Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
File:                     GiynpYOySXw2fp6G3rect6c3Wkc.mft (raw, json)
Hash identifier:          WBxxfGBLvcMYwUYF+Esqle6GKh6SHbt1Z0NTMDJ+sGY=
Subject key identifier:   72:0B:4A:3E:E8:D2:09:49:C9:D8:1B:63:07:F6:71:E3:23:47:33:C9
Authority key identifier: 1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47
Certificate issuer:       /CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
Certificate serial:       019A0147E05D4548899652A72D9E0B75061B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
Manifest number:          0D7C
Signing time:             Mon 20 Oct 2025 11:01:18 +0000
Manifest this update:     Mon 20 Oct 2025 11:01:18 +0000
Manifest next update:     Tue 21 Oct 2025 11:01:18 +0000
Files and hashes:         1: Btc4qpdT0aRzIHC1dA2Swul-oTg.roa (hash: uKGbMNZQlHtPafIv0wdS9IBOfkHQ7RxwMz40Kx+7kY8=)
                          2: GiynpYOySXw2fp6G3rect6c3Wkc.crl (hash: vsYbMkggvxLdMWCgY0NticUukeO7TNfqvud2WWD0ds8=)
                          3: LowqF6jNQcP5gUuUZPzdzSTRQ_E.roa (hash: MaL24Dedevc8MXN5LlmhfVbJ0dnqBAZxBiWzlel5CFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:47:e0:5d:45:48:89:96:52:a7:2d:9e:0b:75:06:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a2ca7a583b2497c367e9e86deb79cb7a7375a47
        Validity
            Not Before: Oct 20 11:01:18 2025 GMT
            Not After : Oct 21 11:01:18 2025 GMT
        Subject: CN=720b4a3ee8d20949c9d81b6307f671e3234733c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:28:7e:80:b2:69:09:72:79:e3:5d:c2:4b:50:
                    46:8c:81:a8:5a:38:5a:bf:89:f2:0a:c9:43:2d:7a:
                    6b:27:51:05:2b:35:47:09:76:29:82:40:9d:bf:67:
                    5d:39:03:19:94:46:af:39:a9:79:7c:56:36:d7:19:
                    d0:b5:0d:4e:b6:f7:6d:30:15:bf:0a:97:a8:e6:0f:
                    ab:9e:97:95:88:36:6f:bb:7e:43:7d:cd:54:34:0c:
                    23:56:7a:d9:c1:b5:50:3f:3b:e7:12:0a:26:58:3a:
                    24:95:dd:25:b7:77:9a:22:83:1a:fb:19:6e:e7:c6:
                    42:13:e0:10:b9:85:93:0d:4d:de:20:e7:ec:1a:eb:
                    d8:fc:e2:0a:a7:49:0b:e8:6b:b6:ac:cf:8e:4d:e7:
                    58:b0:60:21:0f:56:ae:be:1f:c4:f1:8f:8e:f4:47:
                    f6:6f:4c:ab:4a:0a:52:76:18:4a:e6:8d:13:bb:dd:
                    df:88:c1:43:46:6b:49:35:b9:6f:fb:67:ce:77:65:
                    2c:84:68:c5:8e:d0:97:85:50:29:c1:d4:d5:be:5a:
                    38:ec:7d:34:e7:81:ff:e0:3f:fe:ff:97:f2:51:1c:
                    6c:6a:23:7a:5e:37:c8:84:05:42:5c:d7:0e:f1:cb:
                    9e:f3:d6:7d:13:7c:a6:d5:2d:f7:c5:89:0b:aa:cb:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0B:4A:3E:E8:D2:09:49:C9:D8:1B:63:07:F6:71:E3:23:47:33:C9
            X509v3 Authority Key Identifier:
                keyid:1A:2C:A7:A5:83:B2:49:7C:36:7E:9E:86:DE:B7:9C:B7:A7:37:5A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GiynpYOySXw2fp6G3rect6c3Wkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ccc8c9-cc10-4ff9-acc0-84c65b193758/1/GiynpYOySXw2fp6G3rect6c3Wkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c6:fc:8c:42:03:5b:1b:28:d6:82:ce:df:cc:c5:b3:3d:73:
         cb:ee:ec:16:8d:b3:b1:a8:06:c5:4d:74:11:9d:a9:0d:71:45:
         c2:7e:4c:02:08:04:e1:b0:0f:d0:67:bd:4b:2a:da:62:85:05:
         f1:0b:c4:56:24:87:71:ab:77:43:9f:5d:ad:1b:ad:c3:1c:d1:
         da:73:8f:49:7b:d0:01:be:eb:27:62:06:a0:b0:cb:be:c7:23:
         2c:4d:ff:a4:e2:c9:a4:38:dc:57:1b:61:f5:04:fe:ba:29:ff:
         1c:dd:b0:b4:a9:3b:09:cb:89:df:59:94:68:3f:67:c9:49:e9:
         2d:78:1d:a0:71:8a:0a:a8:34:8d:cd:9f:d2:ce:57:e9:76:a2:
         25:28:0d:4c:83:92:e9:6a:fd:08:2c:eb:2c:e8:c8:a0:dd:cb:
         86:cf:7c:8d:07:a1:a0:cf:7d:15:cc:47:75:b3:8a:db:5b:ee:
         5e:01:b0:82:eb:f6:84:1e:d9:6a:19:72:67:e5:9f:98:82:fc:
         c3:dd:58:44:0e:96:55:14:0a:d4:02:03:ae:31:10:04:54:91:
         4c:d0:50:dd:d7:5a:c7:d2:69:40:0b:ed:de:ac:10:81:67:41:
         82:b0:51:e2:ba:65:74:ec:5e:63:93:8d:f5:e4:ba:cc:24:d8:
         a1:71:42:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:53 2025 by rpki-client