Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
File:                     7pl3APBqqbf8Ia67FWIpnVpiXdw.mft (raw, json)
Hash identifier:          dGigqECOYntzjuYie8toZHoAJ1P91jlpjGAYGjlafDM=
Subject key identifier:   7D:92:A1:AE:E1:63:EF:1B:74:26:68:E6:CF:34:03:15:58:6A:7D:CF
Authority key identifier: EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC
Certificate issuer:       /CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
Certificate serial:       0199FAA0DAAB4DDE06A45C7EED249C14933A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
Manifest number:          10
Signing time:             Sun 19 Oct 2025 04:01:09 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:09 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:09 +0000
Files and hashes:         1: 7pl3APBqqbf8Ia67FWIpnVpiXdw.crl (hash: 5UURhVRHx2YOAhrBSw8TmXLXMwwFCA7/zp3UYHTE7A0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:da:ab:4d:de:06:a4:5c:7e:ed:24:9c:14:93:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee997700f06aa9b7fc21aebb1562299d5a625ddc
        Validity
            Not Before: Oct 19 04:01:09 2025 GMT
            Not After : Oct 20 04:01:09 2025 GMT
        Subject: CN=7d92a1aee163ef1b742668e6cf340315586a7dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:02:39:c8:f1:1f:cf:99:16:ae:bc:de:48:
                    13:f2:dc:0b:80:35:a9:df:b4:8f:03:d9:38:1c:1a:
                    31:e8:50:96:e1:d5:54:bf:26:18:ba:4a:a0:7c:d9:
                    84:7b:2d:54:5f:82:ee:ed:74:19:02:13:4b:3e:48:
                    5f:0f:b0:58:25:bf:31:9a:73:0c:11:52:15:bf:fc:
                    58:15:df:9d:b6:0e:08:2f:3f:9a:5a:be:55:17:94:
                    72:5a:a3:c4:45:10:d3:34:68:14:88:96:60:3c:32:
                    90:c6:28:1f:67:3b:49:47:de:a9:96:51:c0:f2:c1:
                    dc:fa:f1:a3:2c:f4:a6:7a:fd:68:18:fb:b8:3d:81:
                    08:36:42:23:33:ad:c2:e8:20:99:ad:66:56:67:ad:
                    df:7a:78:57:e7:9f:93:af:0e:f9:df:e1:1e:c5:b1:
                    64:13:c4:44:f7:af:bb:b1:6f:82:70:17:e9:ce:49:
                    19:fb:19:3f:bb:02:45:58:ab:9b:fa:26:31:a3:c9:
                    e7:b2:96:4b:61:d1:0f:48:ee:57:a2:6c:43:2c:20:
                    80:d8:ba:f3:82:f4:2a:0f:ec:c3:d2:a6:33:8c:04:
                    20:bb:4d:31:6b:df:91:56:8c:74:c4:da:5d:b1:02:
                    e4:01:db:dc:f1:9e:7c:ca:35:11:18:2b:1f:e7:48:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:92:A1:AE:E1:63:EF:1B:74:26:68:E6:CF:34:03:15:58:6A:7D:CF
            X509v3 Authority Key Identifier:
                keyid:EE:99:77:00:F0:6A:A9:B7:FC:21:AE:BB:15:62:29:9D:5A:62:5D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7pl3APBqqbf8Ia67FWIpnVpiXdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/2906af-c8c8-4446-aa97-3830b53f265d/1/7pl3APBqqbf8Ia67FWIpnVpiXdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:cb:b8:1d:63:2b:bc:20:7f:85:d7:c3:50:f9:66:e6:b9:a4:
         9c:3e:ac:c0:39:db:e8:0f:29:62:1d:de:06:88:be:07:8f:16:
         5e:48:b8:d4:dc:c4:c2:07:4e:04:fc:f6:f8:98:72:24:6a:e2:
         92:a6:5b:d7:e0:f5:ed:48:5d:c8:ed:6b:ac:f9:c8:90:70:02:
         7f:d6:8c:35:3d:b1:bd:ee:0e:3b:e7:b7:82:9c:2b:a4:66:79:
         a6:2a:a8:18:67:d5:4d:14:28:20:00:1e:1d:a9:04:cb:01:a9:
         27:09:b6:ce:f8:ae:f7:e3:74:dd:cd:05:04:d4:94:44:5b:42:
         7e:0f:3e:a2:d7:3f:22:39:66:9f:a1:c2:95:53:35:50:56:7d:
         e6:37:ac:30:5f:dd:12:c2:a1:ac:eb:a6:de:e2:ef:45:2e:b5:
         ac:e3:f8:17:54:5a:a0:f9:33:24:74:ae:31:c3:21:a9:a6:c2:
         44:42:59:24:b2:cb:b9:83:2c:8e:a9:05:f6:89:63:f2:d1:c8:
         89:db:01:26:41:9d:b4:22:8c:51:c4:13:e5:6b:cb:ab:40:f8:
         39:54:5a:07:ee:85:4c:16:da:e9:ba:c2:9c:12:20:c3:be:2d:
         89:73:fa:53:c2:cd:dc:4a:e6:a8:c3:d5:44:20:47:e5:54:20:
         09:24:6d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:05 2025 by rpki-client