Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
File:                     fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json)
Hash identifier:          kRUsEFw0/+T5KtE8LETiyudSih9UBV8xAcxod2l28p0=
Subject key identifier:   9B:A5:C0:0D:EB:42:F7:C1:FA:E3:A2:9E:11:F8:D4:70:74:28:9F:CD
Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66
Certificate issuer:       /CN=7deec7ebb5cc873cc7179660acfca804d911ab66
Certificate serial:       0199FA69FA8632CB9C94E6A991314496D3A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
Manifest number:          0516
Signing time:             Sun 19 Oct 2025 03:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:13 +0000
Files and hashes:         1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=)
                          2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: sTG/bHiJd20kvMWiVHgouz8WFSGr8H47URXF+U71u6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:fa:86:32:cb:9c:94:e6:a9:91:31:44:96:d3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66
        Validity
            Not Before: Oct 19 03:01:13 2025 GMT
            Not After : Oct 20 03:01:13 2025 GMT
        Subject: CN=9ba5c00deb42f7c1fae3a29e11f8d47074289fcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:1d:a9:2d:cf:c5:50:a1:41:c7:51:f6:8d:
                    39:36:6d:de:3d:e9:75:fb:02:bb:61:70:b1:3a:03:
                    f4:28:f3:dd:ce:44:6c:23:a0:6e:1b:3d:22:4d:cf:
                    59:47:89:50:43:e3:ef:a3:13:0e:1b:8b:6d:aa:4d:
                    fe:e1:43:aa:dc:13:be:aa:fb:49:58:6b:2f:cd:f6:
                    58:86:98:3a:0b:54:31:01:5b:72:9f:c4:4f:92:67:
                    50:3b:b8:7b:8f:16:d7:ee:e4:75:96:b3:48:3a:39:
                    47:03:e1:a9:aa:5f:bc:ea:12:ba:8a:9a:b5:47:6b:
                    4b:88:4c:6d:61:3f:f4:5a:9c:6d:0d:48:b5:cc:04:
                    95:22:3d:33:c4:12:b1:c8:25:a4:71:3c:2f:07:f9:
                    d5:74:03:57:d4:43:eb:6c:2f:be:69:85:33:ff:08:
                    aa:ac:61:60:66:8b:4d:af:a5:2e:7d:12:e4:c0:b4:
                    79:3f:12:b8:97:5c:d1:70:8e:73:de:32:8b:ca:78:
                    cb:f3:04:f3:5a:7d:27:85:1a:9c:43:c6:de:d8:d1:
                    ba:f8:a1:75:71:d3:5f:25:5c:15:f3:08:26:fa:23:
                    b5:87:1b:69:d9:8d:0b:3a:0f:91:08:a0:1c:77:c0:
                    06:1b:17:11:8b:3b:bd:73:b7:c9:a5:e8:0b:ab:ab:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A5:C0:0D:EB:42:F7:C1:FA:E3:A2:9E:11:F8:D4:70:74:28:9F:CD
            X509v3 Authority Key Identifier:
                keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:86:a1:58:86:24:b7:25:4e:2f:4d:29:ab:cf:46:02:1b:6e:
         88:c8:91:2c:dc:ca:5e:92:07:66:e6:45:dc:db:d7:87:74:cc:
         bb:bd:5b:84:4d:d7:74:a4:5a:a2:1b:61:1d:d0:83:c8:45:47:
         50:1d:30:11:ed:f7:af:ac:ba:63:9f:59:0d:b6:3a:e1:a4:b3:
         a7:94:8d:29:3a:22:64:e4:8a:1b:a1:d6:c1:a1:5d:04:22:6a:
         a9:c9:43:d7:6d:b0:b1:f3:1c:1e:fa:14:b2:4a:62:ce:e4:79:
         e5:c9:29:9e:50:ed:94:e6:5d:d4:bc:9a:fb:18:3c:a9:0d:cc:
         eb:a4:05:4b:db:f3:d2:e4:42:62:42:31:c8:23:e0:97:e4:ed:
         e0:f3:c0:74:ab:98:e0:2e:5f:a4:a4:fd:c4:9c:ab:61:97:da:
         43:e9:c9:22:86:c5:85:3c:03:72:50:be:36:4e:e4:fb:6c:f6:
         86:1c:46:01:26:59:1d:db:ab:4b:f5:5d:45:63:4f:12:9a:a5:
         ab:83:45:23:bf:d7:64:95:df:43:1e:12:04:97:2d:1f:4b:19:
         9f:41:d6:0f:6f:49:0a:34:75:1b:e8:9f:e7:ab:f1:ac:68:2f:
         4b:af:d6:be:5f:43:39:c5:97:cb:79:50:ab:b5:1e:57:16:a2:
         67:9d:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:54 2025 by rpki-client