Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          n/G39nWM5+7nXajghvzZWa1nJ7zEfzNQQRi0zzC5Rcw=
Subject key identifier:   17:64:3B:59:59:D7:41:A5:8F:50:31:C7:5C:82:0D:B5:D6:4F:42:9B
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       0199FC58BCBCF4B7F4A056032C11534C2DF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          1624
Signing time:             Sun 19 Oct 2025 12:01:37 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:37 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:37 +0000
Files and hashes:         1: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: Pvn6SRaXfc+CrdEjK/rsEpHTwOmUfosRSUP3tDR77pk=)
                          2: DuaqfpWRjQCcl_wmNFLt00a2Vw0.roa (hash: rQv6lxTZYs4XDzxYfgAGiCr8L0iuSbohO7siOw9JGpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:bc:bc:f4:b7:f4:a0:56:03:2c:11:53:4c:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Oct 19 12:01:37 2025 GMT
            Not After : Oct 20 12:01:37 2025 GMT
        Subject: CN=17643b5959d741a58f5031c75c820db5d64f429b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:8f:a0:b7:42:96:4d:c3:3c:a1:68:cd:96:
                    f8:91:49:41:8a:e5:0d:dc:b5:7f:f3:31:43:ac:2d:
                    f3:5b:6b:ae:a7:65:3a:2c:9d:94:9d:1e:4a:b5:cc:
                    fb:d6:f5:a0:db:cf:27:a8:d7:13:c2:9a:f8:8b:ba:
                    07:e8:68:6c:78:52:63:25:fe:76:ff:b3:39:32:0d:
                    74:dd:04:09:ee:ca:81:97:7b:c7:fb:a7:6e:ab:df:
                    f3:19:96:7d:70:e2:b6:89:0f:a3:b2:3c:5a:15:fe:
                    1e:3b:d1:0f:8f:9c:ae:07:ae:b3:f4:f9:7f:d6:62:
                    ea:ed:bf:6b:80:b7:50:f5:9b:bb:a1:c9:b5:49:ea:
                    4e:6f:f1:db:1d:18:d9:fc:d1:ad:ca:42:1c:3b:1c:
                    fd:9b:ae:79:3d:39:4b:b8:02:13:32:53:62:5f:12:
                    4e:3e:fa:5e:52:ab:3a:52:e0:ed:b3:72:b7:e4:01:
                    1b:0d:bf:84:09:2c:5f:3f:76:41:f9:e5:1a:d0:43:
                    91:63:f8:2f:f7:68:a1:e3:f9:dc:46:ee:01:18:a1:
                    56:58:87:11:60:ff:4c:cf:56:66:b4:c3:a1:f5:32:
                    ca:48:e8:db:c2:3d:b0:02:8a:8a:90:97:86:af:cf:
                    d8:d1:8e:89:b0:db:58:46:57:1d:f0:f2:b0:5e:cd:
                    14:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:64:3B:59:59:D7:41:A5:8F:50:31:C7:5C:82:0D:B5:D6:4F:42:9B
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ee:db:21:db:07:c4:27:60:32:90:ec:86:64:88:38:8c:76:
         b2:0e:51:cd:6d:c1:1c:a4:62:88:bc:0c:41:74:10:7b:fa:35:
         45:d6:81:25:ab:2e:47:fd:5a:f6:8c:4a:fd:60:53:22:31:50:
         4d:9e:8c:36:c3:c6:c1:83:6c:13:93:79:fc:b1:28:ad:64:de:
         87:36:31:ae:d9:94:7a:bc:a1:68:2b:22:b8:88:d9:3c:73:77:
         28:08:0b:85:02:f9:0f:fb:31:bf:b1:3b:3b:7f:a9:cd:53:3d:
         3e:31:13:83:cd:a2:b5:bd:52:6d:fd:1c:65:eb:19:91:90:f3:
         67:d3:fb:c0:6c:59:f7:0f:d0:ae:5e:8c:20:4f:23:78:99:de:
         a6:77:fe:a6:9e:98:75:19:17:2c:d3:8f:6d:5e:f7:02:9b:82:
         78:af:4a:24:cd:83:8e:e9:d3:e1:36:c9:a4:27:0b:aa:0a:01:
         dd:15:b5:29:d5:42:e4:59:1e:3d:92:20:96:06:9f:b5:dc:57:
         4f:4f:96:98:9e:e1:fc:93:61:7b:4a:df:30:3d:88:30:e5:2f:
         16:85:6b:09:c1:74:76:aa:16:20:7e:6a:1f:d0:d7:2a:97:a1:
         59:e0:c3:10:cc:c7:0a:a1:2d:09:25:58:71:0f:49:12:9a:8b:
         11:a1:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:42 2025 by rpki-client