Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          z1U5RmSu4V1+Q/4VpMdQaKyvruzgY/GJp7XTNYKRUb0=
Subject key identifier:   D7:C6:3B:C8:5F:A5:E8:0A:16:F0:17:D2:EF:8D:D4:14:54:1F:04:05
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       0199FC2165166345DACC14C9F2AB2F21B812
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          1707
Signing time:             Sun 19 Oct 2025 11:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:10 +0000
Files and hashes:         1: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (hash: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=)
                          2: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: xTNxMIgtEmRMz4TpfrV0cB3Q+mJm3ZUxjErKCkpcP4k=)
                          3: VgCSXxbwzehn2ctSfBXyaKDQ0Qk.roa (hash: 6Cl3czJ3E1ejtDJ1h93PG7gjPFWMjRN0AsAbI/7uYt4=)
                          4: arYUP1gbgyJFh2KnJse2NHTC8nY.roa (hash: gMvEEEnqx+cQ6kaNmIe6f/glsXRGqS/Z0CsHnGPR7YI=)
                          5: eVw30aYw8PRhfFZw4dMd0Whk59A.roa (hash: JkDjfjPCyMxcq4MYYOfAPVOc6bE+PI6e43zkk8H6tQ0=)
                          6: shquK-USeN_EkxoNGdS2ZgkNKE0.roa (hash: BzVyA8GUWdfG25Lls/AIfXgaXvL4LtidvyHSI6ihPwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:65:16:63:45:da:cc:14:c9:f2:ab:2f:21:b8:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Oct 19 11:01:10 2025 GMT
            Not After : Oct 20 11:01:10 2025 GMT
        Subject: CN=d7c63bc85fa5e80a16f017d2ef8dd414541f0405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:de:ee:90:1b:0b:73:d3:a2:9c:01:a6:8a:
                    e0:7f:6a:5c:2a:30:55:3c:36:cf:65:eb:21:e4:b1:
                    e3:99:46:0e:71:e3:16:ed:6b:9d:c7:dd:8c:0b:df:
                    f8:22:5f:1e:c4:17:42:01:f8:a9:9f:0d:87:dc:dc:
                    da:38:86:b1:dd:7e:e9:97:77:83:b1:40:48:ec:88:
                    9c:47:77:3c:94:e7:f5:39:3e:60:0c:88:dd:4d:aa:
                    cf:d9:d9:64:8e:bd:b0:e5:93:41:a5:0d:e6:80:a3:
                    25:a2:3f:e9:f0:2a:68:65:f5:dc:33:46:5a:39:78:
                    8d:b3:8f:e6:f4:42:75:56:0b:d2:60:a9:3f:27:69:
                    8b:28:8b:db:ef:f4:aa:a0:6b:26:7f:e7:a8:ec:54:
                    87:8f:f1:de:eb:dd:0e:ff:47:28:53:b5:8d:da:6f:
                    10:3e:a5:77:e0:ac:69:7b:7b:ec:f2:43:ab:80:48:
                    e2:38:a8:45:7b:86:1d:2a:1f:d9:97:03:57:63:c1:
                    18:76:5f:c7:c9:32:da:e6:8d:57:87:10:5c:d7:67:
                    51:2f:ea:b4:ed:78:b3:6d:34:c3:13:f5:a3:a5:c5:
                    66:d0:41:96:4b:40:b8:c1:7c:bd:93:41:c9:a5:7f:
                    b8:d3:7b:85:fa:2d:90:22:b4:40:5d:7f:03:e0:21:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:3B:C8:5F:A5:E8:0A:16:F0:17:D2:EF:8D:D4:14:54:1F:04:05
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:da:48:89:6a:e0:d0:b6:d1:ff:76:c2:59:7d:4e:2e:1b:ae:
         dd:e1:ff:01:96:7c:5f:eb:58:74:f7:70:c5:ec:e9:4e:97:c6:
         38:e6:2d:4f:92:8d:e5:55:25:b0:3d:d7:d2:01:31:d2:27:51:
         3b:e1:35:46:29:f0:c5:c0:8d:60:37:dd:5d:50:76:9a:fc:99:
         53:87:f4:a0:a4:bd:16:12:2f:70:08:01:eb:9e:89:7e:5a:f1:
         26:80:28:65:a0:7f:b7:2d:c6:27:03:e4:d1:87:21:8a:ed:80:
         16:ff:87:bf:22:5f:2b:c9:75:4f:c7:bf:20:7d:f6:0e:91:a5:
         c3:d5:d2:ac:f6:ab:e3:c8:58:e5:d7:6f:5c:73:7d:4e:5d:79:
         13:e6:f9:55:05:89:92:c0:f4:ab:c3:ec:5e:b4:58:11:50:0a:
         10:9a:ff:75:6b:67:2f:d4:57:ae:88:11:7f:34:ae:95:0e:27:
         f0:c8:e2:88:25:1c:ec:06:57:58:6d:31:35:ca:66:f0:bb:bc:
         27:b4:6a:0f:de:69:28:d7:70:19:48:ea:f1:25:ff:cc:35:e0:
         ff:6c:b7:d8:5e:72:76:b3:0c:0d:21:8f:d0:b7:8e:0d:8c:ab:
         cc:90:c2:09:73:22:bd:e5:33:b1:21:f2:8f:70:d7:ea:6a:44:
         3a:36:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:12 2025 by rpki-client