Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          Lehy+q5N4oFNAWEPNTtq2zVjqhufX2gkeS7B5YuKVBU=
Subject key identifier:   07:F6:B3:A6:B8:F8:C4:03:60:B5:EC:DA:F1:2D:9E:76:55:94:C4:7D
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       0199FCFD7B0AA9D8CBAF86904C49D8462F0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          0663
Signing time:             Sun 19 Oct 2025 15:01:34 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:34 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:34 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: +rVpNGaKX9MeLgkiT+f6iOmiHWekrIaM77J9UAYF+j4=)
                          2: 8VhhkSiakyjyds2HL3KVl5SAjHk.roa (hash: XMxyFpkWV1CCq0kdHYWIMKgwA50BX4tfunpr2JyfxpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:7b:0a:a9:d8:cb:af:86:90:4c:49:d8:46:2f:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Oct 19 15:01:34 2025 GMT
            Not After : Oct 20 15:01:34 2025 GMT
        Subject: CN=07f6b3a6b8f8c40360b5ecdaf12d9e765594c47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:88:be:34:6d:25:6f:4d:9c:c3:53:b6:df:
                    f6:a0:74:eb:09:4c:e0:58:42:2c:28:9e:a7:94:9f:
                    bf:e0:9e:38:bf:2d:99:b9:66:00:80:88:97:a5:bd:
                    af:2f:8f:d9:1c:ce:8e:87:b8:35:17:35:48:31:c7:
                    74:7a:0f:20:89:36:6a:0f:85:8f:60:87:ae:73:a1:
                    89:e6:e1:eb:79:23:7b:1c:2a:19:44:ae:64:62:44:
                    49:5b:8c:84:30:05:84:74:ce:1f:5e:16:34:5d:e4:
                    cc:05:1d:d3:74:7c:2e:07:ad:d9:8e:b9:21:6d:0d:
                    10:1c:79:43:8b:8e:2d:34:23:94:72:3d:0f:f9:8f:
                    70:c0:5a:88:69:ad:1d:ab:b6:21:1e:1b:f3:d1:0d:
                    23:2b:89:13:5c:14:e4:9a:40:87:d0:09:2e:3d:09:
                    77:fe:20:c7:40:36:a6:28:9b:92:6d:47:4b:c2:66:
                    9f:49:3d:78:b8:ae:f9:58:65:7a:f8:a3:9f:18:c6:
                    ee:d6:e4:92:d5:0a:a6:30:c3:ec:d5:f0:5f:0f:95:
                    fd:e5:fb:f2:b5:b3:7e:8e:f2:d2:87:47:4a:50:4e:
                    8a:b8:57:5c:97:da:e8:2a:b3:8c:5f:be:d5:cf:eb:
                    2c:c6:13:bf:ee:12:ca:fb:bf:f6:46:cb:51:78:98:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F6:B3:A6:B8:F8:C4:03:60:B5:EC:DA:F1:2D:9E:76:55:94:C4:7D
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:9f:5d:5f:e0:ca:83:7e:02:09:4f:d4:7d:6b:e7:e4:a5:
         50:9a:5c:af:da:3d:18:bb:78:04:28:5b:7d:6b:79:8f:b5:7b:
         32:76:69:f8:69:57:92:cc:d7:96:32:ff:a2:e7:37:98:d0:27:
         24:46:5a:db:61:dd:e5:d1:bb:32:b9:f4:9d:1f:84:d7:a8:15:
         3d:50:4f:12:cf:3b:44:2f:e3:6a:67:2f:12:5f:3a:41:79:10:
         ae:6b:19:f0:69:fc:30:8e:6c:48:ee:44:14:9c:16:ad:c9:1b:
         6b:47:fa:11:e1:7b:11:41:05:18:64:f6:11:b5:b5:1f:f1:6e:
         4f:a3:3d:70:4f:d4:b2:3b:86:c0:ed:32:3b:b5:e9:26:f3:6b:
         a2:a3:96:b2:f5:d6:fb:37:f4:d1:64:0a:f1:be:8d:b4:8b:8c:
         9b:43:9d:6a:85:2b:5b:ae:32:eb:40:ea:54:ea:8d:a3:1b:37:
         aa:a2:09:2a:bf:c2:89:56:b7:c0:3b:14:a2:9d:62:70:02:b6:
         78:b7:42:ca:1c:1e:65:2a:6e:d9:bd:7b:cf:02:63:94:02:09:
         09:60:c8:a0:d6:39:55:4e:f7:41:f6:b0:7f:ce:99:47:07:b9:
         82:a6:b3:76:b1:fe:d8:d8:f4:f5:60:18:b4:6d:1f:33:de:50:
         bd:8f:4f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:10 2025 by rpki-client