:23:
                    60:13:92:5c:27:b4:b4:45:2e:50:af:f6:e7:1f:29:
                    8d:fa:d0:78:3a:6e:d8:35:05:82:79:2c:94:99:cc:
                    3c:f9:48:c8:82:13:9d:2c:3c:88:55:af:fd:0d:8b:
                    34:8e:6e:c3:16:a3:4e:05:48:53:27:e9:90:e1:46:
                    6b:39:83:47:2f:6c:81:47:c8:28:db:6c:01:12:bf:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:94:70:D7:0A:89:3C:79:69:7B:1B:7F:EE:25:E0:5C:CF:CE:23:C5
            X509v3 Authority Key Identifier:
                keyid:8D:1B:EF:73:05:27:AA:E1:EC:F8:FB:30:85:65:9D:6F:DF:EE:D7:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRvvcwUnquHs-PswhWWdb9_u15c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b716ad-ed04-4de4-b994-4aab2d68fa5a/1/jRvvcwUnquHs-PswhWWdb9_u15c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:67:85:81:dd:36:53:bf:59:73:f5:10:a1:2f:51:fa:4c:15:
         ef:35:ee:26:75:f1:22:e8:9a:1f:60:c5:be:c3:e4:72:f5:3e:
         fd:95:c7:cc:b5:38:7a:7b:3d:d3:04:cc:9e:f4:2c:50:7f:76:
         a7:c3:cc:7d:c8:3c:77:6c:4c:97:91:04:fc:3b:b4:85:b2:26:
         a2:22:2a:ca:b2:68:c9:ad:3e:1f:6f:12:38:6a:79:aa:77:e3:
         f3:ff:99:4d:43:04:e3:01:33:2c:67:9c:b2:1a:86:da:80:f6:
         b5:ab:2a:ed:4b:2d:69:3f:05:f0:26:bb:ae:32:c1:01:d6:7b:
         2c:89:6c:c9:e9:82:2d:fa:3f:94:b8:52:35:3a:5f:9a:e8:76:
         19:46:53:3b:88:2f:6a:85:d8:e0:c4:26:88:27:5a:f4:e2:40:
         be:11:c7:c8:d0:7b:74:16:a7:c2:ca:75:4c:00:dc:1b:ac:f2:
         60:97:ed:5b:ee:8a:e7:55:75:f5:85:30:a6:46:ed:8d:d5:32:
         94:81:70:1b:33:d4:86:da:62:b8:f4:39:dd:00:ef:5d:16:c4:
         83:d2:e7:3a:77:ed:69:6b:3e:b5:3c:58:e8:b5:57:8d:ee:ab:
         35:e2:5c:89:24:ab:5d:81:1a:31:14:fb:b8:d8:d9:a2:ba:f5:
         8c:c0:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 10 15:45:15 2025 by rpki-client