Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File:                     R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier:          NXzNMQYE8+I9Tn1IP5KbcaPYzmmULIbO88uM3iXwOVA=
Subject key identifier:   FB:8C:2C:80:8F:D5:09:D9:4B:E9:1C:FC:1C:C5:29:FF:5E:0E:DE:89
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer:       /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial:       019A232E35B06246590189D7AFBE97B74A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number:          0D86
Signing time:             Mon 27 Oct 2025 01:00:22 +0000
Manifest this update:     Mon 27 Oct 2025 01:00:22 +0000
Manifest next update:     Tue 28 Oct 2025 01:00:22 +0000
Files and hashes:         1: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: DFnZw8/DZC6o08vcMA5pf1Z0gBnHToMKAaHCsjq2hNQ=)
                          2: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (hash: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:2e:35:b0:62:46:59:01:89:d7:af:be:97:b7:4a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
        Validity
            Not Before: Oct 27 01:00:22 2025 GMT
            Not After : Oct 28 01:00:22 2025 GMT
        Subject: CN=fb8c2c808fd509d94be91cfc1cc529ff5e0ede89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:91:93:10:74:0f:d7:57:20:40:df:f7:a6:64:
                    c7:3e:01:7e:ba:5b:43:9a:4b:77:33:6b:89:a4:84:
                    fd:c3:fa:d0:30:0b:c5:82:87:9f:ae:98:d4:01:a5:
                    fd:77:de:b5:06:9c:ad:5a:de:64:09:7b:c9:12:a1:
                    9d:bf:03:c9:29:14:9e:24:68:3a:b1:15:08:b7:c6:
                    bc:98:b2:3c:66:8c:22:71:fe:b5:86:a3:e8:a3:15:
                    9e:7c:a9:e4:1b:cb:e8:99:a9:a1:84:ca:33:bb:2a:
                    a0:f3:c9:d8:08:e7:2b:e7:fb:5f:03:b3:be:38:fc:
                    07:33:4f:2a:ca:bf:d7:7c:af:3f:29:c5:e9:ec:41:
                    6b:63:f1:3a:1a:8f:51:b3:62:be:48:96:ce:ff:ba:
                    0f:f9:ea:0c:e6:7a:cb:6e:a4:58:80:0a:0b:cc:d7:
                    70:63:4b:07:43:97:f3:fe:9c:62:57:1a:bf:e4:0d:
                    3e:f5:26:6d:6d:67:40:24:f1:d5:f0:77:7f:ff:14:
                    01:e9:19:6c:af:dd:d7:ba:f4:44:b0:d2:25:d1:07:
                    e0:a8:04:e9:75:d0:94:f9:c3:b8:97:08:66:bf:e4:
                    39:7d:3f:c3:2d:d8:76:22:15:0d:32:3b:7a:d8:a3:
                    c9:b7:a4:bd:36:04:30:1a:10:79:ba:83:23:58:0b:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8C:2C:80:8F:D5:09:D9:4B:E9:1C:FC:1C:C5:29:FF:5E:0E:DE:89
            X509v3 Authority Key Identifier:
                keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:11:aa:20:41:21:ac:61:b6:c3:ae:02:1a:09:6e:c9:8d:41:
         47:a6:cd:ac:22:06:96:86:e7:69:3b:26:57:44:1e:d4:43:32:
         f4:a2:4e:ab:a0:b6:3a:d5:2d:75:bf:b9:d1:bc:9d:35:a7:ec:
         20:0f:34:e0:ce:a8:bf:c2:84:9d:02:42:b0:e4:36:8f:9d:7a:
         02:87:4b:a4:a8:14:b2:11:19:da:ce:6b:78:cc:7a:b0:70:42:
         66:85:23:30:af:84:a9:35:8e:6d:c8:e7:d4:18:b7:9f:ff:26:
         1f:f0:da:55:44:13:86:10:f5:7e:f2:37:56:c1:e4:94:b7:04:
         75:05:34:b1:65:ad:92:1d:14:33:f4:43:51:12:ea:a4:0d:c0:
         96:4a:2d:08:93:25:76:0e:76:96:28:4d:cd:0f:3a:2b:2c:7d:
         c0:e8:8e:1b:f1:f3:96:10:7a:5a:b9:16:37:cc:7d:04:75:c1:
         15:4a:f3:59:3a:10:ec:bf:8f:bf:c0:b3:11:3d:3d:df:93:56:
         3d:dd:d8:a9:21:d0:65:2b:61:85:83:33:c7:a8:45:11:11:6a:
         9f:d8:e3:e6:7e:54:66:fa:09:3b:7d:8f:8d:b4:23:71:b2:ce:
         a3:76:3e:f0:d3:a8:6e:6c:11:32:ef:cc:63:93:6d:7f:01:98:
         e4:98:0f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:09 2025 by rpki-client