Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
File:                     7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft (raw, json)
Hash identifier:          y+mqmZvzNsJsPVVenzGy8igTtPmVsgYKSAS6o7/lAVA=
Subject key identifier:   C1:78:CE:67:75:94:46:6B:6B:E3:3B:4C:44:F7:C9:4C:FE:D4:B7:09
Authority key identifier: EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F
Certificate issuer:       /CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
Certificate serial:       019A7293FB030EB600B077664F174B961EC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
Manifest number:          171D
Signing time:             Tue 11 Nov 2025 11:01:31 +0000
Manifest this update:     Tue 11 Nov 2025 11:01:31 +0000
Manifest next update:     Wed 12 Nov 2025 11:01:31 +0000
Files and hashes:         1: 7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl (hash: zgdyMaVSb/ihYDFd7umHju+GTp+Ql87ZJFZdrSPKlfo=)
                          2: 8MaVf5sp5CsTyAhAGLZcOfsaJXw.roa (hash: 1dw+M1Du1swLbJQllbUZmU++FExETkfzODZl6r8vVPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:93:fb:03:0e:b6:00:b0:77:66:4f:17:4b:96:1e:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eed755c51275ab2342d8f6fca5b56606ab9c3b4f
        Validity
            Not Before: Nov 11 11:01:31 2025 GMT
            Not After : Nov 12 11:01:31 2025 GMT
        Subject: CN=c178ce677594466b6be33b4c44f7c94cfed4b709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:72:0f:13:a1:31:26:45:44:33:84:21:09:
                    6b:fb:59:76:e7:5d:ef:00:88:af:53:3b:c5:04:a2:
                    e9:dc:4d:38:e8:17:4b:81:f4:f4:e0:d1:33:91:1f:
                    b7:96:e2:63:f8:e2:56:dc:89:52:94:1f:8f:d8:22:
                    68:21:9b:d7:f1:68:03:b7:08:eb:70:35:29:97:7a:
                    30:57:96:85:98:2e:bf:d8:ee:52:f1:04:0e:3d:ce:
                    47:c0:46:a8:5b:42:a9:5e:16:3a:9d:2d:ff:04:24:
                    ab:f6:75:d2:e8:18:62:cc:63:74:e0:36:6b:ad:b3:
                    51:d7:08:1b:c9:0e:f3:09:5f:77:e1:94:98:b1:79:
                    47:9d:9a:88:4e:df:40:96:2e:72:dd:d5:03:d9:d2:
                    fc:1e:21:df:27:2f:65:4c:5a:10:81:42:60:5e:ff:
                    f1:b8:d5:52:50:33:71:b3:53:e1:29:ca:2a:32:96:
                    de:0a:0e:88:35:6a:0f:10:56:71:1b:95:ec:c6:4d:
                    9e:2b:3b:9e:bf:a8:66:9d:14:94:49:bd:48:f7:18:
                    fb:99:f6:bd:86:95:2a:25:fb:aa:b2:24:d3:4f:ac:
                    36:c9:ac:63:66:a8:69:ba:01:5f:73:65:c1:74:c7:
                    48:5a:8a:9d:e0:fc:95:91:b9:8a:af:53:ba:c8:86:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:78:CE:67:75:94:46:6B:6B:E3:3B:4C:44:F7:C9:4C:FE:D4:B7:09
            X509v3 Authority Key Identifier:
                keyid:EE:D7:55:C5:12:75:AB:23:42:D8:F6:FC:A5:B5:66:06:AB:9C:3B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tdVxRJ1qyNC2Pb8pbVmBqucO08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/7tdVxRJ1qyNC2Pb8pbVmBqucO08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:0c:c2:70:71:a1:a6:1c:d1:ec:7d:e2:d9:53:ac:d7:a4:81:
         76:01:f7:15:8e:15:ac:95:29:85:13:64:13:2c:11:08:07:f0:
         e8:ea:14:cd:09:85:92:7a:47:74:7c:53:0e:56:78:6d:f6:74:
         a8:da:2a:9c:c5:e0:97:77:c2:fb:cc:3d:2b:28:6b:26:18:f6:
         f8:a7:a9:bd:69:a2:8c:3b:dc:ea:04:2b:69:01:f9:73:82:d8:
         d0:e9:5e:cb:27:1f:80:16:3c:a8:4a:e8:28:95:77:04:b0:ce:
         13:de:b3:02:de:4f:3c:21:4f:9e:90:22:dd:51:34:3b:8b:8a:
         66:d9:0d:a7:ca:04:4b:fd:82:b1:94:5f:01:84:31:ec:8e:cd:
         25:db:4f:17:92:24:cc:da:30:83:94:35:b5:f4:cb:bc:f9:17:
         29:89:cd:a3:3a:73:75:b0:8d:96:2c:67:fb:0e:bf:3b:6c:85:
         bb:93:aa:1a:1b:00:f4:78:cd:c5:9f:37:1f:66:36:60:27:02:
         26:62:9b:a3:c6:95:cc:5b:28:85:a7:2f:a4:4e:4d:a5:74:19:
         61:a4:a3:c2:82:e4:65:bf:15:8a:64:20:ad:20:83:8a:d6:ad:
         13:b7:dd:1d:d8:e4:66:0c:dd:0f:e2:80:89:35:3b:43:a7:27:
         3c:bc:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:47:51 2025 by rpki-client