Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
File:                     x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft (raw, json)
Hash identifier:          lbi+voAyrmGKxnlYXXjuGXI1JW64d7XUVAT6pNo1//0=
Subject key identifier:   EB:00:61:E1:96:07:95:DF:20:85:4C:E6:10:2B:FB:98:4B:45:1B:BD
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Certificate issuer:       /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial:       0199FDDA10218F75C53456FCFB9C00A10DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 19:02:30 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:30 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:30 +0000
Files and hashes:         1: NEVyHfghC_0IzY6RTdXjWpjvCt0.roa (hash: xHfTcNtnEobrDQmw9/aNxrvi78pLeFshtErwqNjdN7Q=)
                          2: x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl (hash: qWtV+1QxSeVGSoDPyNvcERhWm21N/v/mQYDpRf6eiK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:10:21:8f:75:c5:34:56:fc:fb:9c:00:a1:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
        Validity
            Not Before: Oct 19 19:02:30 2025 GMT
            Not After : Oct 20 19:02:30 2025 GMT
        Subject: CN=eb0061e1960795df20854ce6102bfb984b451bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:77:b7:c7:59:ed:38:e1:bc:e6:c2:df:ce:50:
                    e2:62:79:64:8f:44:97:28:f2:3d:9e:ec:d2:41:f8:
                    3f:02:64:29:ad:24:dd:fd:76:e3:75:6c:28:a2:cc:
                    7e:99:3d:58:26:05:61:73:88:ae:74:70:35:ab:c2:
                    6c:ae:db:5f:b0:c4:1e:33:3b:dc:e4:a6:9c:9f:93:
                    e0:e7:46:5f:f5:9c:33:b2:d2:3e:da:a2:80:22:c9:
                    6e:54:10:37:67:c2:b3:d8:0e:36:9a:62:a8:fb:11:
                    2d:a3:15:b4:77:49:87:3a:04:b4:26:ca:1a:60:8a:
                    f7:17:8d:80:64:a5:c9:3c:f8:68:2e:75:63:3a:2d:
                    61:73:0e:a4:3b:ad:fb:ab:5b:2b:cf:58:f6:d5:8a:
                    d7:88:fd:06:2b:1b:85:fe:49:5a:98:75:53:cd:ac:
                    4e:46:6f:ba:48:a6:6c:96:bf:05:16:df:d9:c6:91:
                    a2:0d:93:ac:80:d4:cd:ab:6a:a2:ac:68:f9:2d:dc:
                    92:8e:8c:14:61:0a:98:d1:8c:27:f0:0c:e0:8c:bb:
                    e9:68:47:97:1b:39:cd:7d:6f:41:94:ba:58:30:31:
                    2f:36:ab:e5:7d:d9:5d:15:57:a8:2c:b6:c3:4f:15:
                    47:6a:ea:43:20:54:aa:c2:3b:03:6e:51:a8:9e:f3:
                    fb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:00:61:E1:96:07:95:DF:20:85:4C:E6:10:2B:FB:98:4B:45:1B:BD
            X509v3 Authority Key Identifier:
                keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:0f:bd:7e:fc:6b:e2:05:37:1d:ef:af:29:61:17:44:32:d7:
         53:b2:a3:4d:ee:81:33:57:df:3d:30:62:eb:5f:07:98:a0:c0:
         a6:4d:83:f6:01:2a:a3:7f:f8:48:a9:6d:c7:14:ee:19:37:a0:
         cd:c1:a2:02:e6:00:53:6b:1f:7c:fc:c4:12:37:c0:69:81:b6:
         a7:d4:68:00:8d:27:d4:2f:fb:cc:96:8f:76:83:73:77:f6:d2:
         da:c4:92:56:a6:18:1d:ea:95:f6:9a:17:4a:dd:0a:6d:db:b0:
         67:13:5d:49:b0:36:94:47:f2:59:71:6d:70:c2:48:9e:f0:74:
         29:fc:b6:2a:ee:63:96:6b:93:eb:f0:64:93:e3:d3:cd:3d:d4:
         c2:81:f5:b8:5f:2f:73:71:ee:15:d4:08:e5:49:bf:3a:0c:d1:
         5d:83:8e:f0:b0:ac:62:8a:cc:3b:ea:e7:b2:00:ae:8c:30:38:
         27:f4:41:9a:8c:5b:70:71:f2:e7:0f:f5:00:5c:5b:47:0d:ee:
         94:87:cb:e4:20:83:d2:0f:37:cb:f1:32:78:87:5e:f1:f6:85:
         9f:33:6e:fe:1a:4b:88:02:e8:9a:cf:55:02:1a:26:ea:0a:db:
         4f:2a:aa:79:8d:a6:ad:31:7e:bd:af:da:40:95:15:92:aa:b0:
         78:b0:57:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:13 2025 by rpki-client