Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          hNytnuEnc0i6i15ch/TiNnoePl4388nECMFxzLZdgP8=
Subject key identifier:   92:B4:14:47:13:B6:AA:B5:B8:43:DC:FE:CA:A1:38:AE:89:58:F6:EF
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       0199FBEBE70B18C7EF9587FAD527F93BD0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          13F3
Signing time:             Sun 19 Oct 2025 10:02:45 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:45 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:45 +0000
Files and hashes:         1: N0eHqNrggmbXdN8YP7o5Fb0Yns0.roa (hash: qT9/mEc5C1UH5p/xUpYvOvJn3BjOEx+x0C4t/XVyfCg=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: KteftfuCLlY97KoaaN4oxoE6OQJhTUdpPECQIqNUMU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:e7:0b:18:c7:ef:95:87:fa:d5:27:f9:3b:d0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Oct 19 10:02:45 2025 GMT
            Not After : Oct 20 10:02:45 2025 GMT
        Subject: CN=92b4144713b6aab5b843dcfecaa138ae8958f6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:a4:80:57:5f:9a:f2:8c:81:36:22:cc:c3:
                    d9:e6:d9:18:bd:c8:75:c9:b3:30:95:23:8f:39:4e:
                    ed:90:40:29:82:7c:4d:04:8e:d0:c8:bc:29:98:22:
                    09:11:14:d2:1f:bc:73:d8:73:a6:dd:de:d2:81:7f:
                    29:97:52:c5:d1:99:8a:19:55:c7:c9:c9:50:3b:4d:
                    d4:cc:db:06:43:e3:bf:95:31:a0:14:2e:80:22:9e:
                    68:42:3b:ae:7c:48:cf:a1:b1:d7:05:78:0e:7d:73:
                    29:f8:be:81:ca:d2:4a:dd:e6:e0:ab:b8:39:42:2c:
                    2c:32:2a:54:70:f9:a9:71:6b:74:a9:0d:36:d7:08:
                    3c:a1:37:03:e4:b3:a7:32:17:c8:0e:ba:db:2f:4e:
                    8b:d7:69:4f:81:47:ae:14:4b:62:3b:ba:2f:0f:85:
                    eb:28:9b:cc:f6:7f:ce:f5:95:0a:0a:0e:37:2f:a3:
                    22:d1:71:d9:50:dc:38:1f:da:a3:c6:2c:90:31:c6:
                    60:e6:1f:95:70:10:96:87:b3:d1:cb:06:d8:2f:ab:
                    11:25:63:36:2c:55:0d:23:fd:9d:3d:cf:29:26:b3:
                    3b:94:9c:19:65:d9:42:5d:af:63:6e:a5:54:d8:ca:
                    80:82:ea:0a:d8:b8:59:a8:54:cb:47:85:f6:44:c1:
                    95:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B4:14:47:13:B6:AA:B5:B8:43:DC:FE:CA:A1:38:AE:89:58:F6:EF
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8e:ad:3b:9b:de:bf:5c:32:9a:31:56:8d:35:5f:c4:b9:fa:
         a2:45:1a:04:52:12:bd:7d:f6:dd:a4:65:e0:28:c4:be:f3:a1:
         cd:71:15:07:cf:eb:40:be:e2:05:8c:dd:bc:55:75:47:08:62:
         63:f6:cd:86:63:73:f9:b1:be:bc:ac:57:79:5f:4b:d8:5d:56:
         13:19:d5:bc:9b:27:57:9c:6a:27:9a:92:5e:4b:01:f2:59:a0:
         ab:f4:b2:27:3a:4a:62:aa:c7:47:e8:18:2b:41:ad:43:a2:85:
         d8:cd:cc:eb:b0:1a:14:8a:dd:c4:16:af:ac:48:6d:3d:97:d0:
         ac:12:a1:a6:d8:4a:0e:f4:da:51:f4:e4:2b:d4:d2:be:1a:dd:
         e6:33:42:ea:c6:bc:6f:5d:21:b1:c8:1a:bc:18:f4:f6:8e:1a:
         cb:d9:eb:cf:47:6f:13:75:06:fb:4e:c1:7d:e9:fa:65:bf:00:
         65:38:8a:75:b6:38:5a:a9:2c:70:fb:d9:73:ab:40:f9:19:5d:
         38:24:62:ed:29:0b:05:30:3f:86:74:4a:dd:6e:98:62:e9:59:
         50:10:e5:90:da:68:5f:63:85:55:99:71:50:e6:88:5c:30:7b:
         f0:a2:62:08:33:b7:c7:83:38:5a:72:6b:b5:ba:a8:33:5f:b9:
         7c:1c:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:36 2025 by rpki-client