Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
File:                     7_ZbcAAg4w1z07HfeCceVD4wjzo.mft (raw, json)
Hash identifier:          qfIUJV1sLrqkGW3vxFelRjDEc/V0jItcZhOdgfGLoDw=
Subject key identifier:   39:51:30:41:B8:81:C6:6A:05:1F:FB:51:6A:FC:26:83:C0:6F:04:74
Authority key identifier: EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A
Certificate issuer:       /CN=eff65b700020e30d73d3b1df78271e543e308f3a
Certificate serial:       0199FCFDB4A1036B8EBC944C11E1C259AFDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
Manifest number:          0E48
Signing time:             Sun 19 Oct 2025 15:01:49 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:49 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:49 +0000
Files and hashes:         1: 7_ZbcAAg4w1z07HfeCceVD4wjzo.crl (hash: tu87bDYsY2YjM0rKabruOaXRC9lCta0z7u/mp2jnO3E=)
                          2: AdFVK1KtSnf7ZNfSr9y68mDkPRc.roa (hash: /eDjhHT0EL0eZWQnzwFCLaBMZZnRebciW+q12o5OJ+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:b4:a1:03:6b:8e:bc:94:4c:11:e1:c2:59:af:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff65b700020e30d73d3b1df78271e543e308f3a
        Validity
            Not Before: Oct 19 15:01:49 2025 GMT
            Not After : Oct 20 15:01:49 2025 GMT
        Subject: CN=39513041b881c66a051ffb516afc2683c06f0474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:38:cc:ec:36:33:d1:99:f3:f6:d8:71:69:be:
                    3b:ab:a9:87:39:e5:ba:e7:e3:04:2f:e5:54:17:30:
                    ce:8d:6d:f9:6d:31:94:61:36:f2:9e:7f:72:a4:0b:
                    0f:57:7f:2e:f3:d5:5d:b4:57:84:6c:15:88:7e:45:
                    3d:f8:18:36:18:1f:ba:fb:10:56:f3:94:75:06:b7:
                    7c:9d:0c:f8:96:1f:33:b5:4d:30:38:85:ec:cd:ef:
                    f3:81:b5:95:d4:53:e0:b7:b6:b4:35:39:29:39:ab:
                    f5:4d:a9:43:9d:43:59:0f:49:10:59:76:59:de:66:
                    a6:ff:e3:64:6a:74:a5:74:a9:de:24:70:fd:c4:f3:
                    60:cc:0b:8d:4f:13:2c:14:e6:98:d1:96:be:9a:5d:
                    bb:89:e4:2b:3b:f2:67:d4:96:8f:1a:85:b6:4c:eb:
                    75:d0:60:e4:87:16:7e:a0:c8:36:68:84:a7:ee:c8:
                    c9:35:b0:02:07:9b:1e:f7:f6:5f:43:0f:2c:bb:73:
                    33:bf:8a:04:8b:62:27:7a:a4:60:4d:5a:c3:da:2b:
                    a3:03:64:ab:9c:49:c1:24:aa:52:4c:67:c7:e7:63:
                    88:70:e6:ff:12:78:e2:3b:8e:cb:71:a9:4b:93:80:
                    57:76:c4:68:95:1e:da:2a:76:f5:8a:38:65:91:0d:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:51:30:41:B8:81:C6:6A:05:1F:FB:51:6A:FC:26:83:C0:6F:04:74
            X509v3 Authority Key Identifier:
                keyid:EF:F6:5B:70:00:20:E3:0D:73:D3:B1:DF:78:27:1E:54:3E:30:8F:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ZbcAAg4w1z07HfeCceVD4wjzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/22a465-025d-4841-884f-14b20d753372/1/7_ZbcAAg4w1z07HfeCceVD4wjzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e5:3b:ae:4d:7d:1c:08:b9:4f:03:8e:f6:66:c4:32:5f:0f:
         86:03:5a:ef:46:46:7e:c3:4f:ab:71:c5:d5:6a:8e:e2:48:e3:
         02:4d:72:37:2a:6d:05:64:f9:9b:6a:a1:16:30:3f:cf:f9:88:
         0d:41:c3:18:bb:d4:8a:4c:ca:e4:71:67:3a:32:2f:55:83:d4:
         bb:4e:cf:fb:ae:c5:42:7f:4e:ab:33:fb:9a:b0:d8:ab:59:13:
         38:2d:4b:e5:c2:9a:4d:45:4b:4c:c6:f6:75:aa:89:0f:c2:12:
         90:9a:1e:a0:0b:4a:99:dc:b0:90:39:b4:49:b6:1a:b6:15:75:
         c1:04:bf:dd:4f:d0:e3:5d:57:49:70:83:9e:4a:00:7c:cd:52:
         5c:be:1e:34:b2:cb:72:e0:bd:87:47:99:b6:ce:e6:f8:dc:25:
         26:dd:a2:a6:88:c9:8f:c7:a3:77:e5:fc:a1:6a:5b:43:a5:76:
         22:ee:0d:e3:aa:b4:4b:97:be:c0:73:bb:31:3c:28:45:0e:8e:
         51:c2:47:be:48:65:a6:03:91:00:79:e8:5b:d8:28:c7:66:c9:
         65:a2:43:5c:c0:d5:86:00:29:78:b3:7d:21:f6:95:15:23:a4:
         57:f3:71:3f:ab:9a:c0:74:3a:d6:43:75:ef:11:15:61:55:8c:
         a0:9c:68:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:31 2025 by rpki-client