Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          8FDzY6XkbUQEWmGVMl1/RtohCZd8KYRAMwuW5aETa+8=
Subject key identifier:   3E:EE:BE:8C:CC:B8:53:3D:49:F1:91:15:93:8E:56:FF:65:BF:81:98
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019A02FE975505CAE10D162D102AD8720328
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0BBB
Signing time:             Mon 20 Oct 2025 19:00:30 +0000
Manifest this update:     Mon 20 Oct 2025 19:00:30 +0000
Manifest next update:     Tue 21 Oct 2025 19:00:30 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: mHAYrcecGNYMU6VOvDl1An5p/IdWQX1aqgi9L7p1BC0=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:fe:97:55:05:ca:e1:0d:16:2d:10:2a:d8:72:03:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Oct 20 19:00:30 2025 GMT
            Not After : Oct 21 19:00:30 2025 GMT
        Subject: CN=3eeebe8cccb8533d49f19115938e56ff65bf8198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d5:42:ec:7d:9e:74:0d:d2:51:76:c4:fb:5e:
                    28:96:a3:c6:ec:13:3d:e6:9c:91:d6:df:84:54:c3:
                    9c:49:e5:a5:1a:38:2e:16:07:bf:9a:1c:29:92:91:
                    8b:ae:2d:b0:bb:c3:ad:62:45:c4:51:8c:b7:f7:7f:
                    6e:b7:ec:fc:a7:9f:f2:aa:a4:d9:db:0c:b9:68:8a:
                    c6:e5:a5:a1:ab:b0:da:7e:cd:33:a5:1c:04:f7:40:
                    1f:5a:0a:fa:68:03:4f:5b:d0:0f:c1:d6:a8:35:2f:
                    c1:bd:36:eb:b6:81:fd:00:e4:af:de:5e:5e:66:c6:
                    88:48:91:ed:24:78:8f:c4:53:e0:87:b9:c6:e0:61:
                    42:cf:e5:5e:f2:35:84:24:21:cf:45:8b:41:59:46:
                    2e:c3:a0:a4:20:9c:35:26:3f:72:38:34:54:d7:8b:
                    1e:88:8e:2e:81:02:c4:c3:43:99:71:3b:17:70:bf:
                    24:13:99:df:6a:2d:a3:c4:59:b4:16:9e:c3:70:d5:
                    20:f0:b2:68:4e:a3:d5:2e:ef:e2:95:2b:88:c1:a8:
                    77:f0:40:0d:c8:05:a9:f7:ba:37:40:ca:c3:61:74:
                    bb:15:e3:90:16:9a:4f:88:1a:29:a5:f7:c8:df:07:
                    00:92:80:55:78:67:b8:a1:43:a6:4e:bc:1a:3e:58:
                    4e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EE:BE:8C:CC:B8:53:3D:49:F1:91:15:93:8E:56:FF:65:BF:81:98
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:02:96:ca:08:9e:0e:a8:1d:90:27:58:7f:62:02:bd:13:
         fa:af:2a:96:16:c5:9a:89:71:f5:aa:fd:f6:22:41:81:6a:75:
         4b:ec:45:41:f7:22:15:db:ba:13:12:a7:da:ba:be:a3:89:59:
         1b:2c:fa:34:b3:f7:2c:74:55:11:4f:e7:0a:08:d5:2e:92:b4:
         fa:b1:de:0e:7a:36:fb:75:3b:ea:d5:50:43:54:b2:bc:8e:83:
         05:15:af:17:40:dd:dd:c0:1c:63:26:50:43:f5:cf:49:ac:13:
         43:ac:d2:c6:d8:96:f4:20:39:93:b9:c5:4d:32:e2:3a:01:3e:
         7d:0f:a0:9c:de:d0:58:c8:83:b6:f2:43:9a:e9:04:33:96:86:
         b6:9c:49:25:bf:ce:a7:4b:5b:4f:2d:2b:42:ae:e5:98:ac:25:
         f4:29:73:3d:a8:57:d6:34:60:19:30:0b:d8:47:f8:65:bd:7f:
         e1:6a:9e:5e:56:25:fc:61:7b:85:2e:ee:83:5b:64:9f:d7:2d:
         4c:9f:62:35:bf:b2:64:6d:fa:c8:8a:56:51:76:41:bf:e2:eb:
         74:20:04:f3:83:b5:25:cf:47:2c:37:17:06:88:1d:27:1b:4e:
         a8:55:e4:48:1a:19:d5:61:b2:da:ba:48:97:1d:59:38:46:9c:
         46:7d:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:11:44 2025 by rpki-client