Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
File:                     A-7ifdtJC7lmnuug4RaUFkyi6Og.mft (raw, json)
Hash identifier:          xUqmbQrJHlomgcCn2n/zAJXq+34lPyP9p4WVBCRU1Z8=
Subject key identifier:   E7:2B:A6:8F:E8:F2:82:CA:FA:DD:6F:4F:3D:DD:D4:DB:7F:93:77:1C
Authority key identifier: 03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8
Certificate issuer:       /CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
Certificate serial:       0199FC21992A13BE2925954460D1D607C0B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
Manifest number:          039E
Signing time:             Sun 19 Oct 2025 11:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:24 +0000
Files and hashes:         1: A-7ifdtJC7lmnuug4RaUFkyi6Og.crl (hash: +TZWH/H8a1DZx06pcbm86GwddzqTX12tb4D98WJ3Kw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:99:2a:13:be:29:25:95:44:60:d1:d6:07:c0:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03eee27ddb490bb9669eeba0e11694164ca2e8e8
        Validity
            Not Before: Oct 19 11:01:24 2025 GMT
            Not After : Oct 20 11:01:24 2025 GMT
        Subject: CN=e72ba68fe8f282cafadd6f4f3dddd4db7f93771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:1b:d9:06:b2:f6:ff:4c:5a:a9:11:80:63:
                    98:17:98:3b:eb:b8:ec:18:d8:86:be:f7:fe:c4:9d:
                    69:d0:75:a5:4c:e1:13:18:a9:1c:50:3d:fb:8f:44:
                    da:bf:73:09:dd:b2:ff:39:42:eb:18:35:6b:3d:ca:
                    d2:36:48:aa:a4:74:16:4f:d8:db:d7:06:66:1d:7d:
                    2e:c2:83:08:46:b0:5d:b5:5f:d1:2e:97:b5:5a:87:
                    1f:53:4b:fc:c6:9f:51:c9:a5:6f:6e:96:d6:e3:08:
                    e0:a1:f3:ac:a1:c7:53:7b:d4:45:5b:7f:e0:25:cf:
                    07:eb:6e:a0:96:4b:8b:85:e8:b6:fa:f9:d6:00:b7:
                    e3:d6:f7:a5:bb:72:bf:a6:9d:1b:13:67:e0:8a:7b:
                    54:a8:b5:7b:61:35:e8:93:b1:ce:a9:53:17:f0:f5:
                    ac:e1:61:72:ec:29:9c:d2:9d:a3:fc:da:54:e2:3b:
                    68:26:eb:83:8b:1b:c6:90:b2:90:ff:26:73:87:73:
                    c9:a1:a1:6b:fc:dd:97:0e:5f:e8:16:c6:4b:29:c4:
                    b0:d8:89:73:c5:f9:f4:c6:6a:ff:3e:2f:07:06:fd:
                    08:75:db:91:01:f5:e7:81:cc:d7:66:50:77:d7:81:
                    87:af:4c:95:b1:d2:52:a0:21:f0:db:ca:f1:bf:73:
                    ce:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2B:A6:8F:E8:F2:82:CA:FA:DD:6F:4F:3D:DD:D4:DB:7F:93:77:1C
            X509v3 Authority Key Identifier:
                keyid:03:EE:E2:7D:DB:49:0B:B9:66:9E:EB:A0:E1:16:94:16:4C:A2:E8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-7ifdtJC7lmnuug4RaUFkyi6Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d4d231-a9a5-407b-ba25-8d8c592da420/1/A-7ifdtJC7lmnuug4RaUFkyi6Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:a4:6a:e7:a1:ef:10:c6:49:47:18:c8:bc:e9:d8:8e:5f:
         7a:69:cc:95:bd:a2:83:85:76:c3:49:f9:11:81:f0:f7:c1:4c:
         14:e2:b3:12:f1:85:0f:00:dc:23:80:b4:66:0f:3b:15:5d:88:
         50:81:07:d8:9b:3e:9e:02:52:77:5d:e8:ab:f8:ce:93:3b:fd:
         a5:71:a2:15:fe:44:fb:1f:30:c6:c1:84:d2:f8:64:e8:3f:1d:
         99:4d:2d:04:07:5b:4f:6e:8a:a4:7f:e3:e8:45:2e:37:0c:18:
         90:17:6d:bc:e9:e6:06:ad:28:ba:04:ea:12:39:e0:d4:09:d7:
         db:ac:f1:2d:1a:8f:90:e8:cc:36:ae:a8:58:fd:d1:e1:72:df:
         dc:3e:c2:bd:60:dc:88:05:d5:b3:73:13:03:55:ed:2c:b8:1c:
         25:27:db:b6:e5:ce:d2:9a:30:57:28:70:59:04:97:95:1f:ab:
         ed:45:38:d6:9d:8a:ba:ff:71:1a:66:df:fa:8d:48:39:4f:f6:
         f7:4f:1f:d8:16:e0:1e:05:fe:26:64:b0:f9:0a:df:a5:0d:c2:
         7e:3e:8f:48:15:71:a4:b9:fd:d5:02:95:86:57:93:51:8a:1c:
         30:47:55:27:77:1b:87:ab:10:f7:14:a5:ae:43:31:d8:51:0c:
         7b:2f:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:35 2025 by rpki-client