Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
File:                     cnegKqVG3RoKaoLQXZCwkX4VRe0.mft (raw, json)
Hash identifier:          Hss5szCVHmrJyZB4OwK/eW/K4Rq74pGJjgnD4KdCTXs=
Subject key identifier:   D0:C5:DE:81:40:E4:33:68:7E:C6:0B:9C:EB:D1:5D:64:54:FE:A0:66
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Certificate issuer:       /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial:       0199FD345CB5C553727DB5A8737CC0967550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
Manifest number:          12EE
Signing time:             Sun 19 Oct 2025 16:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:31 +0000
Files and hashes:         1: 30-4U9nQ-D0aJwZBJ1-bMuclPkc.roa (hash: B7rpxNi8g0T+2AMmv+mqO6f85+SxNjEeES2xtaw9X3k=)
                          2: cnegKqVG3RoKaoLQXZCwkX4VRe0.crl (hash: LAmYB1+Nq4Y/GYjry9Bf3/5qF2jy21U+X+w2DInsibk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:5c:b5:c5:53:72:7d:b5:a8:73:7c:c0:96:75:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
        Validity
            Not Before: Oct 19 16:01:31 2025 GMT
            Not After : Oct 20 16:01:31 2025 GMT
        Subject: CN=d0c5de8140e433687ec60b9cebd15d6454fea066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:80:85:66:62:9d:49:01:e8:db:d2:be:f1:
                    82:8e:ca:79:21:f7:f2:8c:8a:3a:94:6f:8e:8e:d5:
                    87:7b:02:db:75:0b:c2:76:5f:78:ce:a0:3a:d0:1f:
                    75:2e:fb:a0:f2:6f:bf:3b:32:19:1b:6b:c4:d0:52:
                    1a:e0:e8:4b:f7:7c:59:03:b5:39:f1:cd:ff:69:e1:
                    a8:fa:6a:a0:be:61:22:d4:94:1a:18:6b:e8:d6:04:
                    62:73:44:27:7d:3c:78:0a:59:52:a3:e3:82:4b:41:
                    0e:cf:4f:4e:11:9e:63:09:e2:3a:f7:ad:2b:37:2a:
                    ef:76:8c:00:c7:79:b8:01:c4:3a:b3:53:c1:ed:d5:
                    85:7f:14:e2:2e:f1:94:0d:1a:20:b5:47:13:e9:03:
                    f3:6c:59:b8:28:9c:38:18:36:d9:d9:67:d0:67:09:
                    b0:5f:72:30:04:0f:75:b8:6a:66:18:37:06:2d:4e:
                    75:7f:2a:47:66:c6:d4:d7:08:3e:09:91:5e:73:2c:
                    69:2d:02:97:8e:a9:85:e4:81:bd:20:52:47:26:3f:
                    11:36:c8:71:07:7b:38:61:9a:cd:a8:2d:af:83:76:
                    d2:a1:52:fd:a5:cd:3b:67:13:07:e6:73:84:a6:60:
                    f0:c9:63:b5:68:98:48:23:6a:5d:5b:8f:75:8c:cb:
                    c1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C5:DE:81:40:E4:33:68:7E:C6:0B:9C:EB:D1:5D:64:54:FE:A0:66
            X509v3 Authority Key Identifier:
                keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:73:19:be:4b:f4:c1:f2:3f:6e:f8:ef:9a:69:59:45:b7:
         6f:fa:4e:01:ea:45:6f:39:a9:87:a5:30:b3:55:45:39:d1:20:
         64:3e:63:cd:ad:47:3f:98:bd:1d:ef:cf:9a:0a:6d:2a:7b:46:
         bb:85:19:be:f1:78:f2:fc:b5:09:b0:26:b8:5a:34:46:4c:69:
         62:04:83:4e:d0:fe:d8:a9:7a:3f:90:55:f9:72:89:a3:82:d9:
         db:09:b4:93:34:d4:48:60:bb:43:03:3f:e0:a8:b9:d2:b8:e4:
         e6:f2:4e:fc:77:30:14:29:92:dd:16:24:9a:d7:a5:20:ce:d5:
         a3:a3:f3:94:f9:3f:25:8e:ba:41:b5:ca:a9:db:1e:e3:23:67:
         80:37:1a:4e:b7:ba:c4:a4:49:b6:c9:6e:11:9a:d7:ab:57:d9:
         21:7d:aa:6e:11:3a:66:29:96:a2:96:f4:db:c5:e8:2d:a6:60:
         7c:33:44:c7:46:64:fb:9f:29:e3:d4:3f:43:bc:85:6d:41:82:
         d5:df:88:25:2f:e0:bf:d6:5c:5f:ae:49:fd:ab:28:fc:43:ee:
         2d:0d:43:76:d7:7e:63:73:c5:2b:d3:75:a0:a1:ae:b6:84:53:
         c3:4f:5d:c4:71:6a:d8:e6:73:2b:d0:8a:66:40:9b:87:e4:1a:
         78:6d:91:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:30 2025 by rpki-client