Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          jCWhStHnXkHZAe8qEY30xTu6KNeET4333/cdA1Um4WA=
Subject key identifier:   B7:CE:6B:50:A6:4E:AE:ED:34:6F:D7:91:76:93:8A:40:27:6F:57:61
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019A21AE1BCBFBBF2F28258A6DA05FFEDD49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          1705
Signing time:             Sun 26 Oct 2025 18:00:49 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:49 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:49 +0000
Files and hashes:         1: e-zqoP0nWdm02Bk16jrVb4CC90g.roa (hash: pTRQmXW0bB5un3EpnoOxHqaBcDgz2x7X9RkzGbB+gaE=)
                          2: fyxM_h2WX6rYIy5hg25YZB5O2CM.roa (hash: 9Ti3G/owzw7kR0D0MPQYXnuvUJArE0MI+SK12KJz4Yg=)
                          3: kfp0pk6rT7KzEgPpeNsP3WrJZ6E.roa (hash: ou9w6LX17ZfBGKa+aA56CHgkOdgzWRAn9XUt36rvoyw=)
                          4: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: pcvqLHCA7FcnDIpBHx/NaRXhAbmhACBW1EkRxsDrOWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ae:1b:cb:fb:bf:2f:28:25:8a:6d:a0:5f:fe:dd:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Oct 26 18:00:49 2025 GMT
            Not After : Oct 27 18:00:49 2025 GMT
        Subject: CN=b7ce6b50a64eaeed346fd79176938a40276f5761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:04:51:24:20:6e:6e:fc:c7:72:b4:6a:fc:9a:
                    d6:f9:44:d0:84:78:5a:75:8d:c8:e1:3a:7f:c9:dd:
                    90:a9:5b:a7:e2:dc:a2:76:0c:4e:22:61:d8:53:87:
                    11:4b:2c:e5:cb:15:a7:b7:d6:4d:db:45:f7:3a:6f:
                    e6:f1:d8:7d:29:21:6b:e5:5e:06:2a:2f:5c:92:2d:
                    68:41:a1:7b:70:74:b9:58:53:2d:bd:1e:1b:bf:d6:
                    f3:19:92:a0:54:03:a7:c9:a3:81:3c:28:5c:35:59:
                    5e:d5:df:73:24:c7:23:bd:ee:ca:d0:35:83:99:25:
                    d1:9c:4c:ad:4a:17:82:db:27:6f:79:1b:01:8c:e0:
                    1c:37:3d:f9:7d:5a:02:32:00:2a:21:17:53:19:0c:
                    66:b6:4a:db:3b:11:29:b9:8f:a5:01:3d:e4:e1:9f:
                    a6:f8:b4:1e:ce:89:42:ef:5c:a2:ab:69:63:e5:50:
                    8d:96:85:24:68:36:48:cc:6f:8d:3d:84:b9:54:83:
                    50:e7:60:94:34:0e:b0:9d:47:75:7b:bb:8c:41:9f:
                    c9:8e:64:f2:60:0c:bf:4f:11:fe:71:db:95:9b:3e:
                    11:20:6d:4d:1b:9f:90:35:8b:11:92:19:ae:af:75:
                    6b:1b:e2:05:8c:ad:db:69:27:dc:50:09:41:e9:1a:
                    75:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CE:6B:50:A6:4E:AE:ED:34:6F:D7:91:76:93:8A:40:27:6F:57:61
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:62:a4:79:87:f3:ba:d2:14:d2:ae:d2:dd:3d:47:5f:47:92:
         3c:ea:91:72:20:64:f7:6c:f6:50:a7:55:a7:0c:32:ad:86:aa:
         4d:6e:f6:d2:6e:e1:a0:1d:52:26:4c:45:14:aa:c2:6f:57:48:
         a8:06:60:82:89:4c:d2:a0:ed:f0:5a:b4:48:6a:91:06:3a:d2:
         07:8b:22:77:b9:2f:24:69:6c:09:6d:ad:76:7c:04:6d:e7:3e:
         e4:78:74:ac:02:6b:e3:56:55:76:1a:87:0d:0e:f0:68:f9:bc:
         86:40:b2:5f:5b:42:f2:c1:88:68:a4:38:db:ee:bd:0a:8c:61:
         c4:0e:c6:66:0b:b1:3a:f4:ee:9b:2e:e8:8b:e6:15:12:ed:8a:
         41:34:a4:54:99:36:16:b6:3d:db:a5:b8:17:02:16:21:05:db:
         1f:30:cd:c4:a7:6e:ad:f5:80:1f:8f:bd:19:d1:35:9d:4d:be:
         31:50:45:55:4f:43:36:d9:c6:e2:45:96:6c:49:d4:ae:a5:57:
         67:3c:ef:83:3e:23:e4:7a:8d:dc:2b:fe:31:00:b1:e0:1b:dc:
         c6:0d:8e:10:f4:27:97:be:cc:9f:30:e9:60:e8:60:94:81:20:
         8e:5d:08:54:e4:4b:da:e5:91:37:09:bc:83:2b:d0:32:68:39:
         7f:6c:51:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:28:41 2025 by rpki-client