Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
File:                     Mx7T17pRHKYALYRbPAqoERo1Wc8.mft (raw, json)
Hash identifier:          w3Ef1dsqAQkHHdGdgcHBTaUUOY927ZFKHwMZnVb6Nrc=
Subject key identifier:   04:38:5A:2A:88:C4:7D:F8:ED:D9:1F:82:34:3B:10:31:ED:08:55:1B
Authority key identifier: 33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF
Certificate issuer:       /CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
Certificate serial:       01993802DAD6C30E2F96508048524543D242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
Manifest number:          11BB
Signing time:             Thu 11 Sep 2025 09:02:15 +0000
Manifest this update:     Thu 11 Sep 2025 09:02:15 +0000
Manifest next update:     Fri 12 Sep 2025 09:02:15 +0000
Files and hashes:         1: 7xzJYQfSecQlqzNk8l-W27jHcOI.roa (hash: ps+7bwhqh3PxptYGlo1NLgo3i2axXsvqt1tqey/ittM=)
                          2: Mx7T17pRHKYALYRbPAqoERo1Wc8.crl (hash: tDl45GHKCs1Xp8Tdrm4WkHaHIKLgdCSGG6GvyQl5byc=)
                          3: UPg3vbNeBa0K3r83hVpRQlJtNtA.roa (hash: rL5UsY5SPfEI1TxP4iOcbaWk1Mab4y1SRdaX4pFPAv4=)
                          4: xCVG5Eg07bQVQbLXGuCZVmkeEkE.roa (hash: 2faWVDdASFQnuZ0/R41bZ5L6lJZ4Mpj+/5ne9mCr0Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Sep 2025 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:38:02:da:d6:c3:0e:2f:96:50:80:48:52:45:43:d2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331ed3d7ba511ca6002d845b3c0aa8111a3559cf
        Validity
            Not Before: Sep 11 09:02:15 2025 GMT
            Not After : Sep 12 09:02:15 2025 GMT
        Subject: CN=04385a2a88c47df8edd91f82343b1031ed08551b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:8b:f1:8e:23:15:7c:9d:1d:9e:1c:da:01:
                    a8:90:8f:d6:ed:a0:ec:12:69:af:96:75:bb:c3:7b:
                    95:a2:88:05:64:4a:d3:2c:28:59:0c:72:97:0b:a7:
                    58:26:23:32:ab:c4:20:e2:50:03:22:1f:80:e3:2b:
                    33:4e:93:c8:bf:59:0f:7e:10:fb:2b:34:42:6f:9d:
                    0a:40:41:40:7a:d6:ff:07:71:0c:e9:cf:65:d0:b8:
                    cb:c3:89:5b:91:89:4d:ae:80:10:93:d6:75:20:b3:
                    41:08:0b:bc:0a:e7:06:c3:5c:de:20:c5:05:a3:26:
                    dd:1c:e5:cf:d9:f3:5a:e4:c2:e3:a5:df:87:84:ae:
                    b2:f1:74:a8:dc:40:55:16:87:80:dd:93:57:10:39:
                    1a:27:54:f1:43:7c:29:50:52:73:5c:b1:94:45:0b:
                    c1:51:37:c2:c2:5d:c4:a7:72:db:e2:2e:5a:1e:76:
                    dd:6d:b2:8e:2e:4a:be:d1:1c:d1:e4:3e:e7:f6:36:
                    bd:b2:b8:cc:11:d2:e6:32:6b:b8:01:33:b6:7b:f1:
                    10:38:09:d5:65:ee:6d:d4:bc:c6:8d:5c:d1:19:18:
                    f7:3d:57:98:06:4b:9f:e0:07:55:fc:86:7f:17:bc:
                    65:02:56:35:c4:47:0e:fa:a2:a3:b4:c4:a9:4b:1d:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:38:5A:2A:88:C4:7D:F8:ED:D9:1F:82:34:3B:10:31:ED:08:55:1B
            X509v3 Authority Key Identifier:
                keyid:33:1E:D3:D7:BA:51:1C:A6:00:2D:84:5B:3C:0A:A8:11:1A:35:59:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx7T17pRHKYALYRbPAqoERo1Wc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/feaa1b-b7c1-4b48-9594-baf24dd5839f/1/Mx7T17pRHKYALYRbPAqoERo1Wc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:c6:9d:21:84:54:0b:0e:59:53:28:4b:12:1d:3f:3e:6f:
         6e:14:b2:55:32:9d:08:9f:3e:74:cf:01:4d:0a:9d:cf:47:64:
         ce:51:2c:c1:f5:71:1e:b3:9c:3b:a8:ce:31:37:09:a8:f3:2c:
         e4:b0:52:3a:bb:f2:24:53:e1:48:ca:dc:ba:fd:af:ce:5c:7d:
         a5:fc:6c:04:7b:fe:7e:50:5b:7b:dc:a2:c7:00:11:f8:f6:de:
         1f:4d:bb:59:d7:90:83:9a:f9:72:27:d2:e1:74:5e:e3:1c:88:
         8a:06:41:40:16:34:1b:dd:97:b4:51:4d:14:87:c8:68:6c:68:
         6e:5a:14:d7:88:27:63:14:f4:0b:69:66:da:6a:d4:8b:88:d2:
         c3:32:b8:e5:bd:ff:0e:74:52:84:6b:39:40:e0:18:b4:53:c0:
         e0:0d:23:33:81:09:c7:d4:df:de:81:b9:e3:a3:12:78:b0:02:
         7a:0a:05:af:89:2d:fc:fd:bb:eb:13:c2:14:13:f2:ae:33:0b:
         e1:5b:aa:de:36:fd:6b:27:53:5b:50:7e:52:12:a3:6d:14:95:
         4e:e4:28:6c:2e:e3:cd:ff:c1:af:ca:c3:b5:e5:26:84:d6:da:
         42:91:8e:89:82:eb:cd:2d:4a:01:38:0c:53:9a:1e:24:f3:d1:
         1b:a1:04:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:35:10 2025 by rpki-client