Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
File:                     xC-Eb32rEnhmuie_qWS6fS3iBEw.mft (raw, json)
Hash identifier:          ZkdzFVyJpTWgSuJQ96dDGFVX13CIAiyk6BdvTbyE03A=
Subject key identifier:   47:66:E5:36:2B:ED:E9:53:34:F5:DE:4F:63:3A:58:13:2C:C1:74:2C
Authority key identifier: C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C
Certificate issuer:       /CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
Certificate serial:       019A7225BAAC578E6D9D56A8BD5F2390DACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
Manifest number:          0B97
Signing time:             Tue 11 Nov 2025 09:01:06 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:06 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:06 +0000
Files and hashes:         1: s7BYPcFko15wHvOyF3oatSsccyI.roa (hash: 78VX1NSsQyuTClZ7PDZmJ4FVZ65vdHUjOgVNSdaYEok=)
                          2: xC-Eb32rEnhmuie_qWS6fS3iBEw.crl (hash: MSjiFNcRLco07wbX65sZEZX4rMR169eB/qHnsFxXYJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:25:ba:ac:57:8e:6d:9d:56:a8:bd:5f:23:90:da:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c42f846f7dab127866ba27bfa964ba7d2de2044c
        Validity
            Not Before: Nov 11 09:01:06 2025 GMT
            Not After : Nov 12 09:01:06 2025 GMT
        Subject: CN=4766e5362bede95334f5de4f633a58132cc1742c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:cc:85:2b:65:ba:6a:bf:d5:1c:a7:25:29:
                    0b:91:79:d8:a5:49:46:17:a2:5b:dd:2c:e8:36:4b:
                    ec:3b:d7:04:8e:37:73:63:7c:89:e5:c6:c9:c0:c8:
                    19:57:b1:17:07:99:07:24:1d:1d:42:aa:91:cd:f0:
                    4c:ec:78:66:89:72:0b:47:2e:be:3a:a3:7e:72:7a:
                    72:b6:ba:df:90:9c:34:84:85:a0:64:a8:15:4a:72:
                    5a:fd:ff:1a:32:73:27:b4:a2:83:7a:8f:94:40:04:
                    d5:f5:d3:17:c8:0e:27:96:e5:f0:93:9f:b8:2b:c6:
                    b3:43:55:e9:99:a6:38:46:ea:08:4b:e2:55:ff:be:
                    56:0f:12:21:21:17:bb:a5:65:1d:1d:67:29:e8:8c:
                    9d:c3:fb:2e:50:f6:8d:18:9f:73:8b:9b:34:f9:02:
                    1a:f4:ee:c1:dc:c1:3e:df:5e:fe:d6:28:09:87:e6:
                    6e:61:70:a8:0e:19:76:c2:75:e8:9d:49:62:9b:ac:
                    8a:35:c2:e4:10:8f:5d:48:69:79:3e:34:cd:9f:22:
                    0c:02:85:74:85:24:76:95:52:6b:7f:65:cc:2e:52:
                    0a:2b:69:08:51:12:18:75:52:3f:f2:95:f3:47:20:
                    2f:4e:14:69:ea:e1:f4:ca:5f:d3:d9:b3:1d:d6:7a:
                    36:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:E5:36:2B:ED:E9:53:34:F5:DE:4F:63:3A:58:13:2C:C1:74:2C
            X509v3 Authority Key Identifier:
                keyid:C4:2F:84:6F:7D:AB:12:78:66:BA:27:BF:A9:64:BA:7D:2D:E2:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xC-Eb32rEnhmuie_qWS6fS3iBEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/770732-cc5a-42e1-8038-544b9c2e7726/1/xC-Eb32rEnhmuie_qWS6fS3iBEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:64:2f:36:5e:38:cf:1a:d4:d4:00:d1:b6:e9:c8:a8:a4:e9:
         f2:0f:55:9d:92:b2:b1:3f:18:d7:6f:c2:65:34:da:66:59:83:
         73:f0:2a:44:eb:1b:b6:73:5e:f1:c0:69:ad:93:b2:16:9f:d8:
         7d:ab:7b:8b:fd:7f:84:3f:86:51:7b:5a:1e:bd:80:9a:77:40:
         40:4c:fe:98:08:67:af:e7:c6:1d:77:82:41:ef:9b:c0:80:de:
         5b:70:db:35:99:41:e9:ca:14:a4:72:27:15:01:40:9f:27:f3:
         6a:20:21:28:a8:51:79:dd:41:fd:11:46:46:e8:14:a2:47:34:
         68:22:b3:1a:6b:e7:aa:07:04:f8:6e:97:25:c1:aa:d5:32:0e:
         a3:ad:f0:cd:34:83:f6:ca:2f:68:c9:48:af:af:9d:0e:6e:f8:
         1d:df:b4:ee:a2:b8:5e:5a:b0:da:ed:7a:ba:9b:89:59:ac:2d:
         23:2e:ce:10:f9:bf:c3:97:01:64:c6:9e:14:c6:eb:3a:3e:e5:
         07:9f:a9:54:cc:a3:2f:d9:7f:9d:9a:7f:97:b9:c6:6d:a7:7f:
         99:a1:dc:5e:bc:d8:4b:ef:13:85:d2:5e:9d:3f:7e:9a:27:64:
         3d:a2:a4:af:6d:35:eb:d8:e7:13:c6:dd:9f:c3:31:d6:db:71:
         b4:dc:77:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:36 2025 by rpki-client