Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          OIsVfCQoi3RPqVsg7JRWscHN/LOoZ+3nJa1GOo4Csk8=
Subject key identifier:   7A:DB:DD:66:23:A3:55:AC:BB:D8:0A:37:73:90:0C:48:74:E3:7F:8B
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       019A71B81FB2EBB50302D7161BDDEF0DDD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          170C
Signing time:             Tue 11 Nov 2025 07:01:23 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:23 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:23 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: vPDLOp2WMdtcPa7CbWnFR0gQjWJDVnyFPqWJxMUA3vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:1f:b2:eb:b5:03:02:d7:16:1b:dd:ef:0d:dd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Nov 11 07:01:23 2025 GMT
            Not After : Nov 12 07:01:23 2025 GMT
        Subject: CN=7adbdd6623a355acbbd80a3773900c4874e37f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fa:98:cd:c8:78:81:ff:c1:b5:45:8f:ca:5f:
                    97:16:1f:1f:0a:f7:32:cb:d3:e2:3a:41:04:80:36:
                    bc:f2:5d:78:30:52:ff:8e:1c:25:1c:bb:e4:8b:e7:
                    ec:cc:08:aa:05:ec:4e:4c:6c:22:2d:5a:f6:7b:5c:
                    13:c6:b1:f1:31:8d:a2:3d:9d:12:41:af:8f:16:c4:
                    b0:c2:8c:a1:c6:dc:ba:1b:c8:f7:a7:b3:4f:83:1e:
                    63:ca:a3:12:bd:b2:ff:92:53:d2:52:a9:80:30:5a:
                    a6:c6:d6:10:c4:a0:e8:db:dc:ec:52:1e:9f:6f:96:
                    9d:b6:c8:48:8e:72:a6:a9:2c:ff:b9:4c:a5:8d:99:
                    fb:5a:8c:ab:82:17:99:01:36:6e:d8:97:cd:32:c4:
                    6b:6e:a8:42:bb:f7:38:5b:86:67:e6:13:ef:bb:2a:
                    a9:82:40:42:73:9f:03:13:a1:15:4b:bc:09:8a:a1:
                    79:0c:d3:60:60:ea:3a:bc:a4:84:af:6d:94:5b:03:
                    0c:2b:b6:0c:d9:df:84:ad:bb:9a:83:ff:fc:41:49:
                    f0:17:a5:b1:a2:22:b2:a0:4e:da:f9:00:5b:14:44:
                    fb:69:76:f6:98:a5:22:37:fe:e1:f4:6b:ca:8c:b6:
                    74:67:ef:43:62:30:f2:8b:03:95:2e:6d:c0:20:e7:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DB:DD:66:23:A3:55:AC:BB:D8:0A:37:73:90:0C:48:74:E3:7F:8B
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d9:35:49:cc:0a:4a:fd:7a:a6:06:b6:c5:c0:93:90:1d:65:
         cf:4e:0e:4d:24:02:e2:36:82:fe:ee:1d:ca:a0:66:e8:a0:77:
         6e:77:82:0a:12:e3:26:2b:2c:17:4b:41:b0:d7:d2:a3:86:3f:
         e7:7a:2f:37:74:25:fc:71:82:3d:e7:83:9b:88:bc:00:14:8d:
         2c:b4:c0:12:c4:3c:ac:2d:1e:0c:c3:f0:90:9e:58:8c:ea:ee:
         c3:2d:77:c8:e6:28:f9:e8:be:5a:88:f5:06:2f:0d:5b:b9:03:
         3f:37:1d:eb:53:a9:df:29:4b:78:82:c8:e8:30:bd:9c:91:6c:
         a4:06:3c:b0:52:8c:a5:b7:b6:7e:98:3e:0b:36:85:6b:d3:59:
         87:7b:fb:32:c0:f6:24:ba:47:58:67:92:ed:d1:0c:70:5d:27:
         f2:2e:f6:af:37:99:a5:9d:22:7a:db:17:0e:1d:65:7c:11:ad:
         bf:73:d0:06:42:d8:0a:c6:4f:62:de:26:0e:33:9d:0f:1b:87:
         f5:7b:19:b3:2a:5b:fc:18:85:0c:97:4d:bf:0b:95:97:bb:0d:
         96:85:a7:57:15:59:77:d5:8c:d4:3d:3f:b0:6f:4a:fb:18:88:
         ac:fd:2b:b7:3b:1d:c2:5b:bd:64:22:a6:d9:b7:4d:c6:79:52:
         4e:b3:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:29 2025 by rpki-client