Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File:                     srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier:          MOowNXQjuvZ5ey15W7ACF7kgbriB29tUZ1CUxg98+pw=
Subject key identifier:   12:98:06:DD:D1:35:00:B0:F1:3B:A4:46:0E:19:E0:3C:A7:A4:4D:60
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer:       /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial:       0199FC21723BB29D41067F689E23988725F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number:          06D7
Signing time:             Sun 19 Oct 2025 11:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:14 +0000
Files and hashes:         1: Ypuf3qV0JE2AXfUrk2eNRiGtQN0.roa (hash: AxG4SgT0VS5arc9FHux7pFhrFyFYGK0/0AgX9zPeSBE=)
                          2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: aHzVNwiJcktrcLm15OkhOYhmr83har0MWYbZgeI6H6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:72:3b:b2:9d:41:06:7f:68:9e:23:98:87:25:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
        Validity
            Not Before: Oct 19 11:01:14 2025 GMT
            Not After : Oct 20 11:01:14 2025 GMT
        Subject: CN=129806ddd13500b0f13ba4460e19e03ca7a44d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:a3:e2:76:c2:23:7e:79:98:56:61:35:d4:
                    58:f5:37:1f:cd:e4:07:7e:40:c6:69:7f:b2:f1:7d:
                    44:0e:e6:47:c2:6d:e4:7d:45:47:ea:a2:7c:97:5f:
                    da:ab:74:86:49:37:0e:5f:96:d6:cd:45:71:e5:7b:
                    d5:d2:38:17:c0:f0:78:b8:5c:56:ce:54:06:5e:d2:
                    3b:a4:50:e1:2b:78:6a:26:77:6d:58:0a:ab:1b:f6:
                    b7:7f:c3:a9:b5:9b:04:e5:02:b3:62:cf:93:8d:1e:
                    2c:8b:9d:19:24:7c:a0:d2:cf:9c:6e:1a:83:5e:84:
                    6f:3e:c1:57:17:e0:08:9e:c5:1d:c9:45:47:a2:80:
                    16:35:27:f8:dc:88:e6:ed:18:bd:51:4b:88:8a:2f:
                    1b:09:28:ba:d8:a1:c6:64:3f:97:f9:f0:3f:1a:a5:
                    f6:55:cf:85:ae:83:bd:f3:38:27:a0:fd:6e:2d:07:
                    ac:a9:af:00:0e:80:5e:1b:61:14:c2:2d:37:ca:5a:
                    33:d4:10:31:cc:ed:79:3a:3e:6b:2f:47:40:84:f8:
                    8c:ef:95:3a:c1:dd:8b:10:29:b6:28:9f:94:9b:e6:
                    91:96:40:44:09:50:77:19:dc:1a:aa:fe:0c:02:82:
                    84:0c:df:48:63:07:e5:86:ad:a6:50:51:be:6d:f2:
                    16:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:98:06:DD:D1:35:00:B0:F1:3B:A4:46:0E:19:E0:3C:A7:A4:4D:60
            X509v3 Authority Key Identifier:
                keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:54:b5:6a:c8:73:d8:23:5d:86:a3:f5:5a:4f:f1:64:3f:
         fe:bb:bb:a4:da:39:d8:b5:32:ea:a0:74:7d:80:7a:be:52:73:
         e4:de:26:56:08:58:22:6e:da:e7:e9:11:77:de:d4:a8:d4:1e:
         2e:54:df:b2:6c:f9:93:ab:03:36:a6:72:4c:ed:ed:b6:c8:8b:
         ec:30:24:d6:9c:43:f8:ea:f4:72:6d:6e:23:80:ac:84:2e:ae:
         8f:60:5e:ab:71:ff:98:cd:81:10:93:6c:04:1e:83:2d:a2:2d:
         27:45:0b:c4:32:5d:6a:d9:6c:37:7a:0a:df:c4:0c:03:e8:05:
         ed:a8:fd:43:b9:19:57:f8:5a:22:6c:78:27:7d:f0:bc:e1:93:
         1f:5c:d5:7d:39:0a:36:1d:10:f0:15:72:cc:76:62:64:44:43:
         61:d3:5a:58:28:c8:09:7b:e5:12:0b:62:0c:f9:7e:ed:91:16:
         40:00:e6:31:2b:0f:69:8c:4d:1a:20:a1:ab:2c:ae:be:d2:63:
         61:ec:1b:48:63:00:07:06:86:27:84:07:6f:92:1f:f0:ba:01:
         c4:15:3e:a9:7d:c1:16:c4:3d:b8:59:59:38:37:2a:fb:ee:95:
         98:29:3d:66:12:d8:09:87:89:ae:bb:95:05:85:3a:72:08:ae:
         09:50:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:13 2025 by rpki-client