Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
File:                     758eOCZUELPCqSLTFpxPKZUUGi0.mft (raw, json)
Hash identifier:          rlFUsHt3Jdi5GfH7TcAjS5UWZXSmOziWvQ7x8jMryG4=
Subject key identifier:   35:AB:CF:B7:DD:85:A1:CF:28:A1:30:7D:A9:BA:1D:FC:F6:8D:91:C0
Authority key identifier: EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D
Certificate issuer:       /CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
Certificate serial:       019A714A201589389C043C051151EE3AC897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
Manifest number:          1721
Signing time:             Tue 11 Nov 2025 05:01:14 +0000
Manifest this update:     Tue 11 Nov 2025 05:01:14 +0000
Manifest next update:     Wed 12 Nov 2025 05:01:14 +0000
Files and hashes:         1: 1bEC89myvydEqo_ZPjw-OQX0Qi0.roa (hash: ZmacESfVCLkopUwGADnqjPbJ5MKyVKen61NApT+t8VM=)
                          2: 758eOCZUELPCqSLTFpxPKZUUGi0.crl (hash: XswTbs1MAFaAn+dt+JuVwtuNT7r1buMPBtPQ8t7giKo=)
                          3: iZ1aijGSpYaJ5lT694iv07s9IFw.roa (hash: epj7jnXUcZqcIR0Iu/H9+s0OqjsBdFMaftQUUMbM+4c=)
                          4: ksWoUId71Ta6zaKYKbekW8SN22U.roa (hash: tv73AIHBejtA7MQn113/2vhoh+psXUpDGtwp+NxnLcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 05:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:4a:20:15:89:38:9c:04:3c:05:11:51:ee:3a:c8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9f1e38265410b3c2a922d3169c4f2995141a2d
        Validity
            Not Before: Nov 11 05:01:14 2025 GMT
            Not After : Nov 12 05:01:14 2025 GMT
        Subject: CN=35abcfb7dd85a1cf28a1307da9ba1dfcf68d91c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:59:57:6e:b2:e0:3c:84:25:b6:e1:a7:54:
                    c6:f1:67:2a:1e:b9:6f:c4:6b:c1:bc:c5:46:30:10:
                    28:d1:2b:d0:53:ac:18:e2:c8:ff:76:41:95:53:5d:
                    72:95:d0:57:a5:8c:d9:25:b4:6b:c9:53:85:4a:55:
                    42:83:2d:35:c6:15:39:9c:ec:2a:ca:8f:ac:5b:f0:
                    3b:77:45:31:fe:2c:6e:ac:2e:64:00:7e:ee:cb:84:
                    db:f0:d9:78:51:b3:5b:22:c5:d0:17:40:31:82:40:
                    62:8e:9f:77:99:95:61:5b:df:8f:74:3a:da:21:01:
                    0b:f3:29:83:eb:47:9c:75:78:e1:4a:38:cb:12:db:
                    77:a8:3a:3b:62:4c:1c:eb:a5:da:8d:24:41:50:2c:
                    4c:41:1c:8e:0b:1e:4c:77:ba:36:da:cf:7f:3e:3a:
                    9c:1b:45:26:67:2b:79:37:08:40:7f:37:63:9b:99:
                    69:54:90:59:76:83:38:40:75:31:bd:e2:de:7f:c0:
                    78:d3:47:fd:be:12:b3:45:38:f1:a6:9b:9b:4a:f3:
                    db:ab:bc:5d:15:2c:64:22:0d:32:5a:9e:de:5b:59:
                    2a:f7:78:5d:de:52:de:5b:11:53:dc:a1:4f:8c:5c:
                    24:6b:4e:3d:7f:91:9c:71:ed:30:a1:88:ed:c0:df:
                    38:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AB:CF:B7:DD:85:A1:CF:28:A1:30:7D:A9:BA:1D:FC:F6:8D:91:C0
            X509v3 Authority Key Identifier:
                keyid:EF:9F:1E:38:26:54:10:B3:C2:A9:22:D3:16:9C:4F:29:95:14:1A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/758eOCZUELPCqSLTFpxPKZUUGi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d6fb1c-95c3-4bff-8556-8057da754452/1/758eOCZUELPCqSLTFpxPKZUUGi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:b0:78:e5:cf:29:95:d1:f0:26:86:b5:17:17:5d:6c:a1:46:
         9e:16:fc:df:71:65:04:2c:8c:31:3d:88:7e:a8:6d:36:04:74:
         34:24:53:4a:46:dc:22:b3:a9:16:28:dd:69:f5:6d:f0:99:69:
         98:93:7f:15:be:97:4e:38:4a:4f:7b:c7:6a:fa:1e:69:3b:e0:
         0b:c8:6f:ad:a4:1b:25:a1:b6:56:0d:00:d3:92:5e:35:5a:17:
         a2:fe:55:30:7e:b8:ca:51:a9:be:89:da:60:8f:e6:02:19:e3:
         2c:95:02:69:97:d8:b6:e9:0f:42:c6:9b:e8:20:8f:8b:bf:58:
         de:23:ef:22:35:98:4e:63:38:d5:e2:ee:38:17:6d:11:f7:18:
         8b:d2:68:e7:0d:39:52:63:fa:2f:1b:c0:71:b0:dc:c6:6e:48:
         7d:a3:3d:d7:3b:12:09:1b:e5:21:88:4a:1b:ee:6f:33:25:06:
         bc:94:12:41:31:62:a8:16:9b:75:03:94:c2:95:6e:c0:81:64:
         eb:4c:28:87:f9:70:0e:bb:5e:ab:88:10:aa:3a:7e:3e:25:b4:
         54:00:c6:b2:9e:c1:ca:9b:81:59:dc:cb:10:15:9d:24:e0:1e:
         61:99:63:e2:4e:09:a6:b2:7a:c5:84:88:18:70:53:50:74:85:
         84:ff:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:41 2025 by rpki-client