Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
File:                     Ety44UEMjNGOUkV_fhqVgNbaUiY.mft (raw, json)
Hash identifier:          Vk5OrefIhWBa3WtsM/ja2xmgwDeEyjyiCHKeELdBHPU=
Subject key identifier:   16:EE:28:BD:76:ED:D1:23:23:2F:7B:9C:3F:DF:57:C8:46:C7:4D:0F
Authority key identifier: 12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26
Certificate issuer:       /CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
Certificate serial:       019A02C742940AFB93F9A71203FEBBB88B4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
Manifest number:          0627
Signing time:             Mon 20 Oct 2025 18:00:04 +0000
Manifest this update:     Mon 20 Oct 2025 18:00:04 +0000
Manifest next update:     Tue 21 Oct 2025 18:00:04 +0000
Files and hashes:         1: Ety44UEMjNGOUkV_fhqVgNbaUiY.crl (hash: 2u7dzIE15382tt/VYmFA3/pDGq+QOrASdxfBtf6kNik=)
                          2: jEDgNY90eysDT0Y1G-THT17h3-Q.roa (hash: RQYyUb9Y/6KY2/ltxA8FrdBGYW0gmfS1ieQyM7fG8UY=)
                          3: xjaKNbUWdjhuGKz557km09J85CQ.roa (hash: 3QMey7VrmUqxE6MUlNjFiwNKaAhFddLFlNFaj03POhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:02:c7:42:94:0a:fb:93:f9:a7:12:03:fe:bb:b8:8b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12dcb8e1410c8cd18e52457f7e1a9580d6da5226
        Validity
            Not Before: Oct 20 18:00:04 2025 GMT
            Not After : Oct 21 18:00:04 2025 GMT
        Subject: CN=16ee28bd76edd123232f7b9c3fdf57c846c74d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e6:4a:b6:e6:92:13:01:9a:b6:09:fe:40:bc:
                    54:69:a5:3a:c2:e7:bf:16:1a:fc:27:36:b5:c0:f0:
                    5b:ce:08:99:91:b4:91:7b:38:63:97:68:1e:53:34:
                    4f:81:fa:ac:a6:09:df:2f:b3:6e:82:54:41:2c:59:
                    28:16:e8:aa:65:fb:29:2c:bd:3b:11:62:40:fe:38:
                    21:89:5d:65:78:0d:4e:4e:44:59:9b:78:01:81:5a:
                    59:8f:69:14:46:3a:50:65:9e:cb:3a:ee:57:90:ad:
                    8c:63:61:15:6c:31:c8:e6:ff:a6:e5:aa:d6:61:7e:
                    ec:27:75:ae:5b:4c:f1:a9:4a:28:b6:d7:62:3f:88:
                    61:a4:30:dd:d4:1b:92:d4:bf:4e:4c:c7:d4:0f:62:
                    a9:55:19:0e:3f:d8:87:df:de:ec:95:db:26:73:2b:
                    48:4d:ef:c8:88:53:62:da:3b:f9:3e:e8:c8:d2:0b:
                    d7:ac:20:4e:3f:b7:58:62:a0:dd:ec:be:58:4f:6d:
                    f4:e9:3b:96:c4:fb:e4:f7:3f:81:c0:16:33:bf:45:
                    6b:4e:dc:3a:cb:f9:e7:02:8e:80:ad:d9:8c:ce:59:
                    89:9c:1e:1f:ec:37:e3:8a:6c:2f:cb:56:31:36:29:
                    ab:3d:a5:13:99:97:b2:da:3b:f8:c1:86:43:11:4f:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:28:BD:76:ED:D1:23:23:2F:7B:9C:3F:DF:57:C8:46:C7:4D:0F
            X509v3 Authority Key Identifier:
                keyid:12:DC:B8:E1:41:0C:8C:D1:8E:52:45:7F:7E:1A:95:80:D6:DA:52:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ety44UEMjNGOUkV_fhqVgNbaUiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c3c3c4-27a1-4c79-b7de-b9403f64ba60/1/Ety44UEMjNGOUkV_fhqVgNbaUiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:b0:fe:b6:4b:58:20:a4:bf:d3:11:f5:21:cc:7e:1c:b8:73:
         e7:8c:f8:cd:50:db:20:d5:c2:01:f2:e7:12:20:b8:6f:32:c9:
         3e:94:68:b4:c4:fe:a7:03:9a:44:50:b1:0b:d3:32:80:d0:b8:
         3a:9a:ad:67:15:30:26:2c:d1:d3:9f:d3:b7:88:cc:ee:48:91:
         ca:3a:28:5a:1f:83:9b:73:62:37:96:af:06:fa:2c:07:2b:4c:
         c4:39:43:2d:5b:c9:26:e9:37:b1:1c:b7:8b:2c:e3:a1:39:f2:
         59:bd:92:b8:39:2c:f8:44:28:4d:51:19:36:90:cb:2a:8d:ea:
         4a:1c:24:65:c5:99:b1:d9:73:0f:7f:00:2f:63:51:4c:d8:0f:
         5e:0f:39:54:42:88:a0:a0:6c:46:cb:e2:c8:89:ce:42:45:35:
         cf:0e:32:f0:45:a5:a9:29:40:7d:88:26:71:12:c4:47:93:bc:
         2c:3e:2b:ce:00:bd:ba:48:5a:c7:b2:d8:c0:5e:1e:f5:36:d6:
         9a:e4:4e:4d:cc:d6:38:3c:c3:58:b2:be:c1:09:ac:1b:b3:80:
         98:13:8a:b0:1d:27:b4:bc:c1:2e:ed:1c:40:b2:e4:76:e0:78:
         ef:f2:78:68:b2:9e:f2:89:a5:70:7d:20:8f:a3:d5:87:c2:cf:
         0c:65:38:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:02:52 2025 by rpki-client