Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File:                     c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier:          CdxAMKcUpM50zkF2259eBh0qlsWFrsch8W6ghgILPPI=
Subject key identifier:   48:87:13:9E:7C:38:49:9E:A3:EE:55:77:F6:85:E4:67:DD:C6:30:2F
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer:       /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial:       0199FBEB13C00D88BC476FE259394609681B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number:          07F1
Signing time:             Sun 19 Oct 2025 10:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:51 +0000
Files and hashes:         1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
                          2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
                          3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: rCvnhCkuhUFpiJG2UDeeOAjHFJUnepcps/zEZHDOKrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:13:c0:0d:88:bc:47:6f:e2:59:39:46:09:68:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
        Validity
            Not Before: Oct 19 10:01:51 2025 GMT
            Not After : Oct 20 10:01:51 2025 GMT
        Subject: CN=4887139e7c38499ea3ee5577f685e467ddc6302f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:71:02:f5:b6:b1:d3:bf:04:36:3d:9c:2b:d9:
                    d9:5e:c4:ce:51:80:92:8b:ab:a4:d9:72:2e:6d:8a:
                    08:9b:25:bd:6e:49:68:4c:d5:fd:8b:bb:e0:87:4f:
                    19:17:2d:fd:1e:f2:91:02:78:bd:85:25:a0:4d:52:
                    fb:82:4d:03:ec:59:6c:bc:9b:34:99:dd:2d:9f:69:
                    dc:fa:4a:4c:bd:35:e3:8f:66:92:9b:59:dc:c6:75:
                    4a:51:b8:44:d8:56:d4:17:fe:60:e3:27:4f:db:f9:
                    7f:4f:36:b9:7f:4b:06:99:3b:25:f5:4d:48:f5:7c:
                    66:f9:5e:21:ed:b3:e2:c9:52:0c:7b:1c:b4:a5:b1:
                    cd:eb:fe:0f:7b:c1:92:fe:15:3a:88:cc:0c:e5:8c:
                    22:8c:f6:4a:29:80:fe:73:7e:2f:ef:96:a8:d1:2f:
                    fd:73:df:a1:fb:c3:80:13:2a:f3:cc:58:b9:a9:b4:
                    3b:d9:d1:37:16:dd:54:b3:4d:4c:ec:53:44:ba:1a:
                    d9:bb:e4:c6:d2:47:fa:e9:d9:9f:01:91:8e:01:f7:
                    2e:ea:94:de:83:74:0c:78:e2:b4:70:40:d7:e1:cd:
                    09:18:33:55:bc:b7:4e:b1:65:35:5f:49:f2:29:f6:
                    d9:b7:6a:e7:31:38:bf:fb:6d:4a:c3:c5:85:4e:f1:
                    f2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:87:13:9E:7C:38:49:9E:A3:EE:55:77:F6:85:E4:67:DD:C6:30:2F
            X509v3 Authority Key Identifier:
                keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:40:f7:ae:53:7c:b6:b4:36:35:d3:55:2e:9d:3c:5c:e3:
         aa:08:43:bd:02:a8:f3:53:4f:65:cf:ac:e7:11:68:4b:83:ce:
         fe:60:e3:62:fc:50:18:9d:da:75:ba:8c:e0:ce:77:04:7b:91:
         32:30:14:55:ee:30:4a:79:fb:6b:94:dd:0c:53:e4:7a:d8:fd:
         e0:ec:a8:6a:82:1c:45:be:a5:8f:46:9c:b9:f1:8b:9b:9d:d6:
         58:e1:00:7c:12:df:c0:bd:d1:76:98:4f:ca:3a:bc:85:6e:ed:
         4f:eb:34:06:ec:8c:c2:ba:ff:ac:30:7c:30:26:89:1e:36:1b:
         ec:a0:f8:de:00:7a:d0:f7:ba:13:d6:32:7b:01:a0:4e:ed:81:
         3d:5b:df:bc:3f:1f:4d:c3:bd:82:b9:98:94:cc:e4:11:76:86:
         31:01:e3:2a:42:da:be:ff:a6:bc:7f:d6:d1:ce:b7:bb:c8:83:
         ea:24:9d:d5:90:ac:0e:fe:48:a8:74:07:71:5d:be:96:64:f9:
         21:78:35:56:75:15:36:c8:89:72:89:93:d3:af:de:02:d3:e7:
         b2:47:02:65:87:e8:90:05:1e:3f:8a:79:a1:0e:f1:e5:4b:09:
         d6:df:fb:5e:66:0d:c3:27:18:0f:34:7e:3d:32:32:02:6c:86:
         a4:2c:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:49 2025 by rpki-client