Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
File:                     _7JidnKHfQ9t6bxOfhhu7dE1YRA.mft (raw, json)
Hash identifier:          QB7flzTph5qb7mLzoin0xJyh0DCX530sJ4+j9E0cP1I=
Subject key identifier:   E8:9D:8D:4E:5F:D8:6D:3C:67:9A:DF:66:34:D7:60:96:71:37:43:C3
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Certificate issuer:       /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial:       019A1A6231932D2BBB5ADC66C5F119CFD9CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
Manifest number:          04D2
Signing time:             Sat 25 Oct 2025 08:00:34 +0000
Manifest this update:     Sat 25 Oct 2025 08:00:34 +0000
Manifest next update:     Sun 26 Oct 2025 08:00:34 +0000
Files and hashes:         1: 7KsAM7VeKjBy5UduS8f_1K2mOzI.roa (hash: dk/c5Z5K7GpW72fi6w6GOURMB6HE85VOO0UOd/bbWt0=)
                          2: _7JidnKHfQ9t6bxOfhhu7dE1YRA.crl (hash: JVC5JWV8EQI3kq91YjsGZ9Y10uTsHl/ExPBMS0u6Xf0=)
                          3: ca3uBchX87aQb2BMcNTeitnNyWg.roa (hash: xEcjhfiSS5Il6V8TFlEtmg3MeQv6IP4QBvRRpLZDmF4=)
                          4: ms0ysNI3gJcJxrW1zAcwZAwf030.roa (hash: oy5QemuB6ayym1WN1/P0ykwuzjgXG9YHvWNj+gCOMSc=)
                          5: oy0RBpjxSP0ql4h1ibz07-__E2o.roa (hash: 6Cxc3dZHUVoSuUtM1kMTedY7LGErQxmK7dXJEhw/5Uc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:62:31:93:2d:2b:bb:5a:dc:66:c5:f1:19:cf:d9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
        Validity
            Not Before: Oct 25 08:00:34 2025 GMT
            Not After : Oct 26 08:00:34 2025 GMT
        Subject: CN=e89d8d4e5fd86d3c679adf6634d76096713743c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:3d:3c:bb:0b:b8:94:86:bf:e4:8a:37:99:
                    a5:8d:d5:0b:4b:8d:e8:10:16:70:c1:1a:2a:df:91:
                    df:99:f0:10:51:e3:bf:30:50:de:5e:66:8c:d4:eb:
                    7e:23:3d:c0:8f:59:c3:58:70:d1:b9:9b:1d:43:52:
                    48:2c:8e:99:23:8c:f8:8e:d8:2d:a3:81:20:6d:0a:
                    ac:79:df:07:dc:5a:64:ec:c5:5f:18:95:ad:14:04:
                    e9:64:8c:e3:86:c1:67:aa:65:f4:53:9f:06:cb:76:
                    11:90:19:de:95:fa:65:59:2f:09:39:f9:7c:23:28:
                    c0:7a:ed:13:65:a7:61:8c:b4:b6:7a:11:37:e2:ab:
                    ba:72:84:c1:06:4a:73:b1:a2:ea:aa:f1:49:76:98:
                    75:af:3d:49:d0:fc:1e:eb:6b:8e:10:ab:cb:52:44:
                    94:45:7b:d2:c4:88:03:93:9b:95:d4:b0:c4:ac:43:
                    05:a1:b3:92:96:3c:46:46:dd:43:dd:42:ea:cf:b3:
                    a8:4e:7f:2a:9a:b0:5a:82:bb:7f:5b:92:a7:04:c7:
                    a8:47:56:27:6d:a5:2d:f1:6f:21:b7:20:00:53:1e:
                    a1:fe:40:2c:76:14:de:aa:2a:38:ce:cd:a0:b5:35:
                    c4:d5:e8:26:38:f8:de:0d:9d:29:5c:82:d1:9c:8b:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9D:8D:4E:5F:D8:6D:3C:67:9A:DF:66:34:D7:60:96:71:37:43:C3
            X509v3 Authority Key Identifier:
                keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:0c:fd:d3:28:cd:cd:f1:48:4d:72:6f:7b:90:94:3d:dd:13:
         5c:21:c3:7f:f7:ec:7b:2c:df:d4:a9:a3:d2:89:8c:7c:43:e6:
         a8:6a:0e:49:2b:87:90:7f:91:b0:b2:31:df:d1:f2:e2:11:49:
         f7:69:e2:e3:ed:8e:18:9b:8b:0a:fa:a2:32:9d:93:30:0e:18:
         fd:ab:7e:26:b5:f8:28:1d:08:78:69:70:52:86:e9:e0:33:e6:
         06:3d:30:ca:12:1a:5a:c5:27:fd:c3:c5:6f:52:f5:d9:81:8c:
         b0:ef:41:b1:4f:49:43:1b:ce:b1:e2:38:ab:9d:6c:49:d0:ab:
         5a:5b:53:7c:b9:25:e5:eb:cf:50:9e:de:8b:7e:df:01:b3:74:
         64:18:4c:8a:35:53:8f:5c:a8:bc:40:1b:07:9c:84:94:41:33:
         ac:e5:7a:f1:89:c6:70:7c:46:90:d2:9a:8b:16:7d:01:0b:a2:
         cb:d3:a5:27:fd:84:b4:84:94:30:6b:42:06:a7:89:9b:41:67:
         b7:1a:52:66:41:61:f9:c4:c5:eb:51:8d:4a:8c:1a:1d:aa:d9:
         d0:99:2e:7e:e2:4a:98:e0:1c:9f:dc:c5:cf:00:2f:ba:58:21:
         d2:f0:cc:11:3e:75:4e:4f:dc:67:1c:1f:cd:41:c8:c1:1a:16:
         0f:91:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:32:55 2025 by rpki-client