Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File:                     1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier:          zZ2YnC7EVX2dMwGJQZY+7bOrFq0fJnzQk3ricpPG4ig=
Subject key identifier:   E7:29:DA:3A:60:D2:54:A0:D8:5F:A3:17:39:4D:01:62:F4:33:A1:AE
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer:       /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial:       0199FB4633FCB91FFB5B54AD9658ED167358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number:          01C7
Signing time:             Sun 19 Oct 2025 07:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:45 +0000
Files and hashes:         1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: G+1eq7Iarl1BFNHU8dO7oteRlEeXpUjiBNgOcoXie9I=)
                          2: NXwlVXiim_zGBDcqjx0eFIuUGWk.roa (hash: mei7vYH+6OQG8yo3aepSsguWF4MAUBo4s0J/dbzC4gk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:46:33:fc:b9:1f:fb:5b:54:ad:96:58:ed:16:73:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
        Validity
            Not Before: Oct 19 07:01:45 2025 GMT
            Not After : Oct 20 07:01:45 2025 GMT
        Subject: CN=e729da3a60d254a0d85fa317394d0162f433a1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:32:0d:2b:bd:c2:7b:1a:fe:6b:9d:96:f2:
                    56:1e:67:0b:72:1e:98:20:56:b1:7f:bf:94:70:14:
                    04:77:30:d4:47:63:4a:c1:11:cf:26:d8:a5:4e:fd:
                    7e:16:6f:e1:1e:50:1b:07:e5:61:6f:82:54:d8:0a:
                    09:13:86:a2:4f:60:ed:82:e4:21:1a:a3:61:15:e2:
                    5c:f6:3d:0d:38:5d:fe:de:4c:75:d5:8c:6f:0a:82:
                    87:ce:b1:59:e9:f3:f4:d9:87:b6:9d:26:d5:58:f5:
                    72:4a:79:e5:d5:3f:74:64:a1:8c:80:15:d2:cc:3b:
                    38:b4:e9:9e:28:15:fd:6e:49:80:0d:0f:2a:6e:75:
                    ab:b9:50:87:82:a5:cb:ca:36:c2:4a:99:57:9c:4c:
                    ff:cf:f4:f1:e9:17:ba:25:9b:cf:27:b5:a8:54:b5:
                    b9:e8:b6:75:7c:b4:69:e1:fc:48:3b:e2:8f:49:6b:
                    b6:0d:93:10:ac:cb:23:53:ac:e6:8c:db:c1:ec:68:
                    f1:8b:77:0b:19:d9:2e:b2:d9:20:95:3a:8b:7e:31:
                    b4:f0:7a:08:04:cc:5d:5b:f1:f8:30:4a:34:9d:31:
                    49:dd:50:9c:5b:56:d3:ed:7e:9d:54:de:94:c1:a7:
                    15:6d:fe:76:c2:b6:5d:83:f9:14:0a:a0:a7:74:a6:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:29:DA:3A:60:D2:54:A0:D8:5F:A3:17:39:4D:01:62:F4:33:A1:AE
            X509v3 Authority Key Identifier:
                keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:0e:ae:ff:7f:53:df:b6:47:46:ba:41:ec:3f:47:22:9d:
         f7:5f:9f:14:34:6f:39:23:3a:0a:02:a3:8a:ab:c4:50:49:19:
         ce:38:26:d1:d8:b5:21:02:c7:29:c6:90:c9:6d:9f:d7:bc:5d:
         4c:d6:27:6b:00:98:ba:c8:a9:dc:94:60:f0:93:60:92:df:d7:
         16:97:28:dc:be:06:e3:34:a0:2d:fe:72:30:9b:4c:b8:83:bd:
         c2:c9:04:ff:e8:f0:ed:46:6a:24:ec:95:58:72:b8:14:4d:93:
         58:d5:a9:49:46:dd:40:ad:da:9b:65:13:a7:dc:82:74:b1:47:
         24:37:59:5e:12:89:79:e3:f6:bc:31:51:b4:d8:b3:28:08:12:
         10:14:60:9d:69:38:d0:99:5b:30:39:5a:51:3f:2b:2b:a0:f5:
         28:a2:9f:34:a5:63:8c:80:26:80:a7:72:19:26:47:f9:5b:71:
         66:e9:34:93:13:2c:be:15:23:bb:db:0f:80:07:4c:dc:f0:27:
         dd:10:18:52:06:db:32:fd:c4:17:ea:e4:a0:29:a1:9a:ce:a2:
         61:bc:57:08:48:08:8e:ff:52:05:c3:33:1a:d4:2b:6c:bd:04:
         fe:0f:19:38:54:e7:16:d6:c9:c0:5b:45:1b:93:b1:5c:e4:19:
         dd:ad:5d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:54 2025 by rpki-client