Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
File:                     7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft (raw, json)
Hash identifier:          /MKQrzJASAZY8jLlq41OAR/x/bs91yJdrBp7xQX12lo=
Subject key identifier:   19:64:FC:F4:04:FC:4D:CB:52:75:F9:75:C3:30:A0:87:0B:7D:A0:52
Authority key identifier: EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64
Certificate issuer:       /CN=eccfdaee1e9eabd80237602961baa25abc69cd64
Certificate serial:       0199FC8F90CC2089A9D988E2A6F9E3FF7F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 13:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:31 +0000
Files and hashes:         1: 7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl (hash: YGINEFJJ/Hd0iwYldyMF3hJcUBuoJbLSEXfz4BFWTNI=)
                          2: wzZnZqQVK_Z4mBu6T59L4a0o0-w.roa (hash: bjMUZxA43ldHX1PFJUIjXjtsR4ch9O8R/snu05/5Ez0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:90:cc:20:89:a9:d9:88:e2:a6:f9:e3:ff:7f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eccfdaee1e9eabd80237602961baa25abc69cd64
        Validity
            Not Before: Oct 19 13:01:31 2025 GMT
            Not After : Oct 20 13:01:31 2025 GMT
        Subject: CN=1964fcf404fc4dcb5275f975c330a0870b7da052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a9:cf:c2:0d:0b:f0:81:cb:b7:21:40:07:09:
                    7b:f3:21:20:9c:60:90:19:0a:98:eb:33:40:b8:a3:
                    fa:4e:6b:04:52:c6:6e:69:83:db:3a:fa:79:a9:9e:
                    b7:5f:52:b3:16:65:4e:66:fa:25:39:49:18:46:de:
                    ea:90:39:2c:41:be:a8:40:5a:cd:31:19:e2:f9:3c:
                    89:b9:51:90:de:d8:bb:8f:03:04:4e:07:2d:c5:23:
                    00:a1:71:91:25:0c:7b:1d:3a:d8:97:2e:15:88:b3:
                    2b:1b:7a:62:b2:f9:f7:c2:66:90:63:b9:33:47:be:
                    d1:21:11:8c:c3:cc:57:96:08:ca:ee:7a:f2:f7:d4:
                    44:c1:3c:a1:8b:86:2b:90:fc:90:51:22:7a:80:55:
                    7b:c2:86:26:bb:40:8d:7c:ff:f0:ed:b2:3d:d4:71:
                    d2:2a:45:45:82:00:4f:d7:9b:c9:bc:4b:9d:19:2b:
                    fe:39:eb:fb:4b:f9:cb:ee:40:8a:eb:8e:5c:a2:5c:
                    9f:c1:ae:6f:c9:14:24:fd:42:93:2e:c5:5b:78:6f:
                    59:06:c8:d5:e9:ca:95:af:87:9c:e5:f7:68:42:95:
                    44:50:a1:bc:f8:84:ec:c3:38:bf:4f:20:d0:bc:1f:
                    d9:75:74:0b:a9:6c:b0:db:fb:33:3e:5f:be:ef:82:
                    d5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:64:FC:F4:04:FC:4D:CB:52:75:F9:75:C3:30:A0:87:0B:7D:A0:52
            X509v3 Authority Key Identifier:
                keyid:EC:CF:DA:EE:1E:9E:AB:D8:02:37:60:29:61:BA:A2:5A:BC:69:CD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/c2a5bd-5f28-46f9-a414-3f1c1523a123/1/7M_a7h6eq9gCN2ApYbqiWrxpzWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:3a:50:fd:67:3c:46:6e:81:8b:bd:e7:8f:f8:84:e0:58:
         26:e3:8c:63:e6:ec:dc:9a:70:60:66:49:f6:d1:ec:30:4d:7d:
         a0:71:52:1f:79:3f:3f:eb:96:d8:e1:3d:42:8b:5e:cb:fc:4e:
         9a:dc:51:0a:4c:39:a2:dc:be:8c:a3:2a:15:9c:07:6a:1f:37:
         36:95:f7:24:68:1a:51:e4:57:0b:0f:2d:42:9e:af:81:55:08:
         94:8b:5c:13:d9:3d:3c:a3:d8:30:9c:5a:f1:10:34:f2:ac:eb:
         2e:75:5b:e5:65:8a:85:e9:65:55:f4:09:73:a4:b2:0a:af:b4:
         d0:b1:50:b7:0b:0c:26:04:f9:da:71:d0:52:2e:45:08:b8:13:
         e4:57:07:71:3c:e7:9f:7a:de:40:c4:54:3e:f2:4d:c0:16:df:
         15:18:70:fd:7f:6a:b2:94:18:cc:7e:aa:11:6d:1c:e7:be:d7:
         ca:2c:88:a4:5e:ac:14:ea:a5:d8:2b:2f:8d:65:ba:7a:d7:e5:
         50:66:1b:02:7b:e8:36:cb:01:5f:18:90:58:a9:7c:21:c3:55:
         8d:26:c0:ad:e1:36:0b:d7:22:0a:df:2c:05:a5:04:d9:0d:0b:
         1b:99:e5:2b:ff:ef:be:72:2e:4d:f3:9e:e7:28:e1:35:80:0b:
         78:9b:ac:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:37 2025 by rpki-client