Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
File:                     d88I7pookZe3EQCl8AsZUB2UwJM.mft (raw, json)
Hash identifier:          vNlcIRzYbhZTKg1DSSQuSCXUHICCJAXK6h9f9VrRWrY=
Subject key identifier:   16:94:E3:5E:FB:4D:26:56:41:26:B4:F5:99:14:C3:0A:D5:8A:2E:69
Authority key identifier: 77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93
Certificate issuer:       /CN=77cf08ee9a289197b71100a5f00b19501d94c093
Certificate serial:       0199FC587966B823BE0DB3884FAC0C5432A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
Manifest number:          02EA
Signing time:             Sun 19 Oct 2025 12:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:20 +0000
Files and hashes:         1: WecqEhgOSAbXZ3Im_QJkisWYch0.roa (hash: yP0d2DYh05Kav8sMdEFhk832MGjVh6BaMrRs10W9wIw=)
                          2: d88I7pookZe3EQCl8AsZUB2UwJM.crl (hash: zI7fnzemfDgDH5oBbHjO935T7LO7HtB04uCEQ6SGaDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:79:66:b8:23:be:0d:b3:88:4f:ac:0c:54:32:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77cf08ee9a289197b71100a5f00b19501d94c093
        Validity
            Not Before: Oct 19 12:01:20 2025 GMT
            Not After : Oct 20 12:01:20 2025 GMT
        Subject: CN=1694e35efb4d26564126b4f59914c30ad58a2e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ab:87:43:d7:6f:78:6e:ff:e6:1d:e0:31:ee:
                    eb:ac:6a:44:28:fd:ce:31:66:ae:ba:75:03:36:ae:
                    c8:fb:5b:59:45:5a:e8:05:91:0b:9b:c1:b8:7e:f5:
                    41:31:79:1b:fe:60:00:c2:f5:3c:a4:21:18:b2:50:
                    6f:e3:fe:c2:3d:60:33:d4:58:2c:75:aa:2b:db:ed:
                    f4:15:94:af:e6:0d:aa:88:09:10:fa:be:37:34:9c:
                    a1:df:59:90:9c:fc:ba:f5:31:87:8c:45:bb:b2:ab:
                    13:78:b4:85:e7:24:34:ab:fc:40:fd:2d:da:6b:74:
                    e3:f7:df:8c:6c:96:c3:cc:17:c0:a6:4a:3e:61:2f:
                    05:7b:6f:32:a5:b7:1e:15:29:7a:be:e1:0b:2f:eb:
                    70:0b:07:c7:ce:0f:43:26:ee:3f:62:ac:a9:26:9c:
                    4b:52:14:c5:69:4a:e0:eb:9c:6a:f8:41:22:1f:e5:
                    92:ad:c9:cb:70:44:bf:e4:0a:30:11:b2:05:03:5c:
                    c4:0a:01:18:23:20:7a:41:7b:36:d0:92:2d:57:5d:
                    b7:0b:63:9d:09:31:1a:98:d2:47:fd:1d:e6:18:d9:
                    b0:85:df:ee:9c:79:ec:b2:6e:eb:d5:14:39:25:07:
                    55:46:9b:91:47:c3:90:60:57:f2:b8:15:fa:36:59:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:94:E3:5E:FB:4D:26:56:41:26:B4:F5:99:14:C3:0A:D5:8A:2E:69
            X509v3 Authority Key Identifier:
                keyid:77:CF:08:EE:9A:28:91:97:B7:11:00:A5:F0:0B:19:50:1D:94:C0:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d88I7pookZe3EQCl8AsZUB2UwJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9ceea6-3218-4b39-97a7-cfaf6ef849d6/1/d88I7pookZe3EQCl8AsZUB2UwJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:01:b1:d6:d5:de:c5:2a:78:4a:5a:71:26:0d:68:19:49:23:
         21:69:72:64:d5:d0:61:e8:90:5b:cd:4b:9b:8f:53:c2:34:1b:
         8a:98:85:12:36:f2:e2:b8:29:a6:bf:5c:c2:bb:58:69:80:e3:
         b2:70:f0:90:fa:6d:b3:7f:bc:32:d2:2e:b5:d6:5b:34:2d:0a:
         9f:bf:14:45:e3:62:13:d9:32:d3:61:f8:96:4d:8e:4e:bf:c4:
         13:78:ca:f0:df:be:e6:7b:73:99:94:87:19:2e:87:62:93:6b:
         a3:06:17:a8:00:86:7f:83:d3:d2:9e:f3:52:f0:73:8b:0e:da:
         1a:9d:03:82:76:15:5c:4f:23:02:b2:ca:cd:65:b3:52:6a:8d:
         76:12:9f:8e:d3:a7:cf:ba:33:ab:8c:35:b9:12:f4:8b:73:b3:
         4c:35:38:9e:49:a6:c5:a8:da:d8:0b:d1:82:19:cd:7f:17:70:
         8a:6e:39:4b:41:06:8b:f2:d8:a1:92:a0:7b:88:92:6a:ab:51:
         7f:65:c8:19:f4:9b:47:2c:a0:58:b2:92:ec:80:b3:fe:ff:fd:
         b7:cd:83:16:e3:41:3f:04:cf:a5:03:fb:5d:f7:74:b7:16:fe:
         d0:68:0f:ac:ac:d6:cb:29:76:28:3b:13:01:f5:2f:d2:06:b4:
         c4:53:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:47 2025 by rpki-client