Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
File:                     c7gWQOG2T1HSun149nd8BW0RVL8.mft (raw, json)
Hash identifier:          9FsIrCZVjuysfSVx621gOibV7+rSRxvuVYlvFWQuThE=
Subject key identifier:   84:3D:E8:EE:7D:E9:58:25:02:28:6C:20:1A:22:F5:03:07:52:96:10
Authority key identifier: 73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF
Certificate issuer:       /CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
Certificate serial:       019A22F7C17F6D6459447598C93BA233FC2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
Manifest number:          16F6
Signing time:             Mon 27 Oct 2025 00:00:53 +0000
Manifest this update:     Mon 27 Oct 2025 00:00:53 +0000
Manifest next update:     Tue 28 Oct 2025 00:00:53 +0000
Files and hashes:         1: 3rVvEb5TD5sUIiR8g28gQB62SZ4.roa (hash: I97/quPKUPqVv98vrZrzthe6vPPP5kOtjCTGVwTGxJg=)
                          2: c7gWQOG2T1HSun149nd8BW0RVL8.crl (hash: 4HMOy5VUl4rSdy8yCzo8XPvZ2B1P/k4UKRHdAQpP9cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:f7:c1:7f:6d:64:59:44:75:98:c9:3b:a2:33:fc:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73b81640e1b64f51d2ba7d78f6777c056d1154bf
        Validity
            Not Before: Oct 27 00:00:53 2025 GMT
            Not After : Oct 28 00:00:53 2025 GMT
        Subject: CN=843de8ee7de9582502286c201a22f50307529610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:2a:63:1b:55:01:6e:04:bf:c2:37:6b:16:
                    96:a3:97:0c:e3:dd:3d:aa:03:f7:c1:bc:52:8f:a7:
                    e2:69:54:07:f6:5d:85:4d:6f:51:24:e1:e7:40:88:
                    4c:6a:fd:db:e7:e8:1f:dc:10:60:c6:8c:57:a0:b1:
                    39:ec:de:f6:e8:74:a1:9c:bf:07:c6:63:ad:ba:a7:
                    f7:fc:22:07:29:20:e6:a6:5a:97:ba:1e:a9:b4:cf:
                    03:e2:d6:df:20:2e:ae:6b:bb:a6:55:8d:8d:d2:ee:
                    53:45:69:af:ac:80:73:3e:e7:7d:65:92:ab:95:0f:
                    4f:40:d6:4e:f0:63:0f:a3:97:06:15:ac:fa:31:46:
                    a4:fa:79:ae:e1:c8:e6:4e:b4:c8:5e:24:51:dd:6c:
                    a1:16:96:c7:31:56:c3:fd:ce:cb:26:e7:62:bd:c5:
                    9d:ea:51:3f:9b:5f:f3:4e:60:60:60:dc:e5:b1:f9:
                    e4:bc:c4:23:27:1f:b9:30:1a:8b:1c:e6:1e:ee:b3:
                    80:0d:1d:71:34:cb:6f:9e:e7:bf:89:30:fc:74:77:
                    5c:75:47:94:cf:e6:45:79:d8:1a:d8:7b:5a:76:df:
                    18:8f:33:66:a8:32:6d:fa:83:1a:da:14:8e:62:85:
                    fe:7a:b7:82:7f:6a:19:ee:c2:8e:fa:74:5e:bf:c2:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3D:E8:EE:7D:E9:58:25:02:28:6C:20:1A:22:F5:03:07:52:96:10
            X509v3 Authority Key Identifier:
                keyid:73:B8:16:40:E1:B6:4F:51:D2:BA:7D:78:F6:77:7C:05:6D:11:54:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7gWQOG2T1HSun149nd8BW0RVL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb153-51b3-4849-8985-d30f9168f801/1/c7gWQOG2T1HSun149nd8BW0RVL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:45:27:01:c3:e5:56:02:a3:5f:ed:19:99:55:c6:80:64:3c:
         38:e6:58:df:43:f4:a4:7e:67:47:b9:4f:3c:84:1f:8b:d8:b2:
         00:ae:fd:39:2f:7b:fb:11:d5:fb:a0:19:47:9c:28:db:40:fb:
         b4:8f:b5:49:1f:39:a9:45:96:d2:3b:f9:bc:33:71:6d:24:28:
         52:46:2a:8f:85:b3:56:3c:3d:95:52:09:04:f0:27:1f:41:3e:
         cf:cc:c7:88:24:31:f6:bc:d1:b7:e0:02:37:d9:0a:20:99:5f:
         21:94:57:5c:aa:58:d0:6d:10:57:5b:72:e4:18:50:eb:50:8e:
         68:c2:02:11:5e:82:e9:f9:13:b2:c5:51:4f:a1:ba:61:70:54:
         0c:a2:e3:6b:21:38:f3:21:71:59:f0:61:4e:81:7c:ee:8f:20:
         33:e4:62:01:0a:06:49:9e:05:e0:c8:87:38:57:52:53:f7:f2:
         6a:ff:9e:db:29:f0:0a:8b:4f:22:0a:d4:2b:a2:02:ac:4e:5c:
         31:cc:1e:4f:07:05:f7:b0:b2:24:92:65:b1:26:34:8d:35:f3:
         78:b8:de:ca:41:58:96:a4:61:89:31:d5:87:84:08:16:84:94:
         53:0a:87:fe:f5:bb:1b:ac:ce:ac:78:cb:2e:e9:eb:b9:54:8d:
         26:a6:23:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:28:25 2025 by rpki-client