Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
File:                     4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json)
Hash identifier:          T9UiDK/sY+S+BDh/gNv8tJBJp7t4eOC4w1sTWhCnp2M=
Subject key identifier:   45:A8:36:A5:E6:8A:8D:A9:92:32:D6:8D:33:B3:A6:29:FE:B4:30:2C
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Certificate issuer:       /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial:       019A7301CB308F29E1CF199CEF00A0EE6BB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
Manifest number:          B7
Signing time:             Tue 11 Nov 2025 13:01:28 +0000
Manifest this update:     Tue 11 Nov 2025 13:01:28 +0000
Manifest next update:     Wed 12 Nov 2025 13:01:28 +0000
Files and hashes:         1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: Bf5YFZrkm+JZlfmVVidX7HLZ+Khhs7AlbE5dhSQ7aow=)
                          2: 73mAifFbbkq89y_6L8I3tNV-FFU.roa (hash: NX+SZCE/iRZZ/qn+fphnC6ahtdeAZSBcTHMFH46HmuE=)
                          3: x-ZoxCE3dUHDoEInx3KHfEs04No.roa (hash: PP3ssbmv8MfAGIHN4N1jOdg4vgiSdSRg+O85vMICYao=)
                          4: xjXrY-VAjEXl4AAAJVLLeMGfATA.roa (hash: 4ceK2GE5dyzV4qQFHetdVESaIRknf36gz2mazUprQdk=)
                          5: ylzVDNqLg-U7e19yN1XUnVv4-mM.roa (hash: xAtySOG4/LBLHBr0GZndFnBbQp0zDTEtHkUbGSqzQLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:cb:30:8f:29:e1:cf:19:9c:ef:00:a0:ee:6b:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
        Validity
            Not Before: Nov 11 13:01:28 2025 GMT
            Not After : Nov 12 13:01:28 2025 GMT
        Subject: CN=45a836a5e68a8da99232d68d33b3a629feb4302c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:01:47:48:52:f0:15:ee:0b:62:ab:31:22:
                    81:43:72:44:12:2a:21:3f:3c:6a:d0:8c:c9:5b:49:
                    e6:95:d8:59:1d:e3:53:8e:75:74:f8:10:6f:87:97:
                    67:6d:04:80:aa:5b:6f:a2:a8:c1:5c:f0:05:8a:a3:
                    4f:e1:4c:c9:28:0f:4e:4f:25:50:b5:24:94:53:f2:
                    03:f3:09:da:32:2a:4b:82:6f:52:b7:3f:36:a5:3c:
                    91:e6:7b:b3:c0:23:72:62:20:49:4a:58:54:2d:55:
                    de:ba:65:ed:1d:86:6a:4f:f3:74:76:9c:d7:9a:2f:
                    7e:3e:36:93:a6:6a:ff:e9:82:c2:96:f2:8a:08:5d:
                    39:86:4c:f9:1d:8c:d4:d6:1c:e4:cf:13:9f:72:9d:
                    ee:19:8e:8d:5f:fd:b3:a5:7b:97:87:45:79:f8:ba:
                    7d:bf:13:3b:80:2a:0d:65:71:78:f8:ab:98:e1:6b:
                    57:6e:51:9a:a2:90:95:2d:77:3b:45:2a:72:ea:2d:
                    90:5d:aa:47:c4:b7:14:43:5e:64:67:0d:b5:68:ce:
                    68:6d:48:c0:e7:da:fd:d8:f6:cb:ca:97:8c:ab:3a:
                    bb:a4:d2:1e:b6:25:e4:38:9d:02:4f:18:ca:b2:ce:
                    1a:fa:f9:46:f6:b4:22:25:17:b8:ed:a8:04:e7:f5:
                    a2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A8:36:A5:E6:8A:8D:A9:92:32:D6:8D:33:B3:A6:29:FE:B4:30:2C
            X509v3 Authority Key Identifier:
                keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:56:22:a0:48:86:ae:d5:30:4e:66:92:ea:a2:c0:ef:51:0f:
         0a:b6:22:b1:15:b0:6b:e6:a7:85:5a:72:4e:11:06:e6:5d:15:
         36:3e:52:ad:5c:e8:f7:e7:0e:b1:e2:66:82:93:f6:04:4d:e8:
         fd:36:79:99:2c:96:a5:dc:55:b3:b8:88:9d:eb:82:34:2e:02:
         1d:51:f9:45:2e:9d:eb:46:b0:ef:d8:94:94:de:81:e0:0f:c6:
         3f:e2:2e:9a:ae:cd:3e:7b:41:e9:93:1f:fe:55:a3:4c:e5:f0:
         3f:49:ca:59:5c:29:f0:ff:06:9c:b1:db:27:64:b4:0f:81:4a:
         98:95:59:00:43:b4:21:85:8a:7e:14:77:84:fa:37:83:6b:a0:
         30:70:67:b8:43:e8:bb:dc:8f:c8:f8:60:3d:e6:08:53:79:35:
         19:a3:61:a5:26:7b:08:5c:c5:dc:5b:1b:35:b6:89:ac:ed:f3:
         90:9d:0e:d1:eb:4f:69:12:56:68:c0:9c:69:fc:80:4d:67:af:
         04:95:b0:f4:84:05:7f:58:30:bb:17:17:8d:ad:c4:15:de:f8:
         0b:bc:36:a3:d3:fd:e3:b4:2c:d8:0e:02:67:36:dc:d9:da:13:
         4f:d1:3c:5a:03:0f:eb:44:1a:14:97:06:d4:d9:09:93:ca:67:
         5c:f2:6d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:52 2025 by rpki-client