Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
File:                     7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft (raw, json)
Hash identifier:          GsdrcmDYrp66h8deDKg721Tx4BSQKC/rBbpzEJdPJrQ=
Subject key identifier:   78:A9:84:78:4A:DE:6B:F0:2A:62:7D:71:43:50:05:AC:37:F7:76:CA
Authority key identifier: EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35
Certificate issuer:       /CN=ee9f79ab1d59847ff1f2e961218c159af264d835
Certificate serial:       0199FBEA8E6C4F6B6E9239F47606994C5B06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
Manifest number:          1000
Signing time:             Sun 19 Oct 2025 10:01:17 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:17 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:17 +0000
Files and hashes:         1: 1-FL3J5HDX1AzUYYBni119Abw4So.roa (hash: Pv3mjZGTlo0qp9Lt3NOhk+KT7N8R0d7IbCiwPWeiu1s=)
                          2: 7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl (hash: ONXDtakk2W/yxDia5Og3tEFsKnDAKAdzzjVCj66LEek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:8e:6c:4f:6b:6e:92:39:f4:76:06:99:4c:5b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee9f79ab1d59847ff1f2e961218c159af264d835
        Validity
            Not Before: Oct 19 10:01:17 2025 GMT
            Not After : Oct 20 10:01:17 2025 GMT
        Subject: CN=78a984784ade6bf02a627d71435005ac37f776ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:02:39:d3:87:b5:23:70:8e:c1:49:8c:ca:33:
                    8a:2d:ac:f8:07:08:3a:ee:c2:b3:47:4d:4d:e4:76:
                    98:67:c4:33:35:d2:5c:b5:14:ed:03:38:54:05:6f:
                    93:df:cc:df:3a:0b:a9:10:6d:36:66:95:66:a8:9c:
                    55:c7:c0:b5:b7:ec:cd:2b:28:ee:e2:50:2a:bc:2c:
                    08:40:02:b5:29:a6:10:b7:53:f1:8a:e4:4d:e2:70:
                    2d:20:d7:a5:26:3e:a8:2f:1d:a2:64:b8:b1:13:a0:
                    f4:a1:03:b5:9a:d1:94:3f:d7:ff:54:a2:86:0e:68:
                    33:18:50:f8:83:87:45:a3:38:29:a7:66:ec:3b:39:
                    40:1a:64:2a:0e:a0:25:20:01:59:5c:08:e6:72:a3:
                    89:a5:08:fe:77:c4:bc:08:b9:80:d3:da:f4:15:67:
                    a6:4a:f2:d1:20:88:dc:c0:a3:f8:69:d6:e2:14:e8:
                    ee:9b:d6:6c:51:13:68:51:fa:e8:33:b0:13:57:36:
                    08:e4:a5:89:ad:4f:47:8e:05:62:5e:b0:dd:00:35:
                    99:4e:d1:e2:c6:37:01:fc:ce:86:ad:84:d8:e9:10:
                    a3:88:9d:9d:b0:cf:6e:2a:15:6b:22:d0:b6:65:81:
                    4d:ef:d8:03:a5:ec:82:91:56:7e:36:41:1f:92:31:
                    7c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A9:84:78:4A:DE:6B:F0:2A:62:7D:71:43:50:05:AC:37:F7:76:CA
            X509v3 Authority Key Identifier:
                keyid:EE:9F:79:AB:1D:59:84:7F:F1:F2:E9:61:21:8C:15:9A:F2:64:D8:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7p95qx1ZhH_x8ulhIYwVmvJk2DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/57ca76-3457-46ed-9324-ea7a17128a05/1/7p95qx1ZhH_x8ulhIYwVmvJk2DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:9e:e1:b1:b4:d6:1d:70:86:7b:da:c0:6f:c5:52:dc:8a:
         34:b9:a6:82:7a:c3:89:19:9d:89:f1:20:36:98:49:49:29:43:
         07:f4:a3:0c:60:bf:34:bd:7f:f9:51:f6:0b:78:2c:75:90:a0:
         16:4a:85:f9:fb:ee:e0:a3:13:b9:60:64:f0:4c:8e:1d:b7:15:
         eb:c0:77:64:b3:45:3f:fb:ce:54:39:a7:ce:b8:3b:2a:17:6f:
         16:c4:16:d3:73:2a:c8:e4:13:11:2f:db:cd:ac:65:3d:b7:04:
         8c:6f:c6:a9:a4:ec:c9:11:a4:37:03:58:b8:4f:98:d0:7a:cd:
         08:59:0a:e3:32:2a:7f:e0:ee:06:e8:cf:98:19:10:6a:16:3b:
         49:f9:3a:02:25:ca:81:f5:7a:d6:19:a3:81:16:60:15:1f:03:
         35:9e:8e:d4:1f:e2:21:9a:04:fe:4b:12:e0:10:87:64:3d:da:
         4b:d9:7e:5c:0b:a7:81:bb:07:05:ed:c5:2a:e5:fc:94:c3:fc:
         74:37:ad:98:58:9a:45:45:7d:0b:89:92:de:10:fd:68:5b:0f:
         89:21:8e:24:66:44:14:68:52:94:43:b2:4a:88:c2:9f:44:01:
         29:c3:e0:69:bf:c8:65:0b:91:d5:e4:8a:eb:d2:2b:ab:3b:a8:
         85:3c:95:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:33 2025 by rpki-client