Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
File:                     7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft (raw, json)
Hash identifier:          uiQ7ZkOLC/XjPNH5uYFB8ToVOjeJLi5q2CWnUwtWsPA=
Subject key identifier:   2A:74:3B:D6:E9:A9:8B:FA:64:EA:1D:6E:52:AE:17:89:50:7A:AA:3F
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Certificate issuer:       /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial:       019A00A31530C752D32EA4AA8D1ADEEACCD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
Manifest number:          163F
Signing time:             Mon 20 Oct 2025 08:01:19 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:19 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:19 +0000
Files and hashes:         1: 7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl (hash: ywOyx745zMmQHX+8e4I5vfJSrkEbRtdHyxto8pkj708=)
                          2: mVLFfpsCTZXmz1USSK13lw0lI4E.roa (hash: MFOelRyO21tS7ErEnP3ifMi3vY1sgM39x3qUbFKHhSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:15:30:c7:52:d3:2e:a4:aa:8d:1a:de:ea:cc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
        Validity
            Not Before: Oct 20 08:01:19 2025 GMT
            Not After : Oct 21 08:01:19 2025 GMT
        Subject: CN=2a743bd6e9a98bfa64ea1d6e52ae1789507aaa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:f1:fe:c4:84:5f:86:51:0a:f6:f1:6d:ec:
                    ba:30:99:d4:17:1f:1a:1d:2e:dc:2e:fb:22:57:5c:
                    fc:76:64:fa:fc:1b:69:d2:95:76:fb:80:18:2f:f2:
                    01:4b:86:bf:ed:36:fb:a5:2b:ec:93:bb:c0:00:dd:
                    50:c1:85:4a:ee:81:36:37:90:f2:c0:e5:f6:9d:08:
                    70:e2:c0:57:2f:71:6e:52:dd:9a:cf:40:30:da:ba:
                    a7:64:29:8a:4c:4d:54:f0:8a:13:1a:08:30:55:93:
                    89:84:1d:86:dd:a5:29:a9:44:dd:67:f6:a8:4c:4a:
                    48:62:33:79:46:10:60:f1:47:37:c0:bc:d8:35:27:
                    c4:70:5c:f5:9c:37:40:6c:c1:0a:f6:ca:7f:8a:82:
                    83:27:0e:55:35:44:c9:95:f6:d0:4f:5e:fb:a6:de:
                    c1:e4:f0:7e:ea:8d:f2:49:b1:26:cf:26:bc:92:38:
                    2a:9a:54:e4:7f:2f:3e:aa:8b:ee:25:cc:a5:54:c5:
                    d9:09:35:88:61:7f:d4:56:ed:a4:db:1c:6f:55:a5:
                    08:6b:f6:b0:5d:c4:cf:fd:34:2e:6d:cc:04:b4:6b:
                    58:cb:d0:39:17:1a:17:18:b2:1e:e9:18:01:c9:35:
                    7c:ed:93:ea:6c:6f:81:11:4b:ef:06:9d:de:58:3e:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:74:3B:D6:E9:A9:8B:FA:64:EA:1D:6E:52:AE:17:89:50:7A:AA:3F
            X509v3 Authority Key Identifier:
                keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b1:10:d8:c8:16:9c:8c:1b:75:9c:db:a7:6f:cd:ce:dc:af:
         e2:6a:bd:ce:1b:f1:d6:0f:58:b3:bf:4f:13:89:99:ef:85:3e:
         77:44:af:37:fc:fc:cd:8a:70:d4:e5:74:34:18:8c:b7:1c:8a:
         34:35:a1:ee:56:67:0e:b6:0d:b0:4c:da:0b:c9:cf:1c:73:05:
         e9:5a:c0:56:59:c5:1e:ee:e7:22:75:d6:37:ca:51:ad:af:f4:
         4d:36:41:3d:7a:25:85:95:b9:ba:cd:0f:f4:a9:6c:0e:b9:8d:
         e2:22:26:d1:cb:98:8b:82:ea:a9:4b:34:b5:a4:f4:dc:35:af:
         5b:48:9f:fa:1a:c4:ed:30:7f:1d:8f:6a:84:8f:94:a8:7d:cb:
         41:b9:de:39:08:41:b9:fd:32:fd:1e:5a:62:85:87:d4:07:ed:
         77:c0:e5:2d:c2:db:32:01:dc:4b:8f:aa:60:8f:97:f9:36:6d:
         3c:f6:ea:85:42:d6:54:36:43:b1:0a:79:93:1f:09:4a:b6:18:
         d1:9c:a0:0b:b9:4a:9c:e3:c7:ec:5f:22:f6:80:21:b3:4a:5e:
         67:3a:9d:52:51:b9:ed:05:9f:81:64:8b:d4:80:4c:35:ff:85:
         b4:13:41:bb:1d:10:30:d8:5a:47:62:86:92:b9:2b:b5:0b:07:
         28:7e:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:12:35 2025 by rpki-client