Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
File:                     7PQndr5TK9BXUzKFXYxCxJUu2TE.mft (raw, json)
Hash identifier:          HsjQqLPW+rttzU3be7DDkrlqRD2vdrx4p0YY427rm8g=
Subject key identifier:   9C:CD:57:7D:C5:DC:7C:1D:04:3C:3F:41:72:2C:4A:E9:4C:A2:4E:17
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Certificate issuer:       /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial:       0199FCFD1A4CFEE2826B4AA9F2730A43D332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 15:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:09 +0000
Files and hashes:         1: 7PQndr5TK9BXUzKFXYxCxJUu2TE.crl (hash: 5qKs5LATi0X6MPEP0MBP1PbIVKC0OiGVHep1KGl2f8s=)
                          2: DhrEeypsTDYQFqtn5MxSVP9RNeU.roa (hash: YbsKC7hbnZNHtFxguJmaXdHmEbB7PGi2yECVIv3in+Y=)
                          3: ZKMwNQCipGUVjAp5gwSAAjvX0cM.roa (hash: Q7ZeIOfUNPi7mpE3FmolNTr+UgiuMWmE4orBE7DJEUE=)
                          4: bU9Ico-cyM-PvgK1SQj6vU4e1Ls.roa (hash: doVS673KgZlyTzdhMbWDR8Kab55ovw32HoLTIKOV1EA=)
                          5: voL46_JMwU4qTPsD8VeKh98SS14.roa (hash: qZtqKCrc3zkDk9p5tCOUN22BVn6pEnapViAnA8r2BYY=)
                          6: zBiPaeu0AKhZFAJVkSF6Cz5eK6Y.roa (hash: nyGClrw0gv+ItcF8Z6pEhgDK/R+w+uNDhXQXgQXv0GY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:1a:4c:fe:e2:82:6b:4a:a9:f2:73:0a:43:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
        Validity
            Not Before: Oct 19 15:01:09 2025 GMT
            Not After : Oct 20 15:01:09 2025 GMT
        Subject: CN=9ccd577dc5dc7c1d043c3f41722c4ae94ca24e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:70:dd:ba:d2:c3:34:90:77:4f:43:2a:fc:
                    62:12:e8:47:60:61:63:41:59:9a:a2:b9:79:c5:24:
                    b3:cf:d3:d0:50:07:ee:93:f6:be:23:4a:e8:cf:5a:
                    02:54:db:3f:c5:1a:2d:39:b5:eb:c9:ed:9e:51:97:
                    a3:d8:af:6d:f9:51:2b:33:c4:36:7d:ef:15:19:e4:
                    1d:88:cd:1a:e9:5b:d2:c7:22:10:5e:ea:c4:e3:e1:
                    e1:4c:c8:6b:f4:77:1d:f1:e0:9d:b1:9d:ac:97:58:
                    ea:6a:99:25:52:b0:43:62:16:95:e5:42:21:0a:7c:
                    92:e2:f6:e4:9f:54:83:a5:da:5b:37:d4:2e:78:66:
                    4e:53:d3:0c:5b:c6:16:8d:ee:a0:af:4a:7f:54:7a:
                    c2:82:2b:37:f2:c5:be:b3:0a:93:4c:bf:e4:cd:44:
                    6e:fb:40:3e:3b:89:6a:b4:db:0f:df:09:b8:5d:9b:
                    8f:ec:78:c8:a1:54:3d:5e:0e:c8:2f:f3:50:ba:a5:
                    a7:2b:a4:39:29:81:ad:4a:0d:04:ce:84:48:60:e3:
                    4f:ae:ea:53:82:da:23:de:17:2a:dd:d5:43:3e:f7:
                    3a:71:e4:b1:ef:7c:94:72:0e:ac:3e:48:02:08:85:
                    10:c5:25:e7:d5:41:17:43:00:a1:8d:15:f5:05:2f:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CD:57:7D:C5:DC:7C:1D:04:3C:3F:41:72:2C:4A:E9:4C:A2:4E:17
            X509v3 Authority Key Identifier:
                keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f8:fb:4c:5b:2d:d2:50:5b:c9:79:1f:c7:ce:87:57:67:f7:
         ec:8d:c2:af:22:18:66:81:1a:24:a2:1a:62:cf:9e:43:56:15:
         ae:54:72:66:91:d5:bf:54:8e:02:44:10:21:f6:c9:4b:31:57:
         74:2f:48:7e:20:70:f3:bf:be:4a:68:c8:87:6b:92:61:19:34:
         a9:2a:5e:e4:5a:94:a9:4b:bd:2e:88:a3:a1:fa:3b:f1:ea:fc:
         2e:a1:a9:41:ca:02:bd:77:2c:a8:d7:d5:3f:03:67:2c:50:fc:
         ff:fd:0e:12:4f:92:61:c4:86:1a:7c:c8:98:e2:66:29:5c:03:
         2d:8f:a2:b7:a2:1a:63:95:0b:56:61:b5:b1:f7:f2:2c:a4:64:
         06:e0:bc:ff:6a:fa:e8:eb:22:f1:c7:c7:c3:37:f8:54:ca:66:
         0c:40:7f:a5:e3:a5:ea:77:67:f3:43:8a:c7:9f:bf:89:fe:a8:
         15:a2:b9:a5:0c:81:61:16:00:be:6c:a7:46:e9:b5:49:0c:fa:
         4f:4c:2a:03:2a:1d:26:1e:39:89:2a:82:ed:4c:bf:92:d6:7b:
         74:7f:0f:3a:86:c1:f1:17:66:2a:34:11:2f:9b:9c:41:ef:aa:
         26:63:e8:85:50:16:d2:e8:fd:e5:35:33:2e:44:7a:54:21:16:
         d6:a1:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:21 2025 by rpki-client