Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
File:                     R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft (raw, json)
Hash identifier:          DOw6DOvsQRZHEYERrIZpEfLYjrvQzc9ZmJ0qv6CORNI=
Subject key identifier:   CD:C1:65:33:6E:C9:73:8F:22:4D:AF:05:3E:E5:BC:AE:23:10:28:2E
Authority key identifier: 47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E
Certificate issuer:       /CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
Certificate serial:       0199FC8FB84CD09D9ABD571BBCD2BE326CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
Manifest number:          0D72
Signing time:             Sun 19 Oct 2025 13:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:41 +0000
Files and hashes:         1: R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl (hash: wlLIqPXIFkqFg0P5JFl0Lj1mT9viaGthShAzY8uXKm0=)
                          2: lW8QARrIK7UIW4M3JIEGPijJ8cI.roa (hash: zRjbJkcUZy131TXsOeG5uokZGrH6fU95s3m8Z3kzb+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:b8:4c:d0:9d:9a:bd:57:1b:bc:d2:be:32:6c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47b7054d656153d2d55add8b9dfe3f6d137ad27e
        Validity
            Not Before: Oct 19 13:01:41 2025 GMT
            Not After : Oct 20 13:01:41 2025 GMT
        Subject: CN=cdc165336ec9738f224daf053ee5bcae2310282e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:1e:02:42:72:29:f3:9c:fb:d9:ab:e7:d6:
                    52:a9:54:78:18:af:43:1f:63:57:93:31:7f:c9:80:
                    3b:89:ab:92:21:6a:1f:0a:8d:36:42:e9:db:a3:cd:
                    94:23:5e:22:a8:78:4d:b4:41:10:b6:f6:0b:61:3e:
                    12:98:fe:87:89:7e:1d:94:c5:4d:6e:eb:8b:73:6b:
                    3e:e6:af:9a:50:f0:d3:a7:85:fe:64:e3:d3:3b:c4:
                    b3:66:3b:67:83:aa:92:fd:95:a2:40:a7:ed:b9:1f:
                    9d:db:cc:67:38:52:0b:64:cf:b2:c0:e7:e6:35:46:
                    c1:99:cd:c3:70:5f:6f:84:69:77:07:09:26:c4:92:
                    21:5a:5b:1a:0d:50:b6:a9:fe:51:c3:d1:cd:63:6c:
                    5a:07:83:e1:5e:7b:63:c4:11:a1:9d:1d:77:a9:df:
                    33:d5:59:a4:a2:cc:c3:e8:16:11:7c:8b:13:3c:2d:
                    0e:1c:b4:67:67:17:9a:8a:78:58:0f:13:d9:1c:84:
                    87:cc:0f:1b:2e:3f:74:d1:98:59:76:ca:c6:fa:67:
                    12:6c:54:eb:bb:57:a6:22:53:b9:4d:0f:03:60:dd:
                    03:63:ce:98:4e:c5:90:c4:ed:fd:02:d6:78:18:20:
                    41:bb:c3:c5:47:36:f6:8d:6f:5f:11:41:10:28:50:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:65:33:6E:C9:73:8F:22:4D:AF:05:3E:E5:BC:AE:23:10:28:2E
            X509v3 Authority Key Identifier:
                keyid:47:B7:05:4D:65:61:53:D2:D5:5A:DD:8B:9D:FE:3F:6D:13:7A:D2:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cFTWVhU9LVWt2Lnf4_bRN60n4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/9286bb-c5e5-429f-8a76-0fd862da3ae1/1/R7cFTWVhU9LVWt2Lnf4_bRN60n4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:0e:b0:03:fe:7d:6e:63:61:94:d3:e9:ff:2b:7e:a6:73:
         56:02:2a:6a:78:bb:cc:6f:7a:9a:58:e5:dc:7f:e0:07:23:49:
         fc:8e:54:23:86:6b:69:3c:de:3d:59:a1:59:50:42:c1:f8:97:
         16:42:ee:81:e7:9a:2b:0f:bb:01:96:c8:ef:c3:39:72:df:ee:
         58:2f:24:33:ba:25:77:81:23:7f:fc:a3:c5:23:31:17:ab:cc:
         bf:31:dd:1a:08:21:a0:08:5e:14:c1:0d:77:01:34:36:6c:93:
         36:bd:31:72:a6:83:76:c8:e3:44:4c:ba:be:37:99:88:01:7a:
         2e:91:96:ca:80:f3:ae:a7:27:76:d7:38:3f:6b:45:5e:3c:f3:
         c8:9a:dc:47:83:5d:c6:82:9a:e2:0b:89:db:a8:93:9a:73:7d:
         db:aa:a9:9d:98:66:90:85:92:f8:df:51:10:6b:51:ab:2b:dc:
         f1:d7:7e:5a:40:3d:05:94:3c:16:f1:5a:e5:3e:7b:62:65:08:
         fe:a1:b8:8a:02:56:84:96:1b:03:06:af:cb:c4:67:26:c6:3c:
         83:b6:eb:44:21:b0:dc:30:53:e8:ca:05:f8:cd:19:1a:cd:d1:
         d8:c1:cc:63:24:9e:93:6e:9d:36:e0:51:69:c8:93:1f:45:a3:
         8f:69:f4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:33 2025 by rpki-client