Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          TD1zVVSRsDul8FwP5krqOZDRPQJDVo3sNEQXW7oVhgY=
Subject key identifier:   5C:51:B6:41:EA:69:AC:F2:8A:88:00:79:95:82:77:01:FD:3E:D9:06
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019A21ADC7BFEE6B7C08F069B1BD296038FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          1688
Signing time:             Sun 26 Oct 2025 18:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:28 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: P+Feiej3cdGLMBNKkxIlmJgR/jGgnkN8oxcUTVYFrC4=)
                          2: J9Y5qrjsI2Qtuq7klk41lQwg1og.roa (hash: NNuL/WZWhtDsn2nhsgr73rvUsNOJxUI43avvh9gIeRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:c7:bf:ee:6b:7c:08:f0:69:b1:bd:29:60:38:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Oct 26 18:00:28 2025 GMT
            Not After : Oct 27 18:00:28 2025 GMT
        Subject: CN=5c51b641ea69acf28a88007995827701fd3ed906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bf:63:3c:6a:83:6e:de:18:cb:cb:e1:dd:67:
                    ed:0c:0f:f2:3f:db:c9:1b:56:de:e2:86:94:51:72:
                    5f:82:ee:be:00:14:0e:1e:8c:55:a8:af:c0:9f:00:
                    5c:8f:83:e0:c8:c1:df:fb:73:ac:c9:26:23:d6:0c:
                    5c:c7:01:e7:24:aa:45:cb:2f:78:6b:4f:51:96:0c:
                    56:00:46:7d:6d:67:e0:21:e0:c7:98:85:43:23:43:
                    06:d0:88:a3:c2:01:14:5f:d3:01:08:42:f1:5b:b9:
                    a4:2b:cf:06:e0:fa:0f:a1:46:d6:f7:8f:56:36:56:
                    fe:6d:52:21:67:e4:2f:f7:86:1a:ad:03:6e:0d:8b:
                    fb:1a:d0:53:77:03:af:c8:9c:38:44:30:e6:5f:5b:
                    8b:5a:0a:1d:d9:f8:74:eb:02:9e:83:43:cc:18:06:
                    74:a4:f7:63:3c:db:73:60:33:b7:01:d9:fc:09:26:
                    8a:c5:b0:fa:34:23:57:9e:55:6a:31:34:d7:24:71:
                    b9:fa:e5:58:ce:1f:3b:da:8e:6f:bb:d1:38:51:23:
                    bb:ce:40:b7:93:b6:e4:63:4f:5c:74:67:d1:97:72:
                    e7:2f:cf:46:7e:b8:6f:e4:38:ac:e2:0c:b0:65:a6:
                    c1:2d:29:14:cf:b3:14:7f:22:66:e4:bf:c1:98:cd:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:51:B6:41:EA:69:AC:F2:8A:88:00:79:95:82:77:01:FD:3E:D9:06
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3b:78:bf:e9:4f:cb:9d:99:16:64:30:c8:12:75:f8:53:df:
         61:6b:04:70:27:86:cb:12:43:9a:fd:5c:65:c0:98:f5:26:a8:
         2b:17:fa:13:d5:aa:9c:09:5c:26:f2:b1:14:44:ef:bb:01:ee:
         24:6f:a2:bf:ec:83:13:3c:c3:66:99:1a:f3:4b:9f:1d:65:61:
         42:b7:7c:54:7c:bc:ed:8e:2b:e3:5a:6a:3a:48:ce:7f:2f:c8:
         69:54:29:8c:4b:6b:71:b7:98:bd:42:c2:f6:e5:29:5f:ce:52:
         c0:f4:ce:7c:84:ba:2b:b5:ba:70:3f:d7:18:c9:7a:ec:79:1e:
         07:7d:1d:3d:78:ef:67:9e:fb:0f:cd:b3:14:8c:0a:d4:dc:17:
         b2:ed:a0:a6:12:2e:39:9f:64:10:8a:9a:40:2d:9e:2d:e3:f4:
         50:0b:fc:5c:d3:6a:2d:6d:41:e6:18:47:60:79:a9:ba:a6:4b:
         e0:ad:e5:a1:9d:b3:ee:8d:d9:58:c9:c2:28:6a:b3:d6:ad:a3:
         59:87:d2:ea:c5:94:46:1e:a3:15:14:3c:b9:46:39:4a:66:87:
         43:04:8d:47:25:53:09:3f:1a:67:20:9c:64:7b:71:34:9e:f6:
         26:39:9d:9b:4f:8d:9b:e4:e6:9f:b5:86:c4:12:25:a6:01:7e:
         22:40:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:40:20 2025 by rpki-client