Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
File:                     19sTK0fI7dg_7QLVYedQYEwgsfg.mft (raw, json)
Hash identifier:          pyTV5FjyO3nSNjiwyuDuEgr3c5G1qyls+QlKbwUZT4U=
Subject key identifier:   22:78:C9:5E:74:C1:95:DE:E0:74:A2:03:43:B4:D4:AA:13:CE:3C:F6
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Certificate issuer:       /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial:       019A725CB29E8AF87E4AAFB86BCF6CE414B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
Manifest number:          0A3C
Signing time:             Tue 11 Nov 2025 10:01:08 +0000
Manifest this update:     Tue 11 Nov 2025 10:01:08 +0000
Manifest next update:     Wed 12 Nov 2025 10:01:08 +0000
Files and hashes:         1: 19sTK0fI7dg_7QLVYedQYEwgsfg.crl (hash: F0MjVVlAcmXvxBtJW8U2pm8WFtIrl9u1NEHfl/ehedk=)
                          2: n54-V6R69Zbq8jSQEWdfXQAauKs.roa (hash: 7adElCmMmz9gs9syq0xK+Ax2i+eejhFJcT8zpbTEy5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:b2:9e:8a:f8:7e:4a:af:b8:6b:cf:6c:e4:14:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
        Validity
            Not Before: Nov 11 10:01:08 2025 GMT
            Not After : Nov 12 10:01:08 2025 GMT
        Subject: CN=2278c95e74c195dee074a20343b4d4aa13ce3cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:71:a7:a4:c7:02:b4:b1:98:e9:97:4e:43:8d:
                    2a:8c:aa:80:47:82:d3:81:51:3d:6b:e8:d8:ee:b6:
                    05:b2:cf:2b:80:64:96:23:bd:f6:f5:2f:56:b3:9c:
                    01:4d:9e:01:a5:b9:71:f9:4e:a1:91:9d:e6:fe:74:
                    aa:1e:81:6c:d2:82:17:73:7b:39:7c:46:53:5a:f7:
                    13:bb:79:4b:bb:42:b6:89:cb:5a:98:b8:d4:07:c8:
                    92:74:40:0f:a4:ca:c1:07:a1:db:9d:bc:2f:a2:d6:
                    a5:e6:34:4a:97:3a:e4:a4:8a:db:a3:c5:fb:7e:42:
                    c3:7a:b1:57:7e:6c:00:d6:e0:76:a4:f2:d8:76:d2:
                    db:1c:70:61:91:f1:f6:c3:e5:22:d7:3d:fe:1e:b2:
                    a0:91:8a:f5:cc:f5:ba:d3:fe:9f:b0:80:a4:eb:f3:
                    fe:8d:f7:a1:84:5b:16:da:da:f5:8c:c4:bd:10:49:
                    1d:a6:46:fc:0d:2d:57:8c:5a:3c:55:a4:04:ec:35:
                    76:d9:c5:d1:f9:a1:2e:d9:a1:c2:26:51:c8:0c:c0:
                    13:37:9f:77:d0:90:d0:1d:af:3a:ce:4b:26:4e:e5:
                    42:5d:9e:4e:48:a7:07:cc:14:5c:4f:eb:5b:52:38:
                    4f:8b:67:23:52:b4:36:10:0e:37:20:e9:f4:62:7e:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:78:C9:5E:74:C1:95:DE:E0:74:A2:03:43:B4:D4:AA:13:CE:3C:F6
            X509v3 Authority Key Identifier:
                keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:57:c4:66:a0:a1:c4:4d:de:02:86:aa:59:1f:e5:7c:3a:25:
         8d:19:81:05:82:68:5c:28:3f:df:86:10:9b:17:76:2a:17:b0:
         5a:84:9c:15:61:77:c1:be:60:0c:87:fc:58:e4:13:78:97:24:
         d0:cb:5d:32:c3:fe:e9:ae:ae:29:81:d7:e8:49:db:ae:42:ce:
         08:4a:cb:3d:8d:c7:4e:a3:7d:3d:d3:6e:50:83:46:ed:86:40:
         48:db:cb:fc:fe:d5:17:fb:e9:c4:c2:c7:0f:55:a3:1d:58:50:
         63:90:55:f6:d4:34:a1:db:49:6d:4e:f3:3c:5a:6a:b7:ad:7b:
         e8:83:5d:2b:65:b0:6c:aa:ae:37:4e:9e:31:16:41:9f:e4:e5:
         49:6e:a6:c5:f3:99:74:76:e9:2d:ad:4f:3e:35:62:b9:a8:c1:
         dc:a1:50:14:34:40:66:00:5f:e5:25:42:10:b2:a3:5c:03:c5:
         90:d5:a0:67:34:be:fd:a4:75:71:76:03:4a:30:d5:2a:86:f7:
         05:de:df:09:9e:f2:64:4f:df:9d:00:39:30:00:8d:9e:60:1f:
         01:7a:bc:5d:40:25:1a:3b:f0:6a:39:7a:15:aa:38:1c:20:1d:
         27:e4:7e:3d:2d:d6:34:16:27:ec:43:0c:98:83:63:57:ba:d4:
         57:74:5b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:23 2025 by rpki-client