Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
File:                     eXe1XjT_1yB1-92gOaZbNx3jmCA.mft (raw, json)
Hash identifier:          enPKlSKpAaL0gnjtAsTZy2yHTJQPRQHZmD4szx8Es8o=
Subject key identifier:   67:86:07:2B:57:17:EE:0A:5F:D3:BC:66:2C:19:8F:CE:B4:D2:65:2A
Authority key identifier: 79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20
Certificate issuer:       /CN=7977b55e34ffd72075fbdda039a65b371de39820
Certificate serial:       0199FBEAF74524924642D69CCA29E9FFD3D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
Manifest number:          0CFD
Signing time:             Sun 19 Oct 2025 10:01:43 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:43 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:43 +0000
Files and hashes:         1: Tx774YWupF3TJKc5zuGEprJ-8Q8.roa (hash: 6EvMus28/r2hOkn9lsQE7epJ2J6h3GLbCRAmFL/wVzM=)
                          2: eXe1XjT_1yB1-92gOaZbNx3jmCA.crl (hash: OGZhcd8FUktwreG9hKi6l+/fbwPm2UF3SddS+hs4W/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f7:45:24:92:46:42:d6:9c:ca:29:e9:ff:d3:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7977b55e34ffd72075fbdda039a65b371de39820
        Validity
            Not Before: Oct 19 10:01:43 2025 GMT
            Not After : Oct 20 10:01:43 2025 GMT
        Subject: CN=6786072b5717ee0a5fd3bc662c198fceb4d2652a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:db:fe:05:75:1c:27:97:7b:a7:6f:a8:f4:
                    8d:41:78:97:2a:7e:aa:c9:74:bc:28:03:f0:72:28:
                    55:96:a2:9b:3e:f6:3c:4a:24:bf:99:b9:a9:c7:30:
                    f8:11:54:b7:8b:9d:a5:1a:6f:ef:a9:b9:b1:c4:53:
                    d8:b4:cd:15:9d:18:e7:9f:9e:ba:3a:c5:68:2b:05:
                    ac:f7:7d:cb:15:3f:43:8b:c3:9b:ec:42:1d:0b:c0:
                    87:ea:71:48:31:74:69:c0:aa:11:1d:38:47:e4:c3:
                    85:84:6f:21:27:9e:4b:65:09:4e:9e:b0:be:d3:ff:
                    4e:c9:34:56:70:9a:c5:4d:58:f6:db:a7:c8:94:11:
                    ac:b1:a4:05:9c:8b:37:23:84:10:62:0f:1a:ed:23:
                    ab:73:f9:e1:1c:fc:24:b5:f6:aa:cf:84:d9:a9:94:
                    8f:ac:f7:7b:04:96:62:f2:18:e1:93:07:80:b6:10:
                    7d:c3:5d:a2:3c:f2:28:26:00:99:93:1a:04:50:91:
                    47:c1:39:70:3b:e6:12:8d:ba:99:99:03:23:fd:bb:
                    34:7c:ee:3e:6a:41:6e:b5:f0:0d:a8:fd:4a:14:92:
                    99:f5:fc:1f:43:87:a7:f0:77:67:f2:4c:06:42:d3:
                    2d:9a:d7:e1:7e:b2:64:0c:82:82:68:de:cc:0e:3e:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:86:07:2B:57:17:EE:0A:5F:D3:BC:66:2C:19:8F:CE:B4:D2:65:2A
            X509v3 Authority Key Identifier:
                keyid:79:77:B5:5E:34:FF:D7:20:75:FB:DD:A0:39:A6:5B:37:1D:E3:98:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXe1XjT_1yB1-92gOaZbNx3jmCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/bd0a76-04b1-4490-ad04-97eec7cf6093/1/eXe1XjT_1yB1-92gOaZbNx3jmCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:17:e7:ec:0b:e1:7e:39:91:bb:29:1f:20:ef:f7:62:71:
         bd:e0:2b:2e:77:dd:ee:74:ae:52:8c:95:47:2a:b2:a1:84:61:
         9a:bf:ee:9b:13:a5:d2:0c:3b:fd:e9:ce:b9:8f:67:b2:9a:80:
         28:13:58:89:29:b6:7c:e0:29:de:5a:8e:1c:8d:97:9b:2e:1e:
         87:ab:1a:66:65:e0:db:6a:9a:44:0a:62:bf:d9:6e:8c:ff:c5:
         cc:aa:bc:ee:34:39:b6:1d:78:ff:36:71:17:72:f1:70:22:a6:
         fe:60:ff:f8:9d:8d:aa:29:18:71:1e:2b:40:27:67:37:df:2e:
         ab:69:9b:a3:63:a9:84:ac:3a:fc:bf:96:cb:19:d2:81:0c:a7:
         64:35:f3:ff:91:41:68:d1:db:3e:80:b5:5c:10:3f:37:81:17:
         0b:00:25:db:e9:9f:d9:e2:e5:10:52:ad:6d:4e:f5:fb:56:d4:
         1b:e6:6c:ba:65:99:f1:33:e6:6a:b0:5b:2f:64:2b:36:46:ef:
         72:12:fb:9d:2c:1a:f2:cb:e7:07:d5:4d:83:dd:1b:46:d7:13:
         85:e3:4a:19:41:bb:a1:38:9b:a8:c6:80:b9:20:b4:c3:b1:95:
         e0:41:d2:00:05:a1:f9:7f:c1:ee:0e:83:1f:c8:95:a7:a9:1b:
         31:d9:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:08 2025 by rpki-client