Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
File:                     ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft (raw, json)
Hash identifier:          VK8mzi/RnyxBFMZBsLIPkoZKKf8DdQYfszJVMbd3jQ8=
Subject key identifier:   1D:19:70:06:40:82:85:0F:28:C8:16:6B:01:3C:DA:8F:AA:57:93:3D
Authority key identifier: 7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8
Certificate issuer:       /CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
Certificate serial:       0199FAD7D77297247535E05855EE7C5319A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
Manifest number:          15FF
Signing time:             Sun 19 Oct 2025 05:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:13 +0000
Files and hashes:         1: 9sc_Z6wsh2xqSgSi_D7ZTYMetBM.roa (hash: ysO7qNEauUD+3RJnhREGXDUT/3d77gpAizI5YbhTLSM=)
                          2: ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl (hash: 040LfuK0vkKX0iVeQXZ4wY9U9p4VtmFk4bqlKTc9rB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:d7:72:97:24:75:35:e0:58:55:ee:7c:53:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b0af9738c9f799b56f4b9017bf821b4fca135b8
        Validity
            Not Before: Oct 19 05:01:13 2025 GMT
            Not After : Oct 20 05:01:13 2025 GMT
        Subject: CN=1d1970064082850f28c8166b013cda8faa57933d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:6d:bc:7f:b5:6b:1f:71:fc:3f:9d:76:03:
                    46:82:dd:29:3d:19:47:4c:a4:9c:02:74:08:78:77:
                    be:4e:b9:64:95:a1:09:3f:1e:0f:c3:c3:57:5c:07:
                    98:0f:35:3c:ec:e6:13:23:e9:75:fe:85:a7:82:9a:
                    75:f0:d1:4b:ad:c2:60:db:64:1d:ab:02:47:ea:e4:
                    4b:c4:2d:82:d6:ca:40:fa:62:65:dd:e3:70:bb:5e:
                    ab:bf:38:9f:29:3b:e8:ec:f4:5f:f8:2d:96:19:e7:
                    a6:96:53:b2:ed:6b:95:27:ca:91:3b:8b:44:fc:b1:
                    77:d0:36:ae:2a:a1:99:1d:66:25:fa:90:d6:01:bf:
                    77:49:f4:06:6f:07:9f:9e:e6:c5:21:a4:4b:9c:b8:
                    24:06:5a:c3:ce:c6:4a:9d:c0:f6:41:bc:6e:8f:03:
                    f7:db:a7:9d:65:9b:a1:5d:ca:db:a2:24:0c:7f:f5:
                    21:51:33:fc:c5:84:70:01:46:16:21:ac:93:d5:2a:
                    a1:60:0b:f6:55:d6:ee:38:aa:fc:df:f7:c3:d6:de:
                    a4:b8:ed:7d:4f:db:5e:60:e1:3c:05:1f:a8:fa:24:
                    c1:1c:58:43:fe:1d:11:7d:fa:49:13:a9:25:3e:35:
                    94:59:0f:7f:e1:04:4c:8c:57:17:7f:c3:3b:be:82:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:70:06:40:82:85:0F:28:C8:16:6B:01:3C:DA:8F:AA:57:93:3D
            X509v3 Authority Key Identifier:
                keyid:7B:0A:F9:73:8C:9F:79:9B:56:F4:B9:01:7B:F8:21:B4:FC:A1:35:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ewr5c4yfeZtW9LkBe_ghtPyhNbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/721e70-f442-4252-aea0-ca12f53d7b34/1/ewr5c4yfeZtW9LkBe_ghtPyhNbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:80:e2:31:28:04:73:a1:bb:86:ea:02:2b:64:f3:98:b1:21:
         17:39:86:05:0b:05:1d:49:b7:8d:87:df:bb:e9:6e:38:2a:c8:
         9c:56:62:3d:5c:34:2e:22:0d:7e:1c:14:1c:c6:91:e9:d8:26:
         01:e2:39:40:5e:e7:13:2e:31:22:e8:83:af:83:01:32:68:3f:
         e0:95:ab:2d:14:ca:5e:bb:50:13:7b:22:53:7b:08:f0:c0:ed:
         68:c8:24:91:05:36:8d:a7:61:d6:cd:66:dc:0c:24:c1:43:69:
         7c:36:d7:51:15:d3:48:6c:87:97:77:7b:2a:86:e8:c0:cc:f2:
         92:0c:2d:62:57:5a:ad:f1:a3:8e:a8:87:64:51:e5:b7:83:1a:
         34:ee:3e:67:5c:7d:13:ef:1a:9a:51:7e:4a:e3:93:a7:56:10:
         b7:84:6e:ec:9e:e5:15:2c:87:e5:b8:48:fe:50:fc:a1:28:58:
         e9:57:ac:f6:a6:aa:a9:55:40:97:78:cc:bb:23:85:6f:e4:f2:
         2a:97:68:a8:bb:46:40:89:a7:ae:05:72:10:75:f1:0d:ac:ed:
         fe:93:79:4a:e7:70:ac:6d:c3:e4:7e:d8:5e:b1:7a:9b:19:74:
         45:fa:df:ff:1e:50:30:52:30:71:92:36:49:bf:1d:92:a7:2e:
         4f:a4:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:50 2025 by rpki-client