Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File:                     63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier:          uX/Yo+TI2VuPyB6TQAf7jVPebJBpGpNpf8mKrs4h5os=
Subject key identifier:   FD:36:2E:62:67:46:EC:8A:69:33:15:52:89:CA:0D:14:FD:9B:58:5F
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer:       /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial:       0199FE7D93777F6C3C968160837241434962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number:          11EB
Signing time:             Sun 19 Oct 2025 22:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 22:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 22:01:06 +0000
Files and hashes:         1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: dMiZFnEEqdrY3rZURQXHTzOHWUZa4fa+ksM6gPITNLo=)
                          2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:7d:93:77:7f:6c:3c:96:81:60:83:72:41:43:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
        Validity
            Not Before: Oct 19 22:01:06 2025 GMT
            Not After : Oct 20 22:01:06 2025 GMT
        Subject: CN=fd362e626746ec8a6933155289ca0d14fd9b585f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:85:8e:4b:8f:14:3a:2a:07:16:bd:81:2b:
                    41:06:a8:c2:99:9a:d0:99:7c:02:3e:6b:a5:83:11:
                    14:35:e2:36:9e:2b:74:96:0a:ec:b1:58:f6:19:74:
                    8a:6a:8e:b2:2e:65:63:07:82:e8:94:9f:a0:b9:d8:
                    da:cb:cb:90:c4:ff:08:ab:2f:92:74:6c:ba:ec:fc:
                    4b:f0:92:e8:c1:87:da:d0:cc:aa:3e:45:36:43:13:
                    66:2e:a2:5c:e9:81:fc:fe:2e:e1:41:e4:e6:e2:bb:
                    b4:de:ce:ce:ea:0c:4a:f8:79:54:d6:7e:ba:0f:8d:
                    0c:a6:60:6b:6d:44:47:84:d0:57:a4:ef:79:56:24:
                    af:8c:e5:7f:8d:b7:f8:13:3f:a5:ac:19:71:4c:42:
                    4e:8a:1c:54:cd:44:9a:f6:2d:7b:16:d2:4c:92:29:
                    89:c1:c4:56:d3:14:aa:d8:41:71:58:b6:fb:77:ed:
                    e6:0e:09:a8:5c:f4:ac:ca:8d:54:68:38:1f:21:c6:
                    3d:80:31:f9:4c:04:8c:dd:17:8d:13:e6:66:1a:56:
                    18:5d:4e:09:b2:61:57:24:77:28:d2:fe:da:58:c0:
                    54:a9:1e:bc:a2:aa:79:7c:47:a1:0a:e4:63:b3:6b:
                    8a:24:4a:7f:dc:06:37:00:90:ce:c6:20:1f:ed:4d:
                    c1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:36:2E:62:67:46:EC:8A:69:33:15:52:89:CA:0D:14:FD:9B:58:5F
            X509v3 Authority Key Identifier:
                keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:c2:1a:09:b5:3b:e0:3c:dc:38:21:c2:3d:f9:a1:c8:82:3e:
         bd:1d:3d:b5:44:46:c9:17:c1:5f:ce:85:04:0a:19:86:92:1f:
         dc:05:7e:95:c5:c1:b4:45:26:52:24:66:ac:dd:7b:10:37:63:
         be:2a:d6:70:84:d9:49:a6:8e:e2:05:f5:a6:a3:5e:b0:32:08:
         ed:89:41:ea:09:3d:4f:e6:70:39:9a:28:8c:5c:8c:d2:b4:84:
         11:b2:77:fd:98:d3:0a:3c:c0:37:da:34:fa:c4:7d:be:d5:65:
         e1:85:27:14:79:80:55:69:bd:a4:b5:b6:9e:4f:3f:e2:de:8b:
         1b:1b:be:76:18:d8:a7:1b:08:a3:d0:85:64:4d:f4:a4:04:7f:
         6c:b7:18:e5:31:c9:06:cc:95:c9:8e:2c:c3:1a:b6:af:03:a3:
         3f:1a:27:e1:e3:36:dd:78:01:d1:31:fe:76:bb:12:76:55:86:
         59:4b:4d:a0:31:13:62:21:28:c8:a8:ab:7a:59:0d:78:27:3f:
         ab:a8:ac:1e:00:76:e4:97:1a:61:f0:cb:48:e9:7d:64:21:f7:
         c8:48:68:8c:ed:0e:75:59:5d:5c:48:2f:af:f6:80:9d:00:fa:
         f3:3c:a0:b2:c7:34:02:37:73:eb:ce:ff:a3:60:a5:2b:ac:02:
         03:7a:33:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:48 2025 by rpki-client