Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
File:                     7HRpxUKO75q3aNntbCyJRDprtL4.mft (raw, json)
Hash identifier:          icBN8mboio5ijSkxd+i0cWjHWa6SYuFoS5EC0CIahOM=
Subject key identifier:   D7:8F:1F:7C:97:2D:C2:5D:EA:F9:F6:F6:DA:3E:72:BA:22:6F:FF:94
Authority key identifier: EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE
Certificate issuer:       /CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
Certificate serial:       019A19862C648038D423E0567DF244588D4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
Manifest number:          0849
Signing time:             Sat 25 Oct 2025 04:00:14 +0000
Manifest this update:     Sat 25 Oct 2025 04:00:14 +0000
Manifest next update:     Sun 26 Oct 2025 04:00:14 +0000
Files and hashes:         1: 7HRpxUKO75q3aNntbCyJRDprtL4.crl (hash: r4YuREtu4jDUoM5S6uqcixHfeBdfZr8WOdd8CJSXMgA=)
                          2: IefeYi4YnGA5-Btgta25kSVWpXo.roa (hash: wXwoabDrm1OGUarx1OccGEgXSjlxtoxh6QKkXSRruII=)
                          3: KZqAxy5iqIMDtOLtEGoxGEy07RI.roa (hash: kbgYn28oaby5NUH4Ku4hnNvchyDC07zcNQ/v/n7K8DU=)
                          4: KzIn4K4LGUhk7ahqCpBF3dUn2js.roa (hash: sArPRbY2NbhQMJF8NLf9Nvh0HsgPmZBF4FQAbmtOpRo=)
                          5: YtnZu-c0kgMDTAChjtBERUQSanA.roa (hash: tYMylqMx0c2qfSfZBjQ3pAWcw3O1p68Md9BYMc3Adjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 02:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:19:86:2c:64:80:38:d4:23:e0:56:7d:f2:44:58:8d:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7469c5428eef9ab768d9ed6c2c89443a6bb4be
        Validity
            Not Before: Oct 25 04:00:14 2025 GMT
            Not After : Oct 26 04:00:14 2025 GMT
        Subject: CN=d78f1f7c972dc25deaf9f6f6da3e72ba226fff94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6f:7d:27:96:85:38:d6:e2:a1:b5:03:6f:1c:
                    e0:57:13:03:f7:7c:a1:cf:25:e5:1a:52:10:d6:19:
                    8c:2f:4e:87:4e:95:2b:65:38:1b:75:23:88:7e:4c:
                    98:d0:72:d1:28:50:66:d9:8e:3e:5a:59:01:a5:73:
                    e9:40:78:7a:4e:bc:c9:ca:67:03:c6:79:9f:b6:8e:
                    31:46:b2:01:70:8a:1d:6a:8d:d7:f0:c2:6f:fe:fc:
                    8d:ac:8c:0c:34:01:71:fe:e2:59:08:2e:ad:de:56:
                    9f:a2:02:c3:58:da:de:01:f1:db:4c:65:db:b8:aa:
                    7d:da:45:99:8b:41:f2:47:75:d5:17:d1:22:98:7b:
                    07:6e:0e:51:12:41:79:ec:2c:d3:64:6a:29:9a:56:
                    a2:6c:a7:c9:f7:b9:16:01:26:dd:e9:ff:88:90:bc:
                    e9:1c:f5:68:e4:89:8a:06:17:7c:a6:4f:8b:73:6f:
                    4f:a7:36:0f:09:f9:4f:f8:41:ee:13:77:94:52:4b:
                    bd:92:70:8d:92:f2:bc:65:1c:1b:c8:5c:7d:65:4a:
                    1e:63:61:58:e0:15:fb:a5:db:25:f3:00:61:d2:be:
                    cb:1a:4e:65:1b:96:7a:30:b9:28:a7:c2:7f:7a:4e:
                    60:6d:b4:06:2c:d7:23:a8:a1:9e:1d:f9:58:f0:0b:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8F:1F:7C:97:2D:C2:5D:EA:F9:F6:F6:DA:3E:72:BA:22:6F:FF:94
            X509v3 Authority Key Identifier:
                keyid:EC:74:69:C5:42:8E:EF:9A:B7:68:D9:ED:6C:2C:89:44:3A:6B:B4:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HRpxUKO75q3aNntbCyJRDprtL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6b544c-50e7-4f96-8c8d-8dee1da10741/1/7HRpxUKO75q3aNntbCyJRDprtL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4d:71:1d:8d:10:5d:e6:7a:8d:6d:e5:9a:35:a2:5b:20:14:
         bc:fc:63:cb:f7:15:0e:38:b7:ff:17:b3:a6:01:1b:17:37:e3:
         1d:7a:94:86:8f:a0:90:56:f2:f9:bf:37:33:a7:f8:7c:b4:b2:
         80:52:49:fd:02:ee:17:c8:3c:19:52:47:03:f5:e9:9a:41:f6:
         90:86:c9:76:af:b6:69:51:d7:14:13:95:29:ea:49:8e:94:5a:
         57:7b:b2:34:53:cb:11:38:e9:14:7c:1f:92:37:e4:cb:10:52:
         d6:9c:bc:8c:61:56:ae:5c:82:bd:c5:c5:aa:db:cb:56:7e:b6:
         80:29:7c:8d:e4:99:90:b3:83:09:2d:fb:ee:48:1b:02:fe:c6:
         a7:fd:31:7e:8d:2e:ea:28:4c:d6:ce:a9:fb:9d:8f:91:af:9e:
         a8:48:18:2d:f0:7c:b6:65:9b:f2:e3:b5:03:16:19:c9:56:bb:
         39:ca:40:60:a9:6a:98:80:18:34:6d:f5:9c:e3:f8:b3:31:d6:
         6a:32:55:3a:4a:ae:63:3e:ea:cf:b0:20:07:b9:d6:fc:b2:24:
         82:e7:ff:be:47:b2:8b:50:f2:7a:7a:2a:b2:32:c6:d5:8d:7d:
         b9:5a:9b:f1:fc:64:49:ee:b2:bb:cf:c5:d6:b4:c3:90:f7:6a:
         ec:dd:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:42:00 2025 by rpki-client