
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
File:                     7OZJjRdK31yJo2XC0eR33PJPmC4.mft (raw, json)
Hash identifier:          UWbEsxaSb3z50Cht5hwoJ0Pw3yLNIZG5HGoHS57UTzM=
Subject key identifier:   4C:7F:75:47:86:31:9C:B7:56:EA:E7:F0:10:0E:CB:60:8F:47:52:79
Authority key identifier: EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
Certificate issuer:       /CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
Certificate serial:       019A4BBCC767BB5016533B2A5B00F6EE2FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
Manifest number:          03C3
Signing time:             Mon 03 Nov 2025 22:00:54 +0000
Manifest this update:     Mon 03 Nov 2025 22:00:54 +0000
Manifest next update:     Tue 04 Nov 2025 22:00:54 +0000
Files and hashes:         1: 7OZJjRdK31yJo2XC0eR33PJPmC4.crl (hash: d5Faxkd6EUNuujoPayl51r2KvpALgs6PU1Eq8BluUoI=)
                          2: C6x_6w-E774Ctv2tM-pwvlDis4g.roa (hash: INLpD3Xn2Y08yhQMCV4sfvThKHmVJ+/cWpnVIk0AjIY=)
                          3: Gsw4M_lTA_8kRZfXKXl2Ow61fLs.roa (hash: wx/H0ps5Y+S8LfFB+UMWHcMD/ey9o03wwXXZ26Kx9zo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4b:bc:c7:67:bb:50:16:53:3b:2a:5b:00:f6:ee:2f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ece6498d174adf5c89a365c2d1e477dcf24f982e
        Validity
            Not Before: Nov  3 22:00:54 2025 GMT
            Not After : Nov  4 22:00:54 2025 GMT
        Subject: CN=4c7f754786319cb756eae7f0100ecb608f475279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8d:36:ef:f3:2b:c5:40:67:64:ba:14:3d:ad:
                    62:7c:1b:fb:0b:c8:ba:2e:ae:70:f0:8c:3d:94:4d:
                    2c:03:58:d8:1d:10:66:3b:84:a7:c0:96:79:f5:e1:
                    e3:53:60:46:f4:fb:2f:fd:38:e5:3d:60:a9:1a:ba:
                    fb:3e:75:f2:f1:89:30:c2:35:29:ae:5c:63:c1:79:
                    49:39:7a:82:fe:ae:6c:92:de:88:36:8c:2b:aa:08:
                    d5:26:f6:6e:f5:7a:1d:a0:4e:5d:7b:a4:ee:b1:95:
                    dd:eb:2c:6e:13:26:1c:a9:31:3c:1e:f8:93:59:2b:
                    0a:30:f4:d2:9f:3a:37:e1:52:67:9c:bb:23:cd:e3:
                    c1:45:65:0d:5c:e3:6e:50:02:b0:4f:37:36:62:68:
                    5f:f1:68:78:aa:0a:db:08:b7:df:d3:9e:2e:ff:cf:
                    02:02:d7:11:2a:11:52:be:54:c6:bf:23:31:64:64:
                    cb:f3:9c:55:2b:4d:2e:32:26:ec:20:99:24:f4:4f:
                    7b:57:8a:7a:4e:31:d3:c2:a7:a4:24:c2:5d:8a:f5:
                    6b:77:3a:c6:45:54:e6:bb:73:08:24:48:6c:6a:fe:
                    fe:1b:13:55:5e:6c:0d:8f:7a:3e:2d:32:fa:bf:ab:
                    f4:71:ab:5d:d9:53:b6:20:f0:f2:28:8b:e8:c3:38:
                    95:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7F:75:47:86:31:9C:B7:56:EA:E7:F0:10:0E:CB:60:8F:47:52:79
            X509v3 Authority Key Identifier:
                keyid:EC:E6:49:8D:17:4A:DF:5C:89:A3:65:C2:D1:E4:77:DC:F2:4F:98:2E
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OZJjRdK31yJo2XC0eR33PJPmC4.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/8abb58-f30c-4f3b-b992-9becc136cc71/1/7OZJjRdK31yJo2XC0eR33PJPmC4.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b4:38:c9:11:ef:18:f3:53:a2:7b:a7:21:35:8d:66:78:79:64:
         4c:51:3e:49:1b:f5:ed:a1:f0:54:5b:0a:f6:13:c1:25:a1:f1:
         a2:d7:e8:5e:97:bf:2d:f7:27:91:9e:fc:c2:07:14:37:1f:3a:
         1c:c0:c3:19:1b:15:ae:08:73:2f:a3:3a:7f:8c:39:e7:08:16:
         87:dc:54:9c:66:17:78:dc:36:89:d3:9b:0d:a3:12:85:46:2b:
         00:23:55:9d:bc:82:36:a9:66:f5:1c:e3:b1:8d:97:35:09:0f:
         7f:5a:8a:84:99:18:b0:ad:43:5c:7f:bb:93:a0:91:05:26:89:
         71:a9:0a:f2:a8:e4:67:6e:22:a8:0c:7e:5a:93:9a:83:ca:45:
         7c:72:35:fe:ff:c1:34:b8:3b:8c:01:f0:0d:ef:06:a8:2a:f9:
         ad:27:89:62:fb:2e:7c:1b:d3:b5:56:29:f1:ad:64:4f:2a:17:
         5a:6b:85:8d:95:ab:dd:75:0d:0c:f3:9e:2f:72:a6:cd:d9:b1:
         e6:07:39:75:94:20:ac:27:54:b3:83:ad:2c:a6:db:ad:46:80:
         2d:f8:da:90:92:53:a1:8c:d3:72:6a:43:af:20:12:a7:27:3d:
         46:cb:9c:c7:9e:9f:0a:e0:84:5c:77:c4:7d:ea:46:1c:08:0a:
         a6:0e:cd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 04:11:08 2025 by rpki-client