Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
File:                     7a4BhsaCMBS8LELQTqZQv1zLmXY.mft (raw, json)
Hash identifier:          J/dVWzXvFk6YcyFaLq5Gbv9+AnztUjywr5jnuS2X2aM=
Subject key identifier:   55:FC:A9:F0:D4:74:56:5E:C2:1B:DD:14:5C:D8:DB:94:52:20:29:33
Authority key identifier: ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76
Certificate issuer:       /CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
Certificate serial:       0199FC8F34B1F7B60867CAE6D06903B23D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
Manifest number:          1612
Signing time:             Sun 19 Oct 2025 13:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:07 +0000
Files and hashes:         1: 79CA17Xn5GUSh_OtX3g6kBkGEK0.roa (hash: E0hRb7MlGtqWbRGEjrJTx2utqhVHTzEFD8Hy89KBmzw=)
                          2: 7a4BhsaCMBS8LELQTqZQv1zLmXY.crl (hash: nsr/kOHKWkx+hdO0cHVQ/3+M4gNtC/o/Ob7dVcoOZoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:34:b1:f7:b6:08:67:ca:e6:d0:69:03:b2:3d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edae0186c6823014bc2c42d04ea650bf5ccb9976
        Validity
            Not Before: Oct 19 13:01:07 2025 GMT
            Not After : Oct 20 13:01:07 2025 GMT
        Subject: CN=55fca9f0d474565ec21bdd145cd8db9452202933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:b0:48:a5:c3:e9:d6:bb:2b:05:de:be:78:
                    2c:1e:7f:f0:4a:66:42:19:28:58:1b:a2:2e:6a:5d:
                    94:6e:8c:14:44:67:19:ed:2a:b6:a7:72:ab:7c:4a:
                    9d:53:36:5f:b0:69:97:d3:90:73:86:c8:db:75:53:
                    78:c4:ac:6f:d5:5f:8d:d7:2f:23:9a:44:8a:ee:bb:
                    78:64:b3:1c:34:ad:bd:ac:25:8b:80:29:cf:04:28:
                    94:9e:b8:53:d4:8d:e1:c2:37:3d:49:24:31:20:4b:
                    f1:8c:95:41:38:61:0a:57:9e:fe:50:d3:a5:31:a0:
                    fc:68:d2:70:f9:b0:1a:aa:4f:3e:94:c2:ae:a4:c1:
                    48:b5:b5:4f:f6:0a:b3:7a:ea:9b:1d:ce:d5:32:7e:
                    5b:81:94:a6:85:ec:20:86:1b:f0:4a:9e:b9:f4:f7:
                    58:3f:84:98:6e:9a:fd:f0:4d:2d:b7:28:91:b8:9e:
                    9e:e8:36:09:33:e0:f4:2c:17:2c:08:fc:66:f3:0f:
                    15:a4:cb:62:8c:40:5c:75:79:a2:3d:17:18:5f:53:
                    7e:ab:42:42:ee:f3:d3:3d:fb:58:1b:b8:05:6f:39:
                    f8:2c:24:dc:c4:22:92:60:d9:4e:c4:c0:56:cc:9b:
                    39:41:ec:91:05:bc:18:e7:08:99:4d:8b:37:bc:12:
                    9e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FC:A9:F0:D4:74:56:5E:C2:1B:DD:14:5C:D8:DB:94:52:20:29:33
            X509v3 Authority Key Identifier:
                keyid:ED:AE:01:86:C6:82:30:14:BC:2C:42:D0:4E:A6:50:BF:5C:CB:99:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a4BhsaCMBS8LELQTqZQv1zLmXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/29a52e-58a0-4238-aeb1-8b7a4abf1ca2/1/7a4BhsaCMBS8LELQTqZQv1zLmXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:ea:e2:e5:26:b7:5a:43:53:ca:5b:6d:78:e1:c4:4a:6e:
         62:83:cf:94:d9:4b:20:c7:d2:b6:44:8c:e6:9e:44:8b:00:93:
         65:ee:42:1a:f1:0b:31:10:98:9a:f7:06:2a:c3:10:f1:83:72:
         c9:fe:e9:5c:fe:78:4c:52:6f:08:94:3e:46:5e:db:5d:6a:89:
         9d:e3:91:99:b7:c3:16:1b:80:84:36:a3:f7:24:2b:d4:d2:14:
         23:9b:a4:fc:cb:f0:a6:d3:34:01:47:81:97:8e:03:41:7a:46:
         73:51:8a:b1:bb:2a:42:b8:63:12:0c:3a:cf:c8:27:63:0e:00:
         1a:42:cd:2a:87:a0:68:3a:0f:9f:bb:3a:8b:15:15:1b:93:6c:
         33:d0:13:19:16:b6:2f:17:d2:9a:ae:a0:d3:c8:1a:34:c6:79:
         38:25:c8:f4:8a:11:24:5e:a2:ee:94:fa:9d:ce:ec:a4:aa:65:
         5a:a4:06:2e:76:75:61:86:b8:9d:4e:db:99:cb:69:25:98:1f:
         6d:6b:99:0e:14:b5:1c:87:a0:0d:0b:37:60:ca:cc:f4:17:0c:
         0b:75:cf:d7:9c:c2:1b:dd:8f:32:2c:f2:15:92:0e:f2:58:fb:
         e8:d2:2a:e8:93:f0:bd:c5:f9:3f:2f:b9:b2:d4:98:f5:94:e8:
         a8:cc:7d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:15:10 2025 by rpki-client