Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          6bKM8OwGm1g7x4bC/qRwJhenGa+w/xzKq5yD1XkUWS4=
Subject key identifier:   6A:91:EB:BF:AF:B6:1C:0D:CD:5A:FE:48:C0:78:85:55:F0:CD:3B:25
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       019A1B06B76C50D243F3ADC2F88561E20593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          0D7E
Signing time:             Sat 25 Oct 2025 11:00:16 +0000
Manifest this update:     Sat 25 Oct 2025 11:00:16 +0000
Manifest next update:     Sun 26 Oct 2025 11:00:16 +0000
Files and hashes:         1: 0eGkt49N_vn59pWMEQQOkQaM580.roa (hash: uauCuvRP4436BT1gI3Nyw0cdRL2ieHZ9YfaNo5sIdPA=)
                          2: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: ynz3bPeGPSx6hdkEtIqLEuCsnLRIKMuzLv1sfInyWGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 11:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1b:06:b7:6c:50:d2:43:f3:ad:c2:f8:85:61:e2:05:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Oct 25 11:00:16 2025 GMT
            Not After : Oct 26 11:00:16 2025 GMT
        Subject: CN=6a91ebbfafb61c0dcd5afe48c0788555f0cd3b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:65:48:90:91:5f:8c:93:e4:d9:3d:f0:3d:
                    d0:34:de:a6:fa:8c:e1:eb:eb:db:b9:d1:28:bd:87:
                    5e:80:3f:6f:12:27:6a:13:49:20:00:39:fe:7e:31:
                    7b:68:08:fa:47:c7:bb:d8:2d:9d:a4:52:b6:83:87:
                    86:08:e3:2f:75:9c:18:a8:cf:04:2b:2c:ff:50:2c:
                    6c:19:00:5e:45:26:63:ca:e1:34:d8:55:83:4d:ee:
                    d8:0c:ac:f5:4f:fc:64:9f:65:11:36:69:40:80:21:
                    87:e9:70:aa:ed:eb:0a:d4:4e:da:da:61:cb:25:e8:
                    d0:af:5f:93:2a:d3:17:1c:45:f2:9a:c6:6a:8f:13:
                    d4:5e:ad:0a:2c:ea:fb:af:ee:c3:ab:61:a2:aa:7d:
                    34:08:30:26:71:35:3c:4f:f7:78:29:87:7a:a6:fc:
                    3a:f1:80:ef:74:67:a9:b9:09:36:8f:e7:62:fb:be:
                    5f:38:cf:d4:a1:58:db:02:81:d0:ba:64:a4:44:03:
                    98:03:3a:69:6d:04:27:19:75:e4:bb:5e:87:31:26:
                    e0:78:74:61:8f:ff:f7:3d:9f:c9:b2:1b:dc:14:2f:
                    74:50:f3:44:1b:f2:5a:06:4b:bd:70:69:01:95:95:
                    e0:3d:b0:ac:c3:c6:ca:a1:4d:06:de:50:cf:21:18:
                    6f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:EB:BF:AF:B6:1C:0D:CD:5A:FE:48:C0:78:85:55:F0:CD:3B:25
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:a2:97:77:0f:1d:5f:98:22:75:a8:41:6c:c6:ed:ed:4e:
         1e:8a:95:9a:6f:f5:98:43:c5:30:82:a9:6c:c2:81:d8:86:f1:
         6e:9e:5d:88:11:93:97:ec:4e:99:ec:9b:36:91:f9:83:e9:7d:
         72:a3:13:9f:6d:fe:e2:1f:57:d5:10:2f:ae:ea:6b:d2:c5:38:
         bf:eb:16:42:c0:2a:69:44:c0:df:4f:2d:ef:7f:3b:b0:b6:ba:
         87:25:df:8c:fb:f9:a5:97:96:00:63:05:87:a6:69:b8:15:58:
         ae:ff:fa:26:47:38:de:9c:fa:d3:6a:89:0a:2a:b5:45:ab:c2:
         c6:f6:c8:74:2a:ef:f5:dd:00:f1:d6:23:86:e4:30:77:01:06:
         b3:03:d0:02:4a:5f:bb:b8:f4:cc:bc:58:d0:be:ea:da:98:2f:
         1c:73:a6:25:18:0c:ae:4b:0a:3e:62:5e:3c:91:61:fd:db:31:
         f7:39:87:1f:09:3f:97:be:a0:02:95:22:59:d6:bc:31:52:36:
         8f:98:94:fa:18:4d:71:04:55:7c:d5:f7:dd:11:8a:8e:81:80:
         8c:3a:45:af:9f:2a:d4:64:b2:df:d7:72:9d:ae:f7:cf:43:5e:
         43:36:64:5d:3d:38:03:79:4c:82:1e:cf:0c:ea:f0:1a:98:3c:
         d8:69:06:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:03:12 2025 by rpki-client