
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File:                     k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier:          d9wTNgDXyTxLTbDM0lDjJTCd+Ic8F7KCRD5OtEUVizM=
Subject key identifier:   DD:70:E8:4A:35:E7:58:9A:26:3C:BD:D3:1A:E0:50:7B:21:B4:1B:C4
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer:       /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial:       019A4C980475DEE8E27F5913D4406A30C3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number:          172F
Signing time:             Tue 04 Nov 2025 02:00:22 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:22 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:22 +0000
Files and hashes:         1: EUR3tjFNTdAQ0PDdSrgVT7YlWf0.roa (hash: RNEi8VUaDrk0De742oO4ThiEi9sdWL6KnRT8EqeTr1E=)
                          2: U7MrjrMFOwWnR4h117sJMVUvits.roa (hash: htjbTluQYwPg60synTRHWeZ9MgvIenRnyRzzuYY2Zr4=)
                          3: dESzUpMviwtTKAbBmdcEnSrDmb8.roa (hash: t6YDlmbHdL/fLbmXo8sZDgLUB7U10S0kh8xDcseSIRM=)
                          4: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: a6d5MxEoCW/B7n+CenQsHk+NadJ7gbdY8OQy1CcMeAQ=)
                          5: qaGOw5tg7bMHtrf6lsqkfxEXJtY.roa (hash: x93uK5ZsmhOfQ67hVWjyRY1KnkWPXsujyHPBtnzn/n8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:04:75:de:e8:e2:7f:59:13:d4:40:6a:30:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
        Validity
            Not Before: Nov  4 02:00:22 2025 GMT
            Not After : Nov  5 02:00:22 2025 GMT
        Subject: CN=dd70e84a35e7589a263cbdd31ae0507b21b41bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:70:4f:52:1b:50:2b:45:da:ad:e6:64:4e:
                    53:22:93:a0:ac:fe:1c:4c:61:b2:27:b5:dc:4c:d3:
                    84:6d:db:4e:af:7c:87:d1:d1:8e:c0:d4:3c:60:54:
                    1c:64:86:e7:91:31:fc:7e:c2:04:ce:a5:3a:5b:37:
                    57:f9:3b:8a:c9:b2:d5:ad:6c:cc:53:f8:f6:6d:6d:
                    83:cb:1b:3f:20:c9:b9:d3:95:4f:f2:bf:f2:5e:71:
                    ea:7b:64:51:4a:38:aa:2d:4c:cc:82:fa:51:11:28:
                    2a:db:77:f5:7a:5e:8c:07:9b:c1:3c:6a:95:c4:6b:
                    69:3e:74:5c:6f:51:cf:97:95:2f:ae:8d:74:96:b4:
                    bb:89:fc:2e:e1:90:b9:73:c3:e4:b6:4e:54:8b:56:
                    ba:15:37:d8:e1:0e:e0:91:14:1c:73:70:02:36:4e:
                    2d:e6:46:01:1b:be:8b:1d:8a:db:37:c5:67:8a:b1:
                    79:b5:95:6c:8a:93:9c:72:aa:84:d9:22:20:bb:24:
                    8d:6e:d7:8b:fe:c9:5e:cc:23:04:e4:53:df:48:b6:
                    49:0a:d0:4e:df:17:de:f8:fd:18:8a:1a:36:d9:27:
                    67:36:92:09:8f:aa:34:2d:fe:9f:ef:1d:6e:93:2f:
                    b9:00:c8:ce:25:ad:1a:d0:fe:74:71:53:9a:8f:85:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:E8:4A:35:E7:58:9A:26:3C:BD:D3:1A:E0:50:7B:21:B4:1B:C4
            X509v3 Authority Key Identifier:
                keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         18:8b:fd:47:6f:21:dc:c7:34:59:c4:3c:d4:9a:da:a9:a3:91:
         d3:9d:05:3f:c2:3f:91:ba:9d:5d:ae:20:b9:43:a4:29:dc:31:
         27:86:21:17:62:33:ab:cc:71:9f:15:05:83:25:cb:67:c8:4d:
         52:00:2e:0e:be:1b:4e:11:4f:39:75:3e:fe:b4:e9:0d:cf:c4:
         44:9c:90:83:f7:69:29:8e:6c:68:1e:ee:a0:11:8c:f3:72:ab:
         0d:71:79:71:e1:08:93:69:2b:ad:53:e9:09:fd:9a:93:35:de:
         03:15:06:2b:56:e3:8a:1e:55:aa:95:ff:50:d2:43:4a:0d:fa:
         36:79:7e:a6:e4:5d:79:a6:b8:45:10:a5:43:00:5b:94:7e:1b:
         8d:b3:c7:7b:49:68:e7:d6:47:f7:ba:73:2d:ff:83:b6:19:aa:
         46:6c:99:82:17:bd:8e:05:97:e9:c3:24:88:a6:10:76:d7:7b:
         5a:6e:d7:eb:18:a6:8f:4a:dd:39:74:9f:93:f9:44:45:96:72:
         0d:c4:f6:f6:53:02:c3:ce:81:33:bc:ed:66:00:1a:97:44:26:
         10:87:99:97:ac:09:69:19:35:fa:cb:38:ec:73:30:eb:f7:5e:
         af:b9:51:1c:4a:ee:7f:36:e0:18:d4:1e:e3:aa:48:50:e6:77:
         4f:be:2a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 04:21:04 2025 by rpki-client