Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
File:                     7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft (raw, json)
Hash identifier:          D5YZkrP5ga6JOt3s8ZLmUTJxOAwOE7YCC0EgwBkPAQk=
Subject key identifier:   36:41:62:FE:4C:2A:42:22:D2:9D:C7:9B:B1:65:A3:0C:87:3C:4E:E4
Authority key identifier: EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A
Certificate issuer:       /CN=ee3be768d28668f490afb74e9aefe41e03495d7a
Certificate serial:       0199FBEA7E69A2BDAC74949447EFD6513EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
Manifest number:          13CD
Signing time:             Sun 19 Oct 2025 10:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:12 +0000
Files and hashes:         1: 7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl (hash: KYshQrVoGAeBrsZMYxdl7hPBm/xse7qAEUR/QdAQVss=)
                          2: Alm1D_jWQV3HZ_xMIEfApNUj0bw.roa (hash: roFDOJ4zN70FlLWN8DtAuHmCiQQVdXLTUDn3OTUhXvI=)
                          3: KOMEO3ezWZumvxO1NtiiKTGYpqs.roa (hash: y/p4zYmrPrmcic5vga+4CRguxPQrr1LrQuRZ5F/An8A=)
                          4: ZqzdAs8yZ3FLdUhbYW7TTyJuHq0.roa (hash: bttROiRtaf17Ko3eqx0YmSrz2YkGK+csEYw+4Lostm0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:7e:69:a2:bd:ac:74:94:94:47:ef:d6:51:3e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee3be768d28668f490afb74e9aefe41e03495d7a
        Validity
            Not Before: Oct 19 10:01:12 2025 GMT
            Not After : Oct 20 10:01:12 2025 GMT
        Subject: CN=364162fe4c2a4222d29dc79bb165a30c873c4ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:da:fa:b6:5c:65:ad:71:a1:f9:1f:e5:ca:df:
                    b3:f7:ee:89:ec:fd:7c:3b:ad:19:46:e0:cf:f4:b9:
                    19:1b:c3:8a:42:90:e8:a4:e6:30:92:22:26:95:61:
                    fb:00:e9:25:64:04:ee:3b:3a:b9:6b:23:d5:05:4b:
                    2d:fd:44:a4:0b:5d:f8:bb:78:59:a1:44:5b:e8:3f:
                    d1:65:36:41:35:f2:40:b2:1f:78:bb:2d:78:ff:d8:
                    f9:7d:3a:b2:14:6a:11:43:a7:8d:f1:8e:63:b5:9d:
                    38:15:a2:53:f3:a8:46:54:51:e2:70:ae:39:7f:fb:
                    76:53:08:83:8f:fb:e9:e8:a9:95:9e:fc:ae:2e:b7:
                    86:4d:81:77:0a:48:3d:ac:17:0f:31:91:b5:cf:1a:
                    18:47:11:92:bd:7d:bd:0d:56:dd:d3:77:e9:e1:38:
                    e6:aa:ef:3c:43:bd:22:00:0a:98:fc:af:10:c7:17:
                    e0:f8:fd:8a:b3:76:2c:3c:32:73:7a:ed:2b:e7:00:
                    74:f9:a8:97:95:6f:c8:d2:e5:e8:46:bf:f6:c3:bb:
                    dd:2f:9b:e8:3d:3b:fb:08:84:31:56:49:99:85:b8:
                    6b:cc:69:96:9c:2e:04:b6:a2:92:50:26:11:b9:2c:
                    45:4c:e1:d5:89:99:d0:cd:3b:f4:d1:88:85:9f:51:
                    06:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:41:62:FE:4C:2A:42:22:D2:9D:C7:9B:B1:65:A3:0C:87:3C:4E:E4
            X509v3 Authority Key Identifier:
                keyid:EE:3B:E7:68:D2:86:68:F4:90:AF:B7:4E:9A:EF:E4:1E:03:49:5D:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jvnaNKGaPSQr7dOmu_kHgNJXXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7474e1-4d65-43b4-8bb1-feef105f0a77/1/7jvnaNKGaPSQr7dOmu_kHgNJXXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:0b:7c:b7:1e:7b:59:63:5e:b3:0d:98:e8:e1:d1:8b:10:
         9b:33:cf:39:a5:99:a6:08:95:de:75:76:98:0f:91:e2:9f:6e:
         b2:5b:77:bc:3a:3e:ea:46:c2:5f:16:5d:01:cf:2f:63:a5:49:
         da:60:ca:51:01:4e:87:a4:01:a7:bc:eb:b5:57:f4:cc:8f:2a:
         32:89:9f:09:d5:8e:9b:69:a4:b3:40:d2:a3:0a:c5:42:ca:2c:
         05:7f:68:1e:94:61:b0:34:45:68:a5:f4:a2:ab:67:7b:ea:7e:
         e3:56:ac:d8:9d:cb:c0:2d:4c:fa:31:04:d0:14:5a:ab:b5:1b:
         d8:e5:4b:69:75:38:8b:09:92:ed:45:15:fa:6a:18:99:d8:67:
         ba:49:a9:ac:06:44:43:c9:3e:33:79:06:71:bb:40:39:7b:ee:
         cd:11:a9:d2:39:d0:aa:25:13:a1:e6:c6:2b:bc:da:a9:01:0d:
         a5:e9:36:ef:64:0b:72:bd:5b:b4:4a:83:69:e7:de:32:e4:26:
         bc:30:36:06:31:5b:1b:38:12:16:57:9b:1d:68:51:63:5a:b4:
         35:c5:3f:84:ef:3e:d7:72:4c:50:00:aa:ca:a1:ac:e7:3f:86:
         d8:26:69:c7:0b:c9:5f:5c:dd:f7:34:0f:9b:82:b8:52:e1:7e:
         55:40:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:11 2025 by rpki-client