Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          CG/a/RhrdSE+D4EG7OOtyT9752rIP+eBTp9gcVexVuo=
Subject key identifier:   A8:9E:CA:F1:A6:60:BA:15:9E:69:0F:F3:56:22:28:0D:D5:F1:2A:2F
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       0199FDD99F1DE0783990F4FF17365A90D440
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          04F7
Signing time:             Sun 19 Oct 2025 19:02:01 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:01 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:01 +0000
Files and hashes:         1: 7Mt7cRBkGNK5rwDG55TbMVEwg-I.roa (hash: Ezyc6rp9QXhSptaXi5ro4QW/Qjk9pSK7ba82HZyPR48=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: fIc4zozbb357nm+Rf8XWYsp1oXvoHceHIIcaNtC3wts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:02:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:9f:1d:e0:78:39:90:f4:ff:17:36:5a:90:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Oct 19 19:02:01 2025 GMT
            Not After : Oct 20 19:02:01 2025 GMT
        Subject: CN=a89ecaf1a660ba159e690ff35622280dd5f12a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:6d:72:a1:f6:a8:5d:03:8c:6b:ba:09:5e:
                    09:f1:1e:57:a4:52:e5:85:ef:6c:82:cd:e9:52:55:
                    e1:ed:a1:5b:22:d1:38:5a:42:36:59:52:dd:22:b3:
                    8d:33:0a:c2:a0:e8:be:41:59:15:8e:f9:40:d7:ed:
                    08:05:58:e5:9b:9a:20:b0:33:05:96:36:d9:07:a7:
                    18:e7:16:1e:dc:2f:9e:8f:81:c8:e4:e7:b9:4c:9c:
                    12:98:df:0e:49:cf:db:00:7f:8a:a9:2a:d5:41:bd:
                    88:e0:b2:96:50:44:05:7d:13:af:05:2f:8b:79:2f:
                    e4:ed:a9:b3:a3:af:c3:b5:e3:c5:08:f7:74:f4:3f:
                    37:89:ec:28:b7:84:84:8e:94:8e:e0:2b:ba:50:69:
                    a0:a0:e4:6e:6b:6b:24:32:22:09:6d:90:3e:e4:f5:
                    3f:9d:f5:51:de:55:c9:ae:ec:6c:b5:bf:ad:97:0b:
                    8b:27:a8:25:9b:6c:c3:0e:0a:66:a2:b6:68:14:ae:
                    d2:63:9c:38:ee:0d:a6:4d:da:52:f0:d6:1c:f0:ee:
                    ed:88:60:46:07:88:2b:21:67:39:28:d1:8c:c4:e8:
                    cb:19:40:87:94:d0:95:fb:5f:19:4a:fe:c7:aa:00:
                    59:f6:3a:d5:c5:98:1b:03:d1:db:dd:2d:35:2f:6c:
                    6b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9E:CA:F1:A6:60:BA:15:9E:69:0F:F3:56:22:28:0D:D5:F1:2A:2F
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:75:a1:77:58:2d:32:47:61:da:f7:4e:8f:4b:e3:28:da:ba:
         c0:a0:96:30:61:2a:07:f3:b0:29:be:49:5f:46:e5:d2:89:30:
         59:53:20:d8:b7:6b:fe:3c:a6:71:ce:94:8f:ea:60:ad:f2:6d:
         f4:08:17:56:39:da:95:5b:ec:9d:06:30:9c:6b:de:19:58:98:
         b3:88:3a:c3:c4:40:5c:6e:67:b7:ea:9d:88:ec:9a:51:80:e5:
         86:ba:e5:53:a4:61:76:e9:82:1c:07:c7:6a:67:ff:e9:ac:9f:
         3b:74:ff:57:e2:e4:7a:2b:4e:8d:59:00:c9:30:fd:42:22:9d:
         45:73:e6:16:87:32:4a:86:4c:78:81:49:c1:d0:0c:44:b3:b9:
         0a:cf:4f:7f:71:93:ae:90:c0:44:b0:92:c3:7e:08:5f:d6:40:
         13:d0:d4:d7:0c:e6:4e:3f:b9:86:76:14:1a:e8:fc:95:ed:ff:
         aa:38:a8:3a:3c:5e:d2:9e:2f:18:f6:17:74:2b:3e:59:b3:eb:
         0c:a6:bd:ed:da:02:48:72:95:c9:f2:7b:2d:30:73:f9:84:c3:
         0a:6e:47:57:59:00:00:70:ef:e7:60:de:70:18:a1:3f:e9:8e:
         d4:c7:0e:9e:ea:fe:b2:19:43:f0:de:c2:69:79:34:ee:1e:21:
         26:23:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:30:50 2025 by rpki-client