Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          uig3J75cWjgX/eXomsnm0mfXBUfXzoKWYRhI2Iwarzs=
Subject key identifier:   98:06:10:AF:ED:E2:A2:DA:C4:61:8C:3C:FF:8B:D5:9D:78:02:79:99
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019A71EE75297F1C418851AC5B3B39AA9542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          1723
Signing time:             Tue 11 Nov 2025 08:00:44 +0000
Manifest this update:     Tue 11 Nov 2025 08:00:44 +0000
Manifest next update:     Wed 12 Nov 2025 08:00:44 +0000
Files and hashes:         1: 1YmAF7f_m5KPGo_OwiMLBR1JW5M.roa (hash: UAkDP6iNOKZ++HkTLAbL+chM5gUSSrJ7CaImjH0oho8=)
                          2: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: VLlgQMzOxdeF1hyvbRxLT/H+a2NDZSbZmOCzbxFxhU4=)
                          3: 97KmMU-io56QACTp1Zd1_FHTqgw.roa (hash: uCAMfglxmwOpuKBmRAadF3cN1VLfWXLJnP20OsEzzUE=)
                          4: En9vXJm7XWjYXN5tMXgE82FcYWY.roa (hash: U0ZcoSNs7yuylkfmvka9vQooaxrwx4TKjkqWeYLwaY8=)
                          5: VD6wEJYNAt-3ccOgOQEtYbRpD0A.roa (hash: 8S53UWk8y2kICWluONZMk3V/wk1nRogIOqOUIQmbX3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:ee:75:29:7f:1c:41:88:51:ac:5b:3b:39:aa:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Nov 11 08:00:44 2025 GMT
            Not After : Nov 12 08:00:44 2025 GMT
        Subject: CN=980610afede2a2dac4618c3cff8bd59d78027999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:87:d1:22:10:30:bb:dc:9d:95:81:73:83:
                    78:df:d6:55:d2:75:df:be:45:e2:4a:f1:88:b7:15:
                    0b:95:3c:23:7f:fb:f3:31:e2:bb:52:6a:aa:6e:a6:
                    37:d4:ad:b0:5c:a9:95:5c:bd:83:3b:79:9d:7b:27:
                    92:f3:be:e2:7f:73:ee:c3:0e:f7:43:5e:02:e2:12:
                    c2:ff:34:6f:11:63:8c:5f:27:17:2d:8c:c3:4f:93:
                    d2:15:1f:76:50:d5:59:ae:fa:64:ec:24:4e:ae:53:
                    ef:bf:8f:20:a7:71:a4:9c:38:36:ea:87:c7:20:d4:
                    00:f9:2c:5f:a4:65:43:42:55:d6:ba:2b:bb:cf:70:
                    17:09:5b:6b:48:54:02:e4:83:ce:01:3e:76:35:67:
                    7d:e2:73:5c:22:a0:20:24:37:f7:b8:46:81:4a:89:
                    49:63:a9:4c:ef:fd:8b:56:cc:6b:0b:4b:39:40:f0:
                    e6:b7:27:3b:5b:4d:76:0e:1e:79:3c:db:b3:e7:95:
                    5d:af:a1:33:e8:cc:26:bc:57:69:cd:a5:7a:44:f1:
                    17:c8:96:3b:6c:12:1d:9d:c7:45:50:39:e6:58:ba:
                    0a:cd:68:9a:e6:60:82:eb:33:94:2a:ed:b2:63:17:
                    fa:93:56:81:5d:0e:b3:90:7d:8f:34:18:c1:14:a8:
                    0d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:10:AF:ED:E2:A2:DA:C4:61:8C:3C:FF:8B:D5:9D:78:02:79:99
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:21:0a:87:e0:ed:42:81:4b:5e:a3:32:b5:69:58:2f:bb:43:
         d1:14:96:1f:57:6b:ef:9e:3c:36:6c:4a:4e:a9:a0:6d:a8:f9:
         8b:10:d2:f6:54:21:c3:7d:68:3d:3d:75:72:53:18:9d:7b:84:
         1d:21:ba:a8:9b:d5:b4:f3:93:72:1a:45:0f:bf:fc:68:d3:6e:
         85:aa:fa:15:1f:fc:19:92:e9:bd:5a:cd:53:38:5c:15:e5:5f:
         3d:42:25:35:ea:bb:78:ff:51:86:f8:24:61:36:e2:ed:7f:d1:
         66:d8:25:39:2b:9b:b7:d1:b5:c4:b8:36:e4:38:ca:0c:13:61:
         9c:c5:1c:ae:7e:e4:f5:ca:53:15:10:a2:df:05:c2:fe:e9:0c:
         6f:6e:8c:fd:c4:3f:8e:23:e2:62:25:c0:12:56:a6:65:f2:76:
         44:8e:aa:7b:06:58:18:e1:e7:e2:35:53:14:20:88:3a:d9:33:
         ec:83:45:9f:7d:c4:cf:07:63:72:5f:23:af:da:99:2a:26:99:
         0e:42:0b:6d:f1:47:75:6e:a9:39:54:e6:11:56:81:13:59:58:
         d6:e3:9a:99:2c:6c:9d:31:09:48:9b:9c:d7:f7:13:29:74:47:
         d6:df:d0:a7:ad:90:6e:56:f8:9d:7d:1d:03:c5:5e:58:d2:71:
         ff:ea:96:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client