Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
File:                     X7piVd7aoaG2sXy46pHgLUErhxg.mft (raw, json)
Hash identifier:          K8P66BcMSYKbXkQtaRhDWoZokgtQiZ5rhwEELFQT9tE=
Subject key identifier:   64:67:29:5F:6C:7A:A8:B7:25:39:84:BD:E9:96:78:53:D1:6F:CF:6B
Authority key identifier: 5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18
Certificate issuer:       /CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
Certificate serial:       0199E89B9C136A79B17F57083F1B83662F4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
Manifest number:          0BCD
Signing time:             Wed 15 Oct 2025 16:02:15 +0000
Manifest this update:     Wed 15 Oct 2025 16:02:15 +0000
Manifest next update:     Thu 16 Oct 2025 16:02:15 +0000
Files and hashes:         1: KXplrrjoXk-pwean-b2EUxmjWf0.roa (hash: SADzPbjQpUkns1iDSl5tKZ2PbDzP9GLXflBpqt90i+0=)
                          2: X7piVd7aoaG2sXy46pHgLUErhxg.crl (hash: ydP83O6eOIVgIJV50wBa8pm1XH351wqOanIuUxc+In8=)
                          3: hacshKY0tbOUkqvYc39HoDnofn8.roa (hash: JxLfxo4h3+yvwbhiN20U02vAC8X/psm8Gy+LvSzn9K0=)
                          4: tl08I-n58Omn0yrfhuxp8KWpULk.roa (hash: KzSe5Vgxc5D5oBSEecsymsgmqwAX4NdXILrgqAyHjOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Oct 2025 13:29:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:e8:9b:9c:13:6a:79:b1:7f:57:08:3f:1b:83:66:2f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fba6255dedaa1a1b6b17cb8ea91e02d412b8718
        Validity
            Not Before: Oct 15 16:02:15 2025 GMT
            Not After : Oct 16 16:02:15 2025 GMT
        Subject: CN=6467295f6c7aa8b7253984bde9967853d16fcf6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:f5:c8:fe:07:ef:18:1e:bf:f9:d0:28:b5:
                    ea:45:8f:57:b0:16:54:fc:3d:e8:6d:f1:dc:ed:1b:
                    1e:f8:8e:7e:4c:d5:ae:48:0e:bf:f4:e9:e5:a1:10:
                    cd:a7:ba:ff:fa:37:6b:56:4f:9d:1e:79:31:b5:40:
                    39:82:b4:b6:93:a8:70:e0:05:ca:b4:84:2a:a1:42:
                    22:94:68:ae:fa:c8:03:7c:0f:0d:2f:85:d0:80:29:
                    6e:5a:57:de:42:eb:0a:cd:4f:0b:26:89:8f:9d:f1:
                    6e:5c:33:30:5d:7b:be:d9:6b:01:1c:00:4b:08:c8:
                    d9:8b:84:f3:c1:5e:07:51:fb:bb:9b:ea:50:e1:2e:
                    13:78:2e:c6:84:4d:84:8b:69:fb:a7:54:8b:58:6e:
                    5e:c5:61:a1:57:1c:b9:2b:ee:4b:95:b9:ab:1e:a7:
                    d6:88:5c:d4:c0:a9:b1:28:6c:5a:74:66:5c:81:2b:
                    ea:8c:02:00:84:de:9e:70:b0:4c:6e:2b:06:72:e0:
                    b8:5f:6b:88:c6:59:1d:8d:e5:a2:a7:49:7a:3c:53:
                    eb:12:3b:51:f3:c8:a4:5e:4c:d4:6c:43:46:9f:6c:
                    35:fa:39:9d:44:88:12:7f:5c:0c:3c:81:27:25:b5:
                    21:95:2f:3b:dd:88:a4:7e:8a:cb:d4:05:e4:a4:98:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:67:29:5F:6C:7A:A8:B7:25:39:84:BD:E9:96:78:53:D1:6F:CF:6B
            X509v3 Authority Key Identifier:
                keyid:5F:BA:62:55:DE:DA:A1:A1:B6:B1:7C:B8:EA:91:E0:2D:41:2B:87:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7piVd7aoaG2sXy46pHgLUErhxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/91a770-828d-4e2b-bd81-61e512ba25b7/1/X7piVd7aoaG2sXy46pHgLUErhxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1b:44:ee:69:0a:79:ea:11:a8:ca:b9:ec:09:9d:21:90:13:
         11:e0:59:6d:cb:02:52:b6:fc:80:a6:4f:b9:8a:e3:a8:75:e3:
         c0:03:e9:a4:7f:70:71:27:ce:bc:45:70:96:95:f9:33:d9:c2:
         2d:8a:ed:1d:2a:7d:92:62:e5:be:3b:f0:df:17:fb:48:c4:b0:
         8d:4f:46:94:07:67:53:7d:93:49:f9:39:ee:67:49:4d:13:55:
         15:f3:24:35:85:14:b7:f6:6f:66:e5:6b:5a:71:1f:0c:da:cc:
         bf:5b:1b:f8:4c:bb:09:0e:ff:df:73:75:e2:55:41:66:a2:c0:
         1a:45:58:67:8a:d8:69:a3:96:06:75:11:25:48:0c:12:ab:17:
         9b:42:1d:c7:10:09:69:5f:86:c7:43:8f:ed:72:8b:f3:b8:f0:
         d7:71:07:df:c4:14:0c:0c:d4:b9:cb:9d:5d:79:fe:42:8e:91:
         e2:23:ae:f4:a9:82:c3:71:d5:be:15:7e:69:c4:d5:b7:54:5e:
         a1:ed:81:2b:e1:0e:eb:00:50:bb:34:ab:8a:51:fe:60:b3:cc:
         3e:4f:b6:df:25:6c:4b:66:db:6f:3f:91:1a:87:10:c6:7c:f9:
         6b:1d:3a:85:5d:df:af:2d:b2:02:79:3d:cc:28:e2:c9:12:51:
         8d:c3:4f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 20:50:30 2025 by rpki-client