Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          r32bDoQf7/31pgjnbLF9hnQoeHB6Bo/Kc7J+VQxLo0c=
Subject key identifier:   03:69:35:E7:11:E2:96:52:4D:5A:DA:C3:E8:0E:5E:81:FB:F1:B8:A4
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019A2365088751669D97D2CA786B8C58954D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          16F7
Signing time:             Mon 27 Oct 2025 02:00:14 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:14 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:14 +0000
Files and hashes:         1: 1R6LxgC-MSsXC8XcNc55PUWrpnA.roa (hash: eOlgUjGh2Sx9zQdK2p1WKLcAGtB58ts+W3RrmuzkDow=)
                          2: 2-psKgjkSNUOWnZFMoAD6l3epRU.roa (hash: gFGUN3be0G1hR2YAWLqKrs2cwQ3z+R+vgxUYB8SwE90=)
                          3: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: 4gXrT0PGv9gBHiEKZmM6A3PP1MXcagT3LfUKvcDkwVI=)
                          4: gQebbEYT275J4Jd89tHKU2ac4sM.roa (hash: iKbGbenCLGdunx9L03flN4696vAcgVbczlqjT2YbIiI=)
                          5: otJ7nfoJ-zl16yzl1V2lDFiM0HA.roa (hash: ci4b1eT86BcKQNNV0LV6W2PZ/InXXcZnfo32SMed2tQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:08:87:51:66:9d:97:d2:ca:78:6b:8c:58:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Oct 27 02:00:14 2025 GMT
            Not After : Oct 28 02:00:14 2025 GMT
        Subject: CN=036935e711e296524d5adac3e80e5e81fbf1b8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5b:fe:9e:63:6c:50:1a:a7:1e:74:ac:a2:d0:
                    1b:e0:4c:8a:76:32:62:31:af:14:49:dd:69:78:eb:
                    cd:47:1c:05:f3:81:17:da:82:48:c4:4f:4b:7a:ca:
                    6f:ac:e3:88:fa:d4:28:fb:3c:a9:0d:88:18:03:f8:
                    7d:02:17:b6:bb:b5:ac:c3:43:11:28:48:02:cf:c8:
                    7a:38:09:1b:55:5c:6d:67:8a:5c:6c:12:69:21:1c:
                    66:ea:2d:a9:44:91:c0:9b:87:3f:2d:bb:b9:bc:ff:
                    6b:97:d2:87:43:27:de:f7:36:0c:b5:7a:61:ba:df:
                    1b:53:de:c5:cd:4f:d1:50:43:98:32:c1:e7:59:53:
                    bb:fd:21:4a:a6:79:65:86:25:cb:9f:98:dd:3b:98:
                    71:e4:1d:75:ed:39:cd:93:8b:ff:b6:ca:4e:15:83:
                    b4:07:23:fd:26:f9:bf:6e:98:c2:d1:9a:61:81:e3:
                    45:0d:a3:63:2d:a5:b5:07:da:f8:7e:8e:45:88:71:
                    55:42:26:18:a6:74:f4:aa:88:5b:77:4a:32:46:09:
                    99:14:02:7b:14:c2:3b:2a:4a:5c:2d:3d:a3:4b:2f:
                    4b:0a:7a:8d:ad:d6:16:81:ce:47:41:b4:48:55:53:
                    04:a4:6c:df:89:fa:2f:18:36:15:15:6d:69:65:71:
                    6c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:69:35:E7:11:E2:96:52:4D:5A:DA:C3:E8:0E:5E:81:FB:F1:B8:A4
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:47:4a:f7:b4:82:1b:b3:29:2a:80:bd:c5:09:74:ae:6c:
         53:1b:d3:9b:ae:8c:90:51:fd:a3:43:83:41:ff:d6:5b:f8:cf:
         f1:b1:95:e7:3d:5b:16:43:78:e0:04:c6:32:c9:5b:12:96:98:
         6a:7d:1e:0d:b0:01:89:4a:eb:34:4f:ce:2f:15:76:b6:12:5d:
         39:c1:59:8c:c9:41:d1:8b:08:f0:57:45:fa:11:34:81:e4:b8:
         21:e6:ee:ed:ec:99:8b:15:a3:74:41:15:68:90:0a:78:db:8e:
         ab:6f:0c:7c:c9:b9:2c:09:7f:06:56:e5:7c:06:62:f2:eb:bb:
         69:97:96:4b:a0:df:28:d1:1e:55:60:1a:d2:99:41:d5:e6:2b:
         06:78:7f:87:66:4b:73:08:8f:0f:fc:2a:1c:a6:ac:f0:33:77:
         3e:53:80:05:b2:8c:58:ce:b8:84:22:a3:77:97:53:73:1b:3f:
         39:90:93:41:c9:eb:64:38:ec:7b:7a:c8:63:d8:19:bc:6c:db:
         ed:0b:ea:62:58:cc:d5:32:58:cc:93:8f:5b:68:24:77:ed:13:
         b7:41:cb:51:52:ad:dc:50:90:a0:16:df:69:96:ff:78:91:c2:
         9f:55:d8:72:f7:dd:ef:8d:08:b6:e9:3b:8c:cb:b0:ec:fe:8f:
         c0:bf:0b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:29 2025 by rpki-client