Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
File:                     7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft (raw, json)
Hash identifier:          74VpOHfcQ6Z3jSF6nj/20DYyF1AfecO4zGHLr5PMPKA=
Subject key identifier:   03:3C:E2:94:5F:49:8C:BD:89:05:01:88:1C:7D:4F:C0:BD:DB:B8:4B
Authority key identifier: EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D
Certificate issuer:       /CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
Certificate serial:       0199FBEAC853B0593059087790C85CB0EEF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
Manifest number:          073F
Signing time:             Sun 19 Oct 2025 10:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:31 +0000
Files and hashes:         1: 7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl (hash: 431TogpTipvnHaPwFd4Z9zAbqKwsO4h/7phsch/MLxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:c8:53:b0:59:30:59:08:77:90:c8:5c:b0:ee:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeefa9c29506b4fcf1729211a4fa77c1f211468d
        Validity
            Not Before: Oct 19 10:01:31 2025 GMT
            Not After : Oct 20 10:01:31 2025 GMT
        Subject: CN=033ce2945f498cbd890501881c7d4fc0bddbb84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:c9:f6:31:d9:e8:cb:c3:d6:4c:b4:8a:b1:
                    30:84:5d:a1:fe:f7:8f:03:3d:74:b0:1a:cf:c1:50:
                    5b:6b:5d:b2:0a:e9:0e:f1:97:a5:6a:61:ca:e8:37:
                    49:a9:2b:62:fb:44:11:db:2b:76:17:8a:48:bf:7d:
                    8b:ac:09:bb:bd:81:b6:39:9c:e8:81:42:69:ee:7b:
                    77:5f:2b:91:b2:49:e0:50:db:0a:6e:65:d3:98:eb:
                    b4:8c:db:8c:e5:11:b7:49:14:76:78:a6:27:6f:5f:
                    a2:00:9b:84:6f:e8:ae:da:31:15:00:91:48:45:8c:
                    d9:86:f7:ae:98:1c:7e:16:71:a7:37:8b:15:73:b2:
                    c5:a2:61:1b:3a:2e:5b:6d:fa:51:13:51:aa:7c:f9:
                    ec:08:ff:85:b5:90:42:f4:ee:3a:4e:53:06:3f:cc:
                    c3:fc:c2:d6:5f:e1:5e:4e:3b:70:1a:35:9c:e3:d9:
                    73:e0:53:32:cc:0c:78:82:7f:82:7e:2f:d2:e3:6f:
                    51:72:0d:80:c4:1b:ce:b9:88:a6:55:fb:d3:5a:1e:
                    a6:92:e0:e6:54:48:68:9b:bd:c2:a6:d3:95:e1:bb:
                    32:75:ce:f4:5a:7e:60:74:bc:62:03:89:3d:db:5f:
                    df:f8:19:ad:89:de:2b:ac:4f:67:cf:1c:2f:11:c7:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3C:E2:94:5F:49:8C:BD:89:05:01:88:1C:7D:4F:C0:BD:DB:B8:4B
            X509v3 Authority Key Identifier:
                keyid:EE:EF:A9:C2:95:06:B4:FC:F1:72:92:11:A4:FA:77:C1:F2:11:46:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u-pwpUGtPzxcpIRpPp3wfIRRo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/e47805-69bb-4359-bd2d-cf36073d2db0/1/7u-pwpUGtPzxcpIRpPp3wfIRRo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:35:bf:7a:a5:7b:88:07:8b:54:e3:d0:e4:37:26:b4:30:
         4e:e9:d7:2c:19:67:57:0d:03:c7:c3:06:3b:44:d1:a5:fb:66:
         b1:b7:57:2d:0d:3a:aa:aa:9c:4b:0d:69:1d:f4:3c:be:6c:22:
         a4:98:e4:7c:48:c2:6a:a1:4d:2a:f9:4a:10:27:d3:79:5e:9c:
         ea:3e:5b:f4:f2:37:fd:01:ac:dc:bb:7a:de:30:22:e8:85:29:
         0a:c2:83:8b:e6:b4:18:cf:25:b8:56:d5:a1:80:01:88:51:77:
         c6:ef:5c:0f:5e:ee:f5:8b:a7:50:4b:5d:79:c9:e5:d5:ea:7b:
         02:fa:99:02:ed:3b:9d:9b:ec:1b:be:b5:fb:a3:1e:bd:93:b6:
         d1:e4:9f:13:e4:da:97:fc:53:26:0c:e2:18:5b:84:86:61:3f:
         30:9f:db:cb:be:50:a2:f0:35:df:97:9d:94:c2:14:5b:3f:e8:
         c0:9f:5c:53:2b:0b:30:83:d5:d7:08:82:7e:98:19:3f:98:bf:
         b2:cc:ab:6c:3b:70:93:87:8a:08:78:2e:c0:fc:a2:72:7c:08:
         51:c3:19:76:89:3a:50:3d:19:bb:15:51:66:cf:c3:ad:cf:df:
         0a:19:c5:14:7b:5d:d2:98:09:47:f2:75:7a:9f:1f:1d:ab:3c:
         89:d5:14:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:24 2025 by rpki-client