Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File:                     M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier:          X1GN1NCEYaOeN/oXqfRdUXTGkUR/6rWG/vwL1yHOsPY=
Subject key identifier:   25:01:74:3B:9F:FF:BD:93:98:95:56:27:7C:9A:C4:D2:26:D9:34:5D
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer:       /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial:       0199FEB4656ECEB12A35FB8BC8C9AA6B2198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number:          0984
Signing time:             Sun 19 Oct 2025 23:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 23:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 23:00:59 +0000
Files and hashes:         1: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: qapF/m0XF+13K2tvmZaPF6Aei+4T+G2VEg4rXVccFGg=)
                          2: VQEhZHRI_51L-qPYAqsPHPNhngo.roa (hash: x+W3XCRbSsqe5EAx2dK2PnCFHJSGnsA8p+6YOIwEtcI=)
                          3: yZau-DwfbVfRH1H5nBnznu-Gh04.roa (hash: u7wjmjDpMKVCur/XQ8T5dAncaG/iDqX0/1UwHJhY4Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:65:6e:ce:b1:2a:35:fb:8b:c8:c9:aa:6b:21:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
        Validity
            Not Before: Oct 19 23:00:59 2025 GMT
            Not After : Oct 20 23:00:59 2025 GMT
        Subject: CN=2501743b9fffbd93989556277c9ac4d226d9345d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:95:e8:ef:4b:a7:61:bd:91:99:bb:49:9c:
                    6d:dd:bf:dc:91:97:ac:af:08:f8:1a:dd:28:f9:ae:
                    1f:e5:27:54:4c:25:32:77:4f:e2:fc:41:b7:06:6e:
                    a6:a3:aa:18:af:c9:36:5b:1d:0a:20:80:1a:4e:a4:
                    8d:b0:22:f4:97:8b:95:23:d5:f2:e8:9d:73:c9:27:
                    2c:67:63:39:55:28:4b:89:9c:7f:6c:5e:ea:2a:a9:
                    bb:80:a3:bc:58:04:67:39:40:ba:05:73:2d:e6:69:
                    de:b7:65:1a:2c:ca:12:b2:f8:b3:86:45:1d:8e:fe:
                    62:a7:b4:a2:78:52:b2:4c:3b:e5:eb:45:83:50:49:
                    27:61:2d:34:71:1c:f9:80:6b:47:72:ec:88:b7:1d:
                    95:e0:6a:05:3e:13:38:10:d6:7e:02:a8:9d:97:54:
                    67:74:f0:a8:e5:10:d8:02:90:2c:f5:3a:04:e7:3c:
                    82:a1:e5:b7:64:6f:98:cd:9b:1d:9f:52:ff:cf:c6:
                    c4:b6:a1:84:f3:b8:42:7e:5c:ce:51:5d:39:b9:a5:
                    a2:ab:08:bd:55:8b:6e:e4:97:2a:45:2f:c8:ed:4d:
                    06:ed:c1:76:44:5e:ab:1c:59:a9:41:dc:d9:85:00:
                    8e:b4:ed:13:73:20:0e:3a:42:ce:08:7f:09:c7:88:
                    ed:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:01:74:3B:9F:FF:BD:93:98:95:56:27:7C:9A:C4:D2:26:D9:34:5D
            X509v3 Authority Key Identifier:
                keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bd:e4:bb:05:a8:1e:8f:b7:3f:04:5a:c3:b2:58:8e:32:88:
         39:67:66:d9:f2:1d:34:37:04:4a:5a:47:47:72:49:72:6a:8d:
         a2:3b:dd:c8:f1:48:1d:57:ef:62:a3:fb:40:18:17:11:29:ad:
         c6:f1:f7:a7:e7:d2:6c:3b:f1:ff:24:39:84:25:8c:73:ae:ad:
         e1:69:aa:81:d1:70:67:7f:7a:6a:05:4a:7d:55:6c:03:85:34:
         aa:e9:eb:43:ee:d5:fb:6c:cd:c6:37:e4:80:ce:2e:cb:41:68:
         0a:b7:1a:bd:38:4c:2b:e4:26:71:3f:9a:17:de:10:c8:1c:1c:
         29:a1:ea:b1:14:d6:4c:f8:61:76:5d:a1:15:dd:04:f7:b4:45:
         1a:e3:84:69:db:9b:bb:fa:7f:80:06:d8:a3:5e:81:1a:af:97:
         c4:2a:70:c4:41:b7:04:56:0c:95:29:00:3d:c1:21:57:0c:24:
         aa:08:40:fb:36:65:4b:5d:4b:90:28:f1:d4:68:01:a3:a9:31:
         ee:33:9c:45:39:96:2f:de:37:f0:22:05:73:bb:b5:ac:0e:a3:
         2f:f4:e2:2f:fb:f2:e0:94:49:1c:fa:f3:89:a4:6a:73:de:c7:
         b3:97:c2:b5:21:14:2b:e5:4c:00:ca:41:4a:0d:d1:af:4a:bd:
         34:85:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:34:56 2025 by rpki-client