Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          sNCA8haTsxTlA0wJ8lsmGtSGYt9Llr7f9KzrcN6Woiw=
Subject key identifier:   BD:52:F7:E5:46:4D:01:CA:2A:BA:CC:6A:F7:B9:A9:0D:61:B3:22:8B
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       0199FC215E2AD70BBBB4D402B1D7104F7213
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          113C
Signing time:             Sun 19 Oct 2025 11:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:09 +0000
Files and hashes:         1: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: pAtLrZ6fyjZEYUi3qY+Eh06fllUtyWwfS+tEIxGkENk=)
                          2: 7E2GqeDScAsEfeR_jfhcvFHNh2c.roa (hash: eYH8Had8LzNIpCqpDD0w753CPE+hCok2dgM2nYyxBQw=)
                          3: YUVOjg-NYPKdbH7CLgzYF0Szw-M.roa (hash: ObWVxdFnXdJBDsdI7ajxP2E88epWKo+qtgn94PpqTw4=)
                          4: hq906rq-ZUJ1rsRNyLa6JRxlY-c.roa (hash: W24B5y3blRSexP4/ZgUhUaITtqn0pVBgRqtpx/ttccY=)
                          5: uhJ-XIVNq77fWXsLmAjcO82hF0c.roa (hash: /Yf7GSbjy7jBNyAQCFoiblzDBo0DTRvflVo58Ipv4OQ=)
                          6: yVrQ3Ged2FsAZHuyhUIqmxL0_HE.roa (hash: heQJwpouLwsKxWKG0olSeDKYbngN2NrPz+JJTgLlRd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:5e:2a:d7:0b:bb:b4:d4:02:b1:d7:10:4f:72:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Oct 19 11:01:09 2025 GMT
            Not After : Oct 20 11:01:09 2025 GMT
        Subject: CN=bd52f7e5464d01ca2abacc6af7b9a90d61b3228b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:14:ee:cc:13:44:0c:d4:45:5f:1b:5e:f2:4b:
                    1e:cc:62:71:73:d4:72:aa:dd:3a:c4:c3:03:3d:46:
                    bd:31:2a:a0:18:81:e4:98:f7:ac:de:46:d7:a2:a1:
                    e3:82:78:22:d2:3e:82:96:6d:e6:a3:a2:a2:4f:5f:
                    94:ee:19:f0:98:36:5f:45:0e:c4:a8:29:00:47:af:
                    80:24:1f:be:ee:55:31:45:fb:3a:cc:9b:c1:10:4c:
                    15:c2:b3:18:9a:23:62:30:44:c4:36:7c:36:f7:4c:
                    db:b5:12:13:fb:34:f9:69:a0:58:8b:77:c7:78:ff:
                    45:5f:e0:ec:67:37:a4:21:85:8d:74:2b:b5:06:4d:
                    89:85:f4:9e:d8:ed:af:f6:ce:26:2b:42:f5:67:14:
                    53:7f:13:b5:c7:22:3f:c8:fa:fc:09:3d:31:49:b1:
                    7c:69:50:5e:19:f9:40:36:b3:f7:60:b8:92:bd:5f:
                    3f:01:60:bb:db:b9:c7:16:95:5c:09:27:c2:df:de:
                    ec:9c:b8:68:25:6c:22:1d:2c:0a:4f:87:6c:b0:be:
                    06:57:cc:7a:a0:45:f3:16:f0:43:53:13:2e:41:6e:
                    92:e8:ba:ff:c8:ff:3a:f9:ba:c1:85:d4:2c:7a:62:
                    38:f0:f9:51:7d:e3:a0:6a:f1:3d:bc:95:31:0e:ff:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:52:F7:E5:46:4D:01:CA:2A:BA:CC:6A:F7:B9:A9:0D:61:B3:22:8B
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2f:1e:51:6d:3e:16:75:ef:98:8a:42:5b:3f:2c:da:58:21:
         5a:61:20:57:66:9c:b9:e1:28:cf:9c:58:08:67:91:30:b9:39:
         b0:f1:9f:b0:11:67:13:f3:f2:0e:cc:8b:e0:e3:e8:a9:7d:b5:
         89:7e:d6:ba:9c:5e:92:cd:d5:6f:80:6c:68:56:53:f1:77:a7:
         c9:22:f4:42:35:7e:a8:40:cb:56:0f:1d:42:6e:6e:bb:5f:80:
         94:79:b4:bc:78:85:6a:8c:93:0f:42:e1:27:99:27:b2:d3:a9:
         42:8f:83:68:8f:0a:0a:58:3f:36:81:ac:fe:c7:8b:27:8b:24:
         cb:69:c3:c2:e4:09:81:a5:d6:87:e0:3a:c4:b3:51:c5:54:b9:
         29:59:ca:48:6f:37:76:bf:30:41:19:6d:e4:df:dc:4d:64:a8:
         8f:ab:c1:63:c1:47:15:25:b6:2e:6c:55:7c:95:cd:04:21:90:
         53:c4:cb:b6:c1:67:f2:32:84:90:48:50:9a:a4:b9:ab:70:ba:
         a4:73:a9:c6:27:13:a1:b8:8b:85:bf:0c:27:fe:27:67:ba:7b:
         84:69:ac:51:68:44:25:44:b5:48:ed:8b:f8:88:34:cc:34:65:
         55:02:3c:08:8d:53:52:59:b5:b8:d3:d6:1d:b6:14:5a:74:ad:
         18:a0:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:23 2025 by rpki-client