Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
File:                     MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft (raw, json)
Hash identifier:          TMwEZE1/DPK6HIZ7NKSkIDFFRGOe2v6Rem6nRWSrC7M=
Subject key identifier:   B7:23:1E:2F:7E:57:A1:8A:A4:A9:6F:F0:9A:75:EE:65:A9:4B:18:D4
Authority key identifier: 31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82
Certificate issuer:       /CN=31951e36ffd97c1d733a90a5af6fada85fd27782
Certificate serial:       019A71808BE60A21876DC180560694655BEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
Manifest number:          1C
Signing time:             Tue 11 Nov 2025 06:00:41 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:41 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:41 +0000
Files and hashes:         1: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl (hash: uQ4vMjCfHVOdWFG8aG0Fkcebo2f3rMY5p6xh2I7RVo8=)
                          2: TDVjYLyHzwQNTTzVC6g7tLdpTZo.roa (hash: op6/PInYnACJ7ya55ltpX72UWTOB+p1Ct4BWq04tsFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:8b:e6:0a:21:87:6d:c1:80:56:06:94:65:5b:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31951e36ffd97c1d733a90a5af6fada85fd27782
        Validity
            Not Before: Nov 11 06:00:41 2025 GMT
            Not After : Nov 12 06:00:41 2025 GMT
        Subject: CN=b7231e2f7e57a18aa4a96ff09a75ee65a94b18d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:73:b1:ea:71:89:c6:76:f4:3a:3b:b6:5e:
                    e4:e7:ed:94:dd:1c:f4:58:c6:c2:ae:2e:bc:60:a3:
                    15:4d:73:6c:6f:90:09:b0:20:9b:dd:57:46:87:17:
                    47:14:5d:69:71:af:30:1f:11:cc:3d:5a:8c:2f:72:
                    63:fb:0d:c7:78:63:01:4e:3b:e4:e4:87:e3:fc:c7:
                    1a:ee:fd:20:8b:e3:14:8e:56:c7:0a:65:cf:96:51:
                    7b:9e:0e:83:63:ec:37:ed:3b:75:5e:fe:a9:6b:7a:
                    04:c3:33:2c:43:e5:fe:2e:91:18:50:69:8b:5d:20:
                    ce:b3:08:d6:b1:bf:39:50:11:0d:2b:d5:72:8e:0d:
                    14:d8:74:34:e3:5c:b3:24:9b:c4:b1:6e:db:f2:7e:
                    bf:fe:bd:09:ce:45:d7:b3:1c:36:6d:05:af:b5:62:
                    06:34:7e:c8:2e:dc:87:57:5a:af:e4:5c:39:e7:f9:
                    95:c1:a6:d1:37:79:85:4a:80:1e:3d:05:88:16:24:
                    d8:a4:d6:67:fd:df:4c:c0:22:78:97:01:3a:d1:3a:
                    d7:a3:a0:8e:9b:d4:ba:b7:a6:5c:5a:81:32:9d:ab:
                    6d:a5:7e:3f:29:26:b0:c7:9c:90:e6:e8:71:12:fd:
                    3b:89:85:d8:8b:a8:62:bd:c3:f2:dd:e0:d0:9e:0b:
                    66:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:23:1E:2F:7E:57:A1:8A:A4:A9:6F:F0:9A:75:EE:65:A9:4B:18:D4
            X509v3 Authority Key Identifier:
                keyid:31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a7:1d:17:81:5f:42:86:9c:d4:43:c9:6c:03:4c:60:69:f5:
         16:38:fe:58:aa:7c:36:da:0f:0c:c5:59:21:6c:3f:9b:1f:3e:
         71:99:96:52:87:b9:e3:bb:69:99:c7:49:ae:fe:42:f3:b3:7b:
         7f:6c:4e:d8:e4:7a:18:35:02:47:24:78:29:0f:87:98:a8:5c:
         56:69:01:3b:63:dd:62:5e:78:76:9e:cf:28:c9:11:9b:5c:7a:
         be:b3:19:c8:10:9a:1c:30:7c:8f:89:b2:0e:f5:3c:bb:0e:60:
         92:01:01:45:40:13:2d:43:b3:ba:03:89:73:e4:d9:bb:0a:69:
         3a:8a:89:58:a4:cd:61:53:98:ec:36:a5:a7:d8:05:5d:bc:0a:
         3a:59:a0:11:2c:0c:4e:18:12:f9:0d:b7:f5:81:11:2e:34:b7:
         00:61:f6:b9:04:da:fd:b6:70:c2:a8:fe:68:a7:ba:f4:ac:2a:
         97:72:14:e9:22:00:98:74:6f:81:52:3a:d8:78:78:21:1e:07:
         4b:3a:4f:0c:41:cf:75:a3:ac:4b:97:8b:56:d7:75:51:49:f5:
         9a:76:dd:5b:59:da:b2:cb:0a:7a:4e:82:ce:01:85:5a:6f:50:
         47:28:ce:f7:f1:f0:05:ec:f7:37:4c:f5:a9:3c:51:45:f0:23:
         40:f5:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:15 2025 by rpki-client