Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
File:                     7sI7DnggvD7NT4cI57mQ7daSDV0.mft (raw, json)
Hash identifier:          mdipVg1TMdlTUCc7BTx1E5urBNoPxIjICxbS3EPQbW0=
Subject key identifier:   17:22:C9:F2:A8:B1:BC:22:12:E3:07:87:D5:CE:7E:75:D3:21:25:0B
Authority key identifier: EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D
Certificate issuer:       /CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
Certificate serial:       0199FC219B8EAC9E540B7894A519656FE040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
Manifest number:          06A7
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: 7sI7DnggvD7NT4cI57mQ7daSDV0.crl (hash: ILqD4gj/JlXEZsMucEfrnFK9KrwAa4MNdixNbAdQvRQ=)
                          2: cOvqfWc0KSjggAuY6_9kDhPxPi4.roa (hash: qOhF3wsSLpYe0ueqSqnl30WHCmyv59VHWzhvhRJuKFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:9b:8e:ac:9e:54:0b:78:94:a5:19:65:6f:e0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec23b0e7820bc3ecd4f8708e7b990edd6920d5d
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=1722c9f2a8b1bc2212e30787d5ce7e75d321250b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:bc:37:66:75:a8:28:14:70:85:02:a3:eb:
                    e9:8e:e7:3c:f2:b4:01:9c:72:5b:81:96:7b:56:44:
                    60:8c:94:0c:3a:27:75:bf:15:b8:b2:ba:a1:32:b5:
                    da:f7:51:b4:86:77:74:fa:44:4c:1d:53:d2:cb:39:
                    3a:44:a6:e8:41:b0:f0:a1:04:3a:40:44:66:3a:aa:
                    26:7c:0a:f7:69:e0:c8:dd:7a:7a:87:79:6e:ad:9e:
                    9e:5f:18:44:39:9e:f6:73:1a:99:46:f4:cb:f4:5f:
                    d4:f0:dc:4e:23:36:55:0b:74:03:71:7c:4b:2e:bd:
                    74:a5:72:09:32:7c:e4:e3:27:4a:5d:b0:bb:d4:23:
                    42:d0:74:19:cc:a9:75:09:dc:40:6c:6a:c3:67:65:
                    0b:d5:93:a7:f8:f2:75:d3:42:b6:dc:16:53:f6:c7:
                    a5:c0:71:8c:b8:40:7f:dd:71:d0:d0:fd:44:e6:18:
                    a5:54:a6:2b:2e:93:1e:c6:d6:e2:6e:db:28:7c:35:
                    0e:8d:53:3b:8a:50:ac:f3:9e:f4:21:b9:8c:43:58:
                    81:f9:27:a8:16:33:19:0f:1e:f0:44:8b:14:d5:57:
                    38:26:83:02:07:b8:ef:51:0c:69:1e:0c:09:91:84:
                    51:1c:a9:eb:ec:c4:cd:74:e5:f1:15:5c:26:35:e6:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:22:C9:F2:A8:B1:BC:22:12:E3:07:87:D5:CE:7E:75:D3:21:25:0B
            X509v3 Authority Key Identifier:
                keyid:EE:C2:3B:0E:78:20:BC:3E:CD:4F:87:08:E7:B9:90:ED:D6:92:0D:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7sI7DnggvD7NT4cI57mQ7daSDV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/35aa48-3ed6-4b72-aa76-8cebc5d16489/1/7sI7DnggvD7NT4cI57mQ7daSDV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:60:06:95:04:b5:50:08:30:b5:76:3e:cf:91:6a:79:ac:57:
         ca:d4:07:9f:c7:70:6f:cb:c5:19:bc:99:7c:98:cc:2a:2c:89:
         27:d7:58:7e:6e:78:bc:82:3e:ff:13:59:b5:a4:57:de:b2:ae:
         54:8f:1b:7e:21:25:12:88:d8:61:aa:5e:ee:e2:f4:3c:b9:35:
         d8:12:a0:49:11:b6:3b:72:d7:ff:86:0d:d6:3a:10:c3:0b:48:
         6e:d7:97:78:96:2c:80:aa:5c:32:81:63:76:9b:41:47:91:bd:
         2b:a4:1d:96:57:d2:2e:ac:fd:37:fc:15:96:ef:ff:22:f9:82:
         ca:15:91:6f:0d:49:85:7a:37:5d:6b:03:79:10:ca:44:d2:e7:
         45:e8:b5:92:d9:4c:e3:22:cc:d6:c7:aa:30:ea:a0:f2:92:69:
         bc:0b:bc:16:b5:71:6a:bb:be:5a:2f:42:9d:50:65:58:af:08:
         79:89:f9:1d:e0:fe:af:33:66:18:a1:57:30:bc:d0:d3:b4:92:
         61:28:66:d1:bb:d2:d3:8e:7f:a0:5e:4f:80:fc:8b:27:81:f2:
         03:a8:30:1e:87:9e:c2:67:91:8c:3b:8c:6c:03:69:a1:1c:44:
         60:b6:ed:e8:50:e2:59:cc:ab:7e:67:3a:43:8d:32:0a:85:20:
         d3:fc:e2:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IZuOrJ5UC3iUpRllb+BAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYzIzYjBlNzgyMGJjM2VjZDRmODcwOGU3Yjk5MGVkZDY5
MjBkNWQwHhcNMjUxMDE5MTEwMTI0WhcNMjUxMDIwMTEwMTI0WjAzMTEwLwYDVQQD
EygxNzIyYzlmMmE4YjFiYzIyMTJlMzA3ODdkNWNlN2U3NWQzMjEyNTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxy8N2Z1qCgUcIUCo+vpjuc88rQB
nHJbgZZ7VkRgjJQMOid1vxW4srqhMrXa91G0hnd0+kRMHVPSyzk6RKboQbDwoQQ6
QERmOqomfAr3aeDI3Xp6h3lurZ6eXxhEOZ72cxqZRvTL9F/U8NxOIzZVC3QDcXxL
Lr10pXIJMnzk4ydKXbC71CNC0HQZzKl1CdxAbGrDZ2UL1ZOn+PJ100K23BZT9sel
wHGMuEB/3XHQ0P1E5hilVKYrLpMextbibtsofDUOjVM7ilCs8570IbmMQ1iB+Seo
FjMZDx7wRIsU1Vc4JoMCB7jvUQxpHgwJkYRRHKnr7MTNdOXxFVwmNeYHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBciyfKosbwiEuMHh9XOfnXTISULMB8GA1UdIwQY
MBaAFO7COw54ILw+zU+HCOe5kO3Wkg1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYt
OGNlYmM1ZDE2NDg5LzEvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zNWFhNDgtM2VkNi00YjcyLWFhNzYtOGNlYmM1ZDE2NDg5
LzEvN3NJN0RuZ2d2RDdOVDRjSTU3bVE3ZGFTRFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmAGlQS1
UAgwtXY+z5FqeaxXytQHn8dwb8vFGbyZfJjMKiyJJ9dYfm54vII+/xNZtaRX3rKu
VI8bfiElEojYYape7uL0PLk12BKgSRG2O3LX/4YN1joQwwtIbteXeJYsgKpcMoFj
dptBR5G9K6QdllfSLqz9N/wVlu//IvmCyhWRbw1JhXo3XWsDeRDKRNLnRei1ktlM
4yLM1seqMOqg8pJpvAu8FrVxaru+Wi9CnVBlWK8IeYn5HeD+rzNmGKFXMLzQ07SS
YShm0bvS045/oF5PgPyLJ4HyA6gwHoeewmeRjDuMbANpoRxEYLbt6FDiWcyrfmc6
Q40yCoUg0/zi2w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:21 2025 by rpki-client