Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
File:                     s30V5DRw7wodxwEHQ5P-cPLfjQY.mft (raw, json)
Hash identifier:          LIlRuknyMKBhkg/0hi2lw1g0K+F5CPOkFtyAurep9gw=
Subject key identifier:   E6:3B:A0:33:06:CB:07:1A:7B:1D:61:85:86:4D:99:3B:EC:D5:67:E9
Authority key identifier: B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06
Certificate issuer:       /CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
Certificate serial:       0199FCFDA7F5A9AFBC1D7C92A5966B063B4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
Manifest number:          07A7
Signing time:             Sun 19 Oct 2025 15:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:45 +0000
Files and hashes:         1: htjbCi_8qWneZo93vjbuIGh7N8U.roa (hash: g/IDR+6xEAPBW47ZPcz7WOY/otLteI/yTBnpVyBmbgA=)
                          2: s30V5DRw7wodxwEHQ5P-cPLfjQY.crl (hash: bl+wNNvNJlTSXnvZ8BYPAt1lBX91cV9akwno4lM6YBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:a7:f5:a9:af:bc:1d:7c:92:a5:96:6b:06:3b:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b37d15e43470ef0a1dc701074393fe70f2df8d06
        Validity
            Not Before: Oct 19 15:01:45 2025 GMT
            Not After : Oct 20 15:01:45 2025 GMT
        Subject: CN=e63ba03306cb071a7b1d6185864d993becd567e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:59:ec:d8:f3:74:4c:59:85:6b:0f:d1:2f:
                    76:e2:d2:c2:a3:6d:d3:43:d2:39:90:6a:47:5b:2d:
                    21:78:cf:a3:f5:05:b0:73:a7:6c:ac:ec:42:bf:d1:
                    55:6e:37:99:b9:bf:57:63:61:ff:be:ae:0d:1e:1a:
                    db:ac:b0:08:61:55:e6:1e:4b:e3:27:be:ee:78:33:
                    86:75:8e:2b:65:dc:1b:2f:9e:bb:9d:33:15:d5:05:
                    76:38:9e:95:4d:a6:06:6d:28:b6:b5:42:e7:3d:92:
                    f5:1a:e1:50:bd:5d:7b:48:da:ca:fe:0d:d9:1c:d4:
                    ae:8c:69:bf:88:96:2e:27:3b:2f:61:fb:02:b5:70:
                    e4:d4:87:69:e1:db:b1:4f:98:bb:8a:86:be:35:99:
                    c3:55:dd:0b:72:14:5f:bd:3c:e0:24:93:34:e2:50:
                    64:b9:f7:32:69:ba:60:ce:45:c0:16:6d:03:d5:71:
                    9b:b3:a1:9c:c8:c4:af:13:ce:4a:cf:6e:3f:f4:ea:
                    eb:87:eb:75:98:fb:1f:1a:e0:27:4f:62:38:2f:51:
                    1c:e3:cc:57:6c:1e:fa:99:96:0d:06:3b:ac:07:56:
                    d8:29:7f:fd:25:b1:96:09:39:5f:9c:97:5c:87:c3:
                    7c:5f:6f:bd:29:68:d4:bf:64:86:3e:3b:62:56:0a:
                    21:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3B:A0:33:06:CB:07:1A:7B:1D:61:85:86:4D:99:3B:EC:D5:67:E9
            X509v3 Authority Key Identifier:
                keyid:B3:7D:15:E4:34:70:EF:0A:1D:C7:01:07:43:93:FE:70:F2:DF:8D:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s30V5DRw7wodxwEHQ5P-cPLfjQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d6744d-b5cd-4da7-a10d-daf669fabf80/1/s30V5DRw7wodxwEHQ5P-cPLfjQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:17:1a:4e:a7:4f:77:57:b0:be:b9:90:81:e2:fc:75:5b:3f:
         31:18:bc:bc:8a:0f:a3:3f:4d:89:78:9f:3c:60:56:62:5b:a8:
         06:9e:8f:e2:db:c2:c2:78:71:63:2f:40:3c:cf:55:c7:dd:58:
         49:77:71:33:a7:64:4e:ed:7c:dc:85:11:ca:b7:66:11:e0:f2:
         3d:43:3f:0c:1e:13:bf:75:4a:de:56:b1:e6:1c:37:a5:e9:11:
         8a:94:d6:16:c6:20:f8:8e:e6:58:f8:76:96:9a:d3:93:18:40:
         49:49:e6:95:8d:1d:17:01:64:60:26:e8:c4:1a:73:9b:4a:3d:
         c4:13:f5:c1:ee:65:83:bd:f2:87:6f:b7:88:64:0a:e2:1c:6a:
         05:19:26:db:71:af:5f:ac:b7:21:33:dd:ac:11:5c:41:85:f3:
         59:a0:93:67:64:aa:7f:83:c8:28:9d:49:49:09:2b:0a:cf:53:
         c8:61:51:54:e3:f2:87:a6:fc:34:b8:62:36:5f:af:8f:8c:8e:
         e4:6a:d1:c5:07:1c:5a:e0:95:15:af:0f:2a:9e:9e:6b:30:e5:
         5c:c8:5b:77:45:3c:57:76:1a:f7:e6:ac:ea:f7:0a:80:20:2c:
         7f:8e:4b:6f:cd:1d:4f:4d:30:e1:24:06:41:e2:a5:e1:e9:76:
         83:fb:a6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:21 2025 by rpki-client