Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
File:                     7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft (raw, json)
Hash identifier:          sr7u3GPSHkfxvYyaQ4adsPw+P9jbiZfuhoyj9HTCeF0=
Subject key identifier:   53:DE:7F:F4:D3:B5:66:84:27:9A:FE:6A:53:11:E9:44:16:53:A9:79
Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA
Certificate issuer:       /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
Certificate serial:       0199FD33E377B9B426A04A8F274E02159A64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
Manifest number:          02BF
Signing time:             Sun 19 Oct 2025 16:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:00 +0000
Files and hashes:         1: 7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl (hash: xZFIOeTBFHCKMoclyV9E5rZPcVqrLLdsBJrqBG4KX7g=)
                          2: qBI-2zh83yrxwps5B2wpeqKjzBE.roa (hash: +a40JJUntJvdA4SOSdLnTGJXNEt6hOF4b5LOIU68Stg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:e3:77:b9:b4:26:a0:4a:8f:27:4e:02:15:9a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca
        Validity
            Not Before: Oct 19 16:01:00 2025 GMT
            Not After : Oct 20 16:01:00 2025 GMT
        Subject: CN=53de7ff4d3b56684279afe6a5311e9441653a979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:7a:80:02:c5:2a:20:2d:85:28:a8:ec:f2:
                    e0:24:4d:3b:a9:df:4b:a0:a2:42:8a:65:d2:b9:74:
                    33:90:d8:91:4c:f5:f0:09:df:45:f7:e1:a5:9c:6a:
                    7b:8f:bf:ed:6c:3b:53:14:ac:7e:5b:15:68:3b:27:
                    63:77:51:2f:55:22:52:3c:44:ea:b7:d9:52:fd:fa:
                    83:ca:78:dd:4e:18:b3:0a:7c:de:62:29:2d:7a:2d:
                    3c:8d:15:5e:4f:4a:23:b2:c9:6d:9b:a8:31:e0:03:
                    39:93:9e:f2:2e:32:35:04:66:57:28:ef:c7:68:68:
                    16:05:3f:68:b3:e1:17:df:44:f9:c4:b0:e1:11:36:
                    c3:32:1d:3f:1a:89:6c:4b:bc:6c:10:e1:9b:b7:11:
                    a6:fc:10:aa:85:8f:e1:89:c3:69:5b:4d:26:6d:f8:
                    01:4e:f9:1d:99:45:83:68:3e:62:bd:94:d3:12:7f:
                    d7:10:6e:1b:8f:ad:2d:82:55:22:31:74:73:3a:bd:
                    dd:ce:ef:13:15:49:f0:b7:d1:3b:e5:c4:07:59:1c:
                    fe:75:62:ca:8e:b8:77:6e:3b:78:17:9c:d6:4d:98:
                    f3:0d:d8:e4:ef:8f:b6:57:9b:df:ef:7e:4c:80:22:
                    2a:34:95:45:fd:ee:eb:90:90:d2:d1:3f:ed:24:cc:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:7F:F4:D3:B5:66:84:27:9A:FE:6A:53:11:E9:44:16:53:A9:79
            X509v3 Authority Key Identifier:
                keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8f:fa:d7:6e:44:fb:c5:2d:d4:85:c8:36:b6:fc:8e:5f:89:
         33:e3:c3:8d:96:a0:1d:1b:40:6f:27:02:81:44:c2:84:80:48:
         02:06:ac:82:ff:d3:20:e0:6f:53:e0:b5:cf:cc:12:f0:a4:c6:
         ea:fa:5b:b8:94:d6:6f:38:dc:ff:49:a7:dd:54:5f:2f:8a:c2:
         82:21:66:b2:23:0c:0b:b8:ea:6b:89:cc:ee:4d:a2:ae:82:ad:
         7e:75:da:73:84:4f:b5:0d:b2:30:c4:81:1b:c3:45:d3:e6:58:
         c6:37:0b:e4:1d:c7:ff:6e:2d:61:51:08:6b:81:cb:4b:cf:d9:
         a3:89:96:ef:e6:a6:26:4f:e2:3f:f2:fc:fe:5f:10:75:00:c5:
         50:74:a7:93:b1:c5:88:96:e6:b7:99:67:a3:04:2b:5f:47:72:
         46:b8:e9:a4:40:0f:c9:fd:58:f1:d4:07:fa:54:79:85:a6:cf:
         da:2a:24:0e:22:a0:55:0b:0e:58:0c:04:cd:16:d5:42:e2:98:
         d1:b0:a6:12:85:8b:50:f2:bf:9b:8f:cf:e7:82:ae:76:6e:7d:
         38:94:49:e9:0b:a3:75:0c:1e:ba:ae:9c:6a:2a:17:01:13:c6:
         6b:df:a0:8a:76:f7:3f:cf:47:ac:f8:fb:d8:72:c0:cb:54:3a:
         14:e4:f0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:33 2025 by rpki-client