Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
File:                     7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft (raw, json)
Hash identifier:          /1RhLEKim3BPTN8Pv1NWdpbnC5dZ1gFUWhx8T/lFAUo=
Subject key identifier:   7F:F0:32:61:10:4A:C0:F5:F9:52:DB:ED:6A:5E:BD:76:5F:F7:99:DC
Authority key identifier: EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7
Certificate issuer:       /CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
Certificate serial:       0199FA6A786E53CB2CF036B3222B6173B8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
Manifest number:          0E4F
Signing time:             Sun 19 Oct 2025 03:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:45 +0000
Files and hashes:         1: 7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl (hash: 0H0HH+6FadsCh8dJahCZ8CyCRJ2m655RWOR2i/892r4=)
                          2: VXStklzuRlpg_R8nfz573Xq7Noo.roa (hash: IbT51sa2OOKxE/XOPtTGvEY7Cw0dCovzg7t9jfSRhHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:78:6e:53:cb:2c:f0:36:b3:22:2b:61:73:b8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbc33fd01178ae2f974eeed5dcdcd3c175e16a7
        Validity
            Not Before: Oct 19 03:01:45 2025 GMT
            Not After : Oct 20 03:01:45 2025 GMT
        Subject: CN=7ff03261104ac0f5f952dbed6a5ebd765ff799dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:77:4f:97:63:58:0c:65:ef:11:ae:ff:82:37:
                    70:b9:a7:6a:68:4e:64:a7:86:f1:5e:15:6a:98:83:
                    6a:49:74:fb:cb:1d:04:51:ca:8d:00:86:d0:7e:30:
                    6f:41:a1:90:b0:bb:3f:53:18:32:09:b6:36:44:1a:
                    4a:35:03:fe:65:97:0b:89:b4:75:a5:5a:a2:fb:eb:
                    53:c4:f9:fe:32:ce:f6:65:11:86:e7:e2:e7:53:f3:
                    74:12:88:17:2a:e3:44:f1:b4:da:04:0e:c6:03:29:
                    92:a7:59:1a:9a:6d:cc:58:1e:73:e1:13:77:c6:17:
                    58:1b:8b:5c:04:e5:03:9c:00:76:30:86:48:fb:ed:
                    2f:01:4f:4d:1b:cc:92:f5:a6:10:02:16:f6:55:85:
                    36:4e:de:28:38:50:ac:ff:79:29:79:53:55:7a:e3:
                    c2:fa:a6:bc:77:33:59:36:32:09:c7:f5:aa:4f:44:
                    c3:4c:13:29:9f:df:6a:27:40:b3:6a:36:c3:10:23:
                    de:7e:ce:43:5a:f2:14:9e:89:12:eb:56:0f:af:92:
                    05:16:16:57:1e:7e:1a:63:66:6a:f7:ec:41:84:c6:
                    40:46:fe:13:b0:cd:42:d4:5a:d9:62:ba:ef:58:ef:
                    c6:f7:26:33:a9:96:21:ce:64:45:48:30:e7:97:6e:
                    87:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F0:32:61:10:4A:C0:F5:F9:52:DB:ED:6A:5E:BD:76:5F:F7:99:DC
            X509v3 Authority Key Identifier:
                keyid:EC:BC:33:FD:01:17:8A:E2:F9:74:EE:ED:5D:CD:CD:3C:17:5E:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e3b9d9-be9f-4a76-b3a3-3e05b37e138b/1/7Lwz_QEXiuL5dO7tXc3NPBdeFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fa:33:72:8f:0e:1e:77:52:c9:97:ac:04:80:27:01:41:b4:
         ff:b4:d6:93:73:6c:09:0c:7c:6c:9b:6b:a7:81:9a:25:9f:91:
         4a:44:94:dc:26:47:7e:2b:20:39:30:b4:32:77:11:11:34:fc:
         00:31:24:58:56:f8:31:79:3d:1a:cf:88:b9:21:d8:22:eb:fe:
         e3:92:cb:7f:9f:d8:b2:b1:df:0e:27:3e:d0:86:5a:1a:55:1d:
         10:73:75:1b:54:06:aa:ad:04:2f:bf:9b:70:e7:0e:59:0d:8b:
         25:53:f4:ec:42:0b:2a:35:11:8c:9a:48:b3:d5:26:fb:2c:a4:
         71:23:19:87:de:2a:66:9b:66:07:5a:9a:fe:20:e4:b2:7d:d0:
         8f:ee:e4:93:17:0a:8b:0f:a6:82:b6:71:1a:1d:ea:37:2c:3d:
         cc:c3:6f:60:a0:e2:e2:e1:7d:a3:d9:f6:77:fb:55:3e:d8:21:
         d3:5b:17:48:5e:de:7a:25:70:d0:4d:65:ef:e9:e4:0b:68:8d:
         d3:71:50:f2:b8:87:3d:b0:18:87:e6:d0:0d:a1:54:05:fb:b1:
         c4:d1:6f:e2:81:d8:fb:88:44:8b:7a:e4:2c:57:b7:c7:1c:de:
         74:a5:17:cf:55:71:97:78:52:3e:dc:6f:b5:5c:3d:a0:b9:3e:
         ba:40:de:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:22 2025 by rpki-client