Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
File:                     t7wa3782Jkj8Y1wzMvODvLwB53Q.mft (raw, json)
Hash identifier:          TKNQG0v1t46zUQ5gRCMWbubgWfAm27i5HVjsJ/Z2/d0=
Subject key identifier:   E1:FD:C8:3B:66:BF:D7:C0:5B:07:A7:85:F4:D0:79:42:83:C7:A1:19
Authority key identifier: B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74
Certificate issuer:       /CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
Certificate serial:       019A299E4286B7821D1E0BEE36094673437A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
Manifest number:          16F9
Signing time:             Tue 28 Oct 2025 07:00:28 +0000
Manifest this update:     Tue 28 Oct 2025 07:00:28 +0000
Manifest next update:     Wed 29 Oct 2025 07:00:28 +0000
Files and hashes:         1: 696z34QMsC6_vR7KEfwUSvQdpWY.roa (hash: yNhDUKimDD5hTy/VhafEDO3vPLqIP7iVfa9gPXqtn9I=)
                          2: t7wa3782Jkj8Y1wzMvODvLwB53Q.crl (hash: HxZuKUEl8Sd5vbQplebWzpCYymQkMixJPTs93738Dwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:29:9e:42:86:b7:82:1d:1e:0b:ee:36:09:46:73:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7bc1adfbf362648fc635c3332f383bcbc01e774
        Validity
            Not Before: Oct 28 07:00:28 2025 GMT
            Not After : Oct 29 07:00:28 2025 GMT
        Subject: CN=e1fdc83b66bfd7c05b07a785f4d0794283c7a119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:44:2e:8c:c8:03:af:ed:af:81:47:d4:79:
                    5d:87:02:08:8d:12:3a:3f:9c:5f:36:c3:6b:62:e8:
                    40:37:5d:3b:eb:da:19:93:0c:e2:6a:23:33:23:2b:
                    cf:46:2d:33:d1:75:6b:ec:ab:f5:b3:fc:2e:50:af:
                    c6:c9:1f:58:7d:da:99:2b:93:52:57:56:f9:cd:53:
                    91:d8:4a:ac:62:2e:f6:12:22:45:ce:0c:3e:fe:df:
                    17:76:f6:7a:16:ea:95:33:ae:73:cc:0d:d1:d5:e9:
                    6f:5a:ac:cc:0c:77:f4:06:ea:8a:9f:81:09:12:be:
                    05:2c:30:39:64:94:ea:69:98:67:cb:5c:06:96:db:
                    c4:f3:1a:f6:e8:2b:11:a6:eb:cd:cf:b9:a4:8c:29:
                    25:d2:73:f3:db:35:bf:77:67:05:83:71:4a:b4:45:
                    2d:22:cd:a6:01:09:1a:da:72:3c:8c:19:ae:c7:bc:
                    ca:53:08:8c:92:e6:57:33:d7:c0:71:4c:ab:d5:49:
                    8d:f1:0b:36:9e:aa:9c:7b:d1:22:6c:9d:ae:7a:af:
                    c8:3b:35:3b:59:a0:37:79:66:98:99:62:1e:40:32:
                    b7:31:b2:49:3a:57:49:16:02:ed:8b:3d:47:ce:40:
                    76:a0:75:8e:a3:78:4b:88:56:8c:a5:5a:74:b3:3c:
                    d1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:C8:3B:66:BF:D7:C0:5B:07:A7:85:F4:D0:79:42:83:C7:A1:19
            X509v3 Authority Key Identifier:
                keyid:B7:BC:1A:DF:BF:36:26:48:FC:63:5C:33:32:F3:83:BC:BC:01:E7:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7wa3782Jkj8Y1wzMvODvLwB53Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1c9dc7-78a5-4d8a-b185-fd606b06a01a/1/t7wa3782Jkj8Y1wzMvODvLwB53Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:92:b3:0f:d4:5d:71:74:cf:38:96:61:ce:2f:53:3e:5d:65:
         13:1f:b1:a1:d2:d4:ce:64:df:06:e0:b8:60:f9:3b:a5:96:2a:
         d3:c7:5d:af:5f:7d:6b:83:d7:21:71:e2:50:4e:81:9f:41:5a:
         e7:30:1f:4c:5a:bc:e7:e5:27:4f:9e:ea:25:dd:d9:49:0e:31:
         6c:1a:ea:14:77:de:2f:b4:42:20:4a:93:5e:2b:30:93:76:98:
         69:24:91:7c:b3:88:dc:74:57:c8:20:17:86:4e:02:a9:3f:c5:
         09:28:d6:99:db:23:c8:d5:55:4e:ca:4d:0f:88:7e:f4:a2:b3:
         d8:e6:97:d7:0a:17:55:a8:c9:94:e7:80:2f:0d:7c:c8:81:20:
         c2:fb:5d:2b:32:18:78:ab:9e:4a:54:d8:54:c8:d4:9f:35:c2:
         96:a8:f3:49:b4:93:92:59:cb:4c:c3:28:cc:52:b3:82:d3:5f:
         0c:b2:ce:7d:71:65:9c:fc:96:81:57:f5:27:7e:4b:aa:b9:15:
         78:a9:04:b8:ae:73:78:8a:91:2d:af:55:fc:25:28:00:d5:3c:
         1f:f2:68:36:c7:f7:d4:6e:5a:a7:36:21:36:4a:bb:1c:97:e1:
         86:9f:75:0b:1d:6f:a9:9c:34:53:b8:7a:41:c6:01:61:78:0e:
         67:e1:28:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:31:24 2025 by rpki-client