Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File:                     8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier:          UseU6AS0ruGCRZCH3s4Tfc9yM8E93Q3oxba+mH2dkbg=
Subject key identifier:   48:DA:0B:59:11:65:EC:7E:B2:17:BF:80:14:BE:7C:D9:7C:BA:DC:B8
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer:       /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial:       019A2365900CE5C3FC217C23963C1AD1E75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number:          16F7
Signing time:             Mon 27 Oct 2025 02:00:49 +0000
Manifest this update:     Mon 27 Oct 2025 02:00:49 +0000
Manifest next update:     Tue 28 Oct 2025 02:00:49 +0000
Files and hashes:         1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: kxmZnsO43QCJOm8Dgcve/woSCp7r/jSlqeeHhZu04Bc=)
                          2: hL-DXnMsqPz6nlhjJn7RS4zQddU.roa (hash: PY6Hm3vuvoHo1j0KhJs+BA0EtLz3qhxo9ur8To6A/3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:23:65:90:0c:e5:c3:fc:21:7c:23:96:3c:1a:d1:e7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
        Validity
            Not Before: Oct 27 02:00:49 2025 GMT
            Not After : Oct 28 02:00:49 2025 GMT
        Subject: CN=48da0b591165ec7eb217bf8014be7cd97cbadcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:aa:c7:99:04:6d:8d:9e:28:29:80:79:db:15:
                    c7:25:4a:3b:e6:b2:e3:0a:b9:f9:43:9e:fc:5b:5f:
                    49:43:59:d6:ac:8a:0c:cf:47:5e:2b:7c:35:43:94:
                    9e:8f:76:05:11:80:88:b5:aa:a2:af:9a:3d:32:f1:
                    07:c1:1f:fc:e6:78:19:57:e6:bf:e0:55:24:bf:a7:
                    54:7f:d1:b6:45:18:f6:78:83:3d:f6:88:b2:7c:57:
                    5f:19:f2:c1:b3:aa:a9:81:78:c9:22:7f:3a:a7:34:
                    ed:d0:ce:16:b7:cb:d2:fd:5f:ea:3d:01:34:61:4b:
                    0d:99:f9:d0:52:e0:15:62:08:89:24:8b:9e:19:f9:
                    2b:5b:a7:c6:4a:03:20:a0:35:1b:ec:6f:ce:1d:98:
                    1d:34:e9:fe:56:2b:aa:aa:52:ea:98:07:8c:b0:c0:
                    be:25:ba:33:d1:76:a4:3f:85:ba:f2:58:ed:b0:55:
                    32:1a:8d:9d:51:7d:e7:84:47:53:f0:86:b0:89:18:
                    de:57:3a:ee:69:51:c7:fd:bc:a8:fc:5e:a3:8b:73:
                    2c:b8:d4:4d:d2:0f:ae:9b:8b:3c:01:6a:2c:b2:6b:
                    b8:b8:02:24:d9:cc:ea:92:f4:f7:10:d4:1f:e4:8b:
                    8f:4b:fe:99:06:8f:de:1e:f1:f9:0f:7e:8a:65:4e:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DA:0B:59:11:65:EC:7E:B2:17:BF:80:14:BE:7C:D9:7C:BA:DC:B8
            X509v3 Authority Key Identifier:
                keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:15:f5:7b:07:d5:bc:62:0b:3b:05:a0:65:27:cb:24:89:
         43:4b:83:1d:95:cb:a6:10:4b:02:8f:23:d3:2e:4a:1c:84:ef:
         3c:15:d4:e2:5e:48:8e:b7:6a:74:9f:db:45:87:7c:0d:1f:9e:
         8d:fc:da:59:ae:7a:47:e3:ab:36:9c:cf:00:e8:90:22:09:24:
         86:88:8a:88:ed:13:ff:17:f5:02:6e:07:ee:e8:3e:dc:03:98:
         1f:fc:99:5e:7d:35:8e:44:92:61:b1:11:3e:5d:56:33:af:3c:
         5c:22:e4:a0:66:d4:94:10:c5:0d:36:af:90:1b:12:6d:3f:84:
         d7:ed:31:c9:6e:05:04:aa:12:be:75:a7:d5:f6:8c:24:81:fd:
         30:98:68:8b:ad:cc:3b:41:15:03:8b:e2:7e:4e:aa:9d:a1:07:
         fc:b4:66:dd:44:1b:63:60:f1:f7:49:47:87:74:77:3d:24:f8:
         49:fd:06:98:d2:0a:75:cc:34:65:26:7f:23:13:fc:76:aa:85:
         d1:72:09:31:51:4b:22:9a:8e:02:70:31:2e:38:ba:af:26:17:
         d0:e5:ca:49:61:48:92:82:e9:70:05:21:75:f8:c0:88:7f:c4:
         a1:00:6e:07:c9:e5:42:ba:70:01:33:b5:e1:41:8e:0b:82:db:
         0f:a6:2e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:18 2025 by rpki-client