Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          nk+qAvS6nzVCJp1o6V9E0wu6qNsD3kWAd38Cg7sf7yE=
Subject key identifier:   D3:EB:4F:58:13:9C:F1:96:17:AD:66:74:F7:49:59:80:C0:86:BC:B6
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       019A0110F3C61392A3D0341BBD85B23286AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0BBA
Signing time:             Mon 20 Oct 2025 10:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:19 +0000
Files and hashes:         1: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: yPGFwSuafPgQp42J5xd+fEkiUIwYEoZfBz8ZX9sTt/8=)
                          2: GhTmp19MKGrha68k8FSg5O3MOXs.roa (hash: msOVTHZ3+no8UhxlXFgsYby23Ic3zy+iOJwGwYJ533I=)
                          3: Im4zxAMioTMqKC_fblhr89BdW9U.roa (hash: PwyZcrDl2J3l1qTk1V9UdAnL8AN0a6ZWTpBERNBo1l8=)
                          4: MumbOUHt0sHDCso0-2Ld1ziw4ko.roa (hash: Wd99B13Tv2rYBvmAX16EYI4hqMJzUtPVIMZe+9Oq6HU=)
                          5: aubQYKYuI6MIHGp2nchWjbFhUU4.roa (hash: 2F+ILSELYXvb+ZAKX5VNzDJvloBcFe6YEc5yS5L5tl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:10:f3:c6:13:92:a3:d0:34:1b:bd:85:b2:32:86:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Oct 20 10:01:19 2025 GMT
            Not After : Oct 21 10:01:19 2025 GMT
        Subject: CN=d3eb4f58139cf19617ad6674f7495980c086bcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:5c:90:56:96:73:b3:8a:c8:5a:c1:b4:53:
                    e1:14:36:04:e5:a0:7e:1d:6a:76:15:eb:c7:34:bb:
                    df:8c:c1:c1:09:b9:55:f4:0d:15:2a:1f:01:32:0d:
                    47:a9:b7:b7:94:96:5d:e4:ce:5b:12:8f:93:71:17:
                    24:e8:4f:d3:d3:fb:cd:d9:95:d6:98:aa:ff:c6:b0:
                    46:e5:50:57:bf:2a:31:2c:37:7d:b7:07:05:a9:ac:
                    e4:3d:9c:74:80:ba:06:45:02:71:ab:eb:bd:0c:c6:
                    62:83:13:26:48:c0:6c:f5:80:d9:73:36:e3:19:e5:
                    71:ac:e1:6d:48:60:3d:ff:df:46:54:d2:8d:9f:7a:
                    47:1e:b6:96:a6:87:31:b0:20:32:60:48:ad:52:62:
                    d7:e6:f7:13:85:d3:bf:fc:96:8e:66:3b:53:a4:d0:
                    90:4a:01:12:80:24:41:e0:cb:10:c6:99:bb:22:60:
                    9d:22:4a:21:8e:eb:34:7b:bd:4e:f3:d8:76:d5:64:
                    20:09:c4:b8:ca:95:27:00:d7:d5:34:80:a2:83:a1:
                    86:32:c6:1d:ea:df:e2:82:80:22:d2:cd:aa:04:bc:
                    54:2b:62:6d:18:94:ba:fe:8c:9c:ac:c6:98:bb:81:
                    23:40:e0:da:fb:86:1e:0f:9f:f1:42:99:ec:be:ec:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EB:4F:58:13:9C:F1:96:17:AD:66:74:F7:49:59:80:C0:86:BC:B6
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ac:96:5f:68:cb:12:6f:dc:ee:23:54:cc:84:c2:2d:2f:98:
         16:dd:37:c9:a7:c2:89:95:ca:d6:3f:f5:98:53:2c:92:94:d9:
         ce:0f:bf:7f:21:2a:e0:58:0b:41:69:40:5d:f0:ca:0f:14:18:
         b8:df:0e:a8:61:2d:e0:9d:0f:b6:a3:e1:3c:27:08:73:70:f1:
         ff:6e:c0:7a:c9:47:8a:a3:0f:78:2d:64:46:c1:ba:64:bb:cb:
         38:04:56:57:50:2c:b1:72:4d:db:6c:7f:71:0c:25:a0:bd:21:
         08:83:4d:05:d9:ea:53:1d:3b:54:fc:94:a5:0f:6d:74:c6:42:
         dc:55:a7:0a:54:a7:b7:91:7a:84:0d:bc:a3:6c:ba:7e:f0:32:
         a0:58:ed:38:48:11:73:d3:98:b1:e9:31:ba:7d:5f:d2:70:a5:
         e6:a7:00:d0:14:bb:a6:d8:49:ea:da:c5:6a:5e:87:5a:df:6c:
         ab:e5:ae:4a:a5:b3:3c:ab:35:6e:43:c6:55:a4:85:eb:0a:5d:
         1f:df:a8:ba:b1:4a:e3:70:3b:de:33:1e:c7:09:8c:f8:00:17:
         da:b1:50:21:1f:a1:c5:d1:40:33:c9:e1:de:e9:75:da:46:84:
         16:66:3d:22:77:fc:ec:e2:a4:f5:5b:84:fe:bb:0f:0c:b4:f2:
         0a:fb:11:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:01:54 2025 by rpki-client